A collection of links related to Linux kernel security and exploitation
-
Updated
Sep 10, 2026
#
kernel-exploitation
Here are 56 public repositories matching this topic...
Linux privilege escalation auditing tool
linux-kernel exploits kernel-exploitation hacking-tool lpe security-tools linux-exploits privilege-escalation-exploits applicable-exploits kernel-exploits published-exploits
-
Updated
Mar 20, 2026 - Shell
📦 Make security testing of K8s, Docker, and Containerd easier.
linux docker kubernetes container blackhat exploits k8s cloud-native penetration vulnerabilities kernel-exploitation privilege-escalation hacktools container-security penetration-testing-tools kubernetes-security hitb k8s-penetration-toolkit container-escape cloud-native-security
-
Updated
May 1, 2026 - Go
My proof-of-concept exploits for the Linux kernel
-
Updated
Sep 11, 2025 - C
Metarget is a framework providing automatic constructions of vulnerable infrastructures.
kubernetes container target cloud-native vulnerabilities kernel-exploitation privilege-escalation container-security kubernetes-security container-escape cloud-native-security vulnerable-infrastructure vulnerable-scenes vulnerable-infrastructures
-
Updated
Jul 22, 2026 - Python
CTF kernel exploitation notes, PoCs, exploits, and writeups.
linux-kernel ctf-writeups qemu pwn ctf ebpf kernel-exploitation uaf smap userfaultfd kpti smep-bypass dirty-pipe linux-kernel-exploitation kernel-pwn pipe-buffer msg-msg modprobe-path kernel-rop
-
Updated
Sep 20, 2026 - C
KASLD defeats Linux kernel KASLR from a local process — recovering the virtual and physical memory layout where a leak or side channel allows, and narrowing it to the smallest set of placements the evidence supports otherwise.
linux security kernel linux-kernel pentesting kernel-exploitation aslr ctf-tools side-channel-attacks exploit-development kernel-exploit aslr-bypass kaslr linux-kaslr kernel-security kaslr-bypass microarchitectural-attacks linux-aslr kernel-aslr
-
Updated
Sep 20, 2026 - C
x64 Windows kernel code execution via user-mode, arbitrary syscall, vulnerable IOCTLs demonstration
windows cli kernel driver windows-10 memory-hacking device-driver drivers kernel-exploitation code-execution kernel-exploit kernel-exploits smep smep-bypass
-
Updated
Jul 6, 2022 - C++
Linux Kernel exploitation Tutorial.
-
Updated
Jun 30, 2020 - C
Linux kernel module implementation & exploitation (pwn) labs.
-
Updated
Jan 26, 2022 - C
Android kernel exploitation for CVE-2022-20409
-
Updated
Oct 17, 2024 - Python
Helper script for spawning a minimal Ubuntu 16.04 container ready for building kernel exploits (~4.x)
linux exploit ubuntu1604 kali-linux kernel-exploitation cross-compilation systemd-nspawn exploit-development pen-200
-
Updated
Jun 24, 2024 - Shell
Kernel-mode process terminator using a signed BYOVD driver. Works on all Windows 10/11. No offsets, no PDB. Rust.
rust windows-kernel evasion offensive-security kernel-exploitation red-team redteam av-bypass vulnerable-drivers edr-bypass edr-evasion byovd process-termination vulnerable-driver av-killer edr-killer
-
Updated
Sep 3, 2026 - Rust
Executing Kernel Routines via Syscall Table Hijack (Kernel Code Execution)
-
Updated
Jun 7, 2026 - C++
Triggering and Analyzing Android Kernel Vulnerability CVE-2019-2215
-
Updated
Sep 4, 2022 - C++
Linux & Android Kernel Vulnerability research and exploitation
linux pwn exploitation kernel-exploitation privilege-escalation lpe linux-kernel-hacking kernel-bypass vulnerability-research privilege-escalation-exploits kernel-security
-
Updated
Dec 12, 2023
All Linux privilege Escalation methods are listed under one MarkDown🦁 i.e Kernel Exploits to Cronjobs
linux exploits root kernel-exploitation privilege-escalation linux-privilege-escalation linuxkernel linux-privesc exploit-scripts
-
Updated
Jan 29, 2023 - C
Windows BYOVD research on DCRCVDrv.sys and Alinubx.sys, reverse engineering their kernel primitives, IOCTL surfaces, and detection opportunities.
reverse-engineering antivirus kernel-mode ring0 kernel-exploitation ioctl edr av-bypass windows-internals windows-security edr-evasion threatresearch byovd windows-exploit kernel-security process-termination vulnerable-driver av-killer edr-killer driver-security
-
Updated
Sep 15, 2026 - Rust
RingKiller — BYOD PoC for vulnerable driver DCRCVDrv.sys. Abuses IOCTL 0x2205C0 to kill arbitrary processes from ring 0 via ZwTerminateProcess. EDR/AV termination primitive. Lab only.
windows-kernel evasion offensive-security kernel-exploitation red-team av-bypass vulnerable-drivers edr-bypass byovd process-termination av-killer edr-killer
-
Updated
Sep 12, 2026 - C
Exploit scripts for ctf challenges that involves linux kernel pwning
-
Updated
Dec 10, 2024 - C
Add this topic to your repo
To associate your repository with the kernel-exploitation topic, visit your repo's landing page and select "manage topics."