xairy / linux-kernel-exploitation
A collection of links related to Linux kernel security and exploitation
xairy / linux-kernel-exploitation
The-Z-Labs / linux-exploit-suggester
Linux privilege escalation auditing tool
mito753 / Kernel-Exploit-Dojo
CTF kernel exploitation notes, PoCs, exploits, and writeups.
bcoles / kasld
KASLD defeats Linux kernel KASLR from a local process — recovering the virtual and physical memory layout where a leak or side channel allows, and narrowing it to the smallest set of placements the evidence supports otherwise.
DeathShotXD / 0xM0nCrush
Kernel-mode process terminator using a signed BYOVD driver. Works on all Windows 10/11. No offsets, no PDB. Rust.
DeathShotXD / 0xCr0ssCrush
Windows BYOVD research on DCRCVDrv.sys and Alinubx.sys, reverse engineering their kernel primitives, IOCTL surfaces, and detection opportunities.
security-attack / RingKiller
RingKiller — BYOD PoC for vulnerable driver DCRCVDrv.sys. Abuses IOCTL 0x2205C0 to kill arbitrary processes from ring 0 via ZwTerminateProcess. EDR/AV termination primitive. Lab only.