kernel-exploit

Star

Here are 24 public repositories matching this topic...

Language: All

Filter by language

All 24 C 10 C++ 7 Shell 2 Objective-C 1 Python 1 Rust 1

Sort: Most stars

Sort options

Most stars Fewest stars Most forks Fewest forks Recently updated Least recently updated

hardenedlinux / linux-exploit-development-tutorial

Star 568

a series tutorial for linux exploit development to newbie.

linux tutorials kernel-exploit

Updated Apr 12, 2024
C

bcoles / kasld

Star 459

Kernel Address Space Layout Derandomization (KASLD) - A collection of various techniques to infer the Linux kernel base virtual address as an unprivileged local user, for the purpose of bypassing Kernel Address Space Layout Randomization (KASLR).

linux kernel linux-kernel kernel-exploit kaslr linux-kaslr

Updated Apr 13, 2024
C

kkent030315 / anycall

Star 359

x64 Windows kernel code execution via user-mode, arbitrary syscall, vulnerable IOCTLs demonstration

windows cli kernel driver windows-10 memory-hacking device-driver drivers kernel-exploitation code-execution kernel-exploit kernel-exploits smep smep-bypass

Updated Jul 6, 2022
C++

evil-mhyprot-cli

kkent030315 / evil-mhyprot-cli

Star 339

A PoC for Mhyprot2.sys vulnerable driver that allowing read/write memory in kernel/user via unprivileged user process.

windows kernel exploit driver kernel-exploit kernel-exploits mhyprot2 mhyprot

Updated Jul 3, 2021
C++

A2nkF / macOS-Kernel-Exploit

Star 292

macOS Kernel Exploit for CVE-2019-8781.

macos exploit kernel-exploit

Updated Oct 15, 2019
C

Lazenca / Kernel-exploit-tech

Star 271

Linux Kernel exploitation Tutorial.

linux-kernel tutorials kernel-exploitation tutorial-exercises linux-kernel-hacking kernel-exploit

Updated Jun 30, 2020
C

RKX1209 / kernel_exploit_world

Star 255

Tutorial for writing kernel exploits

tutorial linux-kernel kernel-exploit

Updated Aug 10, 2025
C

0xflux / Hells-Hollow

Star 188

Hells Hollow Windows 11 Rootkit technique to Hook the SSDT via Alt Syscalls

kernel exploit rootkit malware syscalls ssdt kernel-exploit ssdt-hook windows-11 windows11 ssdt-plug ssdt-hooking alt-syscalls alternative-syscalls

Updated Aug 31, 2025
Rust

kkent030315 / anymapper

Star 177

x64 Windows kernel driver mapper, inject unsigned driver using anycall

windows kernel windows-10 injector code-injection code-execution kernel-exploit kernel-exploits

Updated Feb 14, 2024
C++

TuxSH / universal-otherapp

Star 148

Userland -> Kernel11 -> Arm9 otherapp for 3DS system versions 1.0 to <= 11.15

exploit nintendo-3ds 3ds kernel-exploit

Updated Jan 7, 2023
C

kkent030315 / MsIoExploit

Star 114

Exploit MsIo vulnerable driver

windows kernel kernel-exploit kernel-exploits cve-2019-18845

Updated Aug 12, 2021
C++

A2nkF / unauthd

Star 85

A local privilege escalation chain from user to kernel for MacOS < 10.15.5. CVE-2020–9854

macos exploit kernel-exploit

Updated Oct 15, 2020
Objective-C

V-i-x-x / win11-kernel-execution-syscall-hijack

Star 48

Executing Kernel Routines via Syscall Table Hijack (Kernel Code Execution)

kernel reverse-engineering kernel-exploitation kernel-exploit windows-11

Updated Jun 15, 2025
C++

BullyWiiPlaza / tcpgecko

Star 42

The Nintendo Wii U TCP Gecko Installer engine homebrew application for game modding and research

homebrew nintendo tcp exploit assembly wiiu hacking ppc trainer homebrew-launcher cheat-codes game-modding kernel-exploit cafe-codes wiiu-game-mod sd-cheat-codes cafe-codehandler jgecko-u

Updated Mar 27, 2024
C

c3r34lk1ll3r / CVE-2017-5123

Star 32

PoC CVE-2017-5123 - LPE - Bypassing SMEP/SMAP. No KASLR

exploit writeup kernel-exploit cve-2017-5123

Updated Jun 26, 2020
C

thieveshkar / Offensive-Security-Forensics-Portfolio

Star 19

A portfolio demonstrating advanced blue and red team skills, including: SSH MFA implementation, Volatility-based memory forensics to detect code injection, Splunk threat hunting (BOTS v3), Wireshark C2 analysis, and kernel exploitation walkthroughs (LinPEAS, VulnHub).

splunk incident-response penetration-testing wireshark siem cyber-security volatility privilege-escalation threat-analysis overlayfs memory-forensics kernel-exploit apiit staffordshire-university

Updated Oct 19, 2025

JGoyd / Glass-Cage-iOS18-CVE-2025-24085-CVE-2025-24201

Star 16

Glass Cage is a zero-click PNG-based RCE chain in iOS 18.2.1, exploiting WebKit (CVE-2025-24201) and Core Media (CVE-2025-24085) to achieve sandbox escape, kernel-level access, and device bricking. Triggered via iMessage, it enables full compromise with no user interaction.

ios rce imessage privilege-escalation zeroday kernel-exploit sandbox-escape zero-click cve-2025-24085 cve-2025-24201