Open-source alternatives to Pwning Toolset

angrop

Kernel SLUB memory visualization

KASLD derandomises the Linux kernel's virtual and physical memory layout as an unprivileged local user.

Detect Linux rootkits which use signals to elevate process privileges.

CVE-2023-0386 analysis and Exp

This project is a technical repository of kernel exploit guides, memory corruption analyses, and archived methods for gaining root access. It serves as a centralized library of security flaws and reproduction steps used for testing system protections and verification. The documentation focuses on the Linux kernel, providing technical breakdowns of how memory management errors and multi-page write techniques allow for the modification of read-only files. It details the use of race conditions to achieve administrative privilege escalation. The repository covers a broad surface of security rese

Blog Post: https://blog.doyensec.com/2025/10/08/ksmbd-3.html

Transform vmlinuz into a fully debuggable vmlinux that can be used with /proc/kcore

Check linux sources dump for known CVEs.

Android kernel exploit for CVE-2025-38352, previously exploited in-the-wild. Targets vulnerable x86_64 Linux kernels v5.10.x.

This repository contains useful tools for Linux kernel security research, called the kernelXDK:

Everything you need to build and run Linux and Android kernels for exploit development

Meltdown is a set of software utilities designed to bypass kernel address randomization and dump physical memory to exploit hardware-level security vulnerabilities. It serves as a proof of concept for the Meltdown hardware vulnerability, enabling the reading of protected kernel memory on affected processors. The tool provides capabilities to identify the secret randomization offset of the direct physical map to locate kernel memory. It also includes functionality to export large segments of physical memory into hexdump format for the recovery of sensitive strings and passwords. The project c

This repo contains my researches on Dirtypipe and Android.

out-of-tree kernel {module, exploit} development tool

Next-Generation Linux Kernel Exploit Suggester

A lightweight kernel coverage runner that wraps any command powered by LD_PRELOAD for fork/pthread interception using KCOV & HW Trace Buffer.

Exploits for a couple of forever-day bugs in the ARM Mali Utgard GPU kernel driver - as seen in DistrictCon 1.0 Junkyard!

Privilege Escalation via a Page Use-After-Free in Qualcomm's AI Accelerator Linux Kernel Driver

Linux Kernel N-day Exploit/Analysis.

A tool to recover a fully analyzable .ELF from a raw kernel, through extracting the kernel symbol table (kallsyms)

gdb-pt-dump is a gdb script to enhance debugging of a QEMU-based virtual machine.

Research artifacts, PoC scripts, and lab assets for the Copy Fail Linux local privilege escalation writeup on https://4xura.com/binex/kernel/copy-fail