Catálogo de exploits

Bulk scanner and mass exploitation tool for CVE-2026-41940 on cPanel/WHM, built for automated target validation and high-speed multi-threaded execution.

Easy-to-understand version of CVE-2026-31431

Exploitation of CVE-2023-44604. Using a Kali Linux VM (attacker) and a Debian 11 server VM (victim)

CVE-2026-31431 (copy.fail) — adapted for constrained Java execution environments via FFM syscall layer + javac annotation processor delivery

CVE-2025-59528 Proof of Concept

对 CVE-2026-31431 的复现分析、C 改编的 exp。

george1-adel/CVE-2026-41940_exploit

CVE-2026-43500 / CVE-2026-31431 / CVE-2026-43284 golang hotfix

CVE-2026-31431 - Copy Fail PoC (Python 3.10+)

DaemonSet с реализацией временной меры для митигации уязвимости Copy Fail (CVE-2026-31431)

Copy Fail - CVE-2026-31431

DaemonSet для митигации уязвимости CVE-2026-31431 (Copy Fail)

Wazuh SCA Linux hardening policy for Copy Fail (CVE-2026-31431)

根据py版本，升级成了c和rust版本，带加密混淆、0依赖（仅技术学习与分享）

Temporarily removes the root password using CVE-2026-31431

ryan2929/CVE-2026-31431

Detection rules for CVE-2026-31431 Linux LPE Vulnerability - Credit: (Copy Fail) https://copy.fail

Razielx64/CVE-2025-69606-GSVoIP-XSS

BPF-LSM mitigation for CVE-2026-31431 (Copy Fail) — denies AF_ALG socket creation cluster-wide

Penetration test report for MegaQuagga Publishing documenting a six-phase engagement that chained CVE-2019-9978 and CVE-2023-4842 to achieve unauthenticated Remote Code Execution and a persistent Meterpreter session. Includes full methodology, exploitation evidence, and prioritized remediation recommendations.

HackTheBox — CCTV (Easy/Linux) | CVE-2024-51482 + SqlMap+ SSH Key + Root

My first hands-on Intel 471 threat hunting workshop experience investigating CVE-2023-46604 using Elastic SIEM, vulnerability intelligence, and post-exploitation detection.

vesjolyjd/Kaspersky_CVE-2024-3094

This project explores whether modern OpenSSH reveals valid usernames through subtle response or timing differences. CVE-2016-6210 user enumeration investigation ( Welch's t-test, Cohen's d, and detection engineering ) on a controlled lab on Ubuntu 22.04.5 LTS, it also examines the traces such attempts leave behind and how they can be detected..

Detection, mitigation, and reverse-engineering tooling for CVE-2026-41940 (SessionScribe): the cPanel/WHM unauthenticated session-forgery vulnerability disclosed 2026-04-28. Defense-in-depth active mitigation shim, ModSec rule pack, remote probe, on-host IOC scanner, and per-tier RE snapshot collector. GPL v2.

Black-box penetration test against HackSudo Thor : CVE-2014-6271 Shellshock RCE through Apache mod_cgi, chained with sudo misconfiguration and bash eval injection for full privilege escalation. Includes custom CSRF-aware brute force tooling and Metasploit RPC automation.

Temporarily removes the root password using CVE-2026-31431

Remediation report for MegaQuagga Publishing validating the mitigation of CVE-2019-9978 through progressive defensive layering. Documents reverse proxy insertion, ModSecurity WAF deployment, Graylog SIEM integration, and SSL/TLS enforcement using multi-stage Wireshark PCAP analysis across pfSense WAN and LAN interfaces.

TheMursalin/CVE-2025-32432

Winrar Exploit CVE-2023-38831