Tools

lakshmidesai/cve-2016-8655

Linux kernel local privilege escalation exploit for CVE-2016-8655, targeting AF_PACKET race condition on Ubuntu 16.04 x86_64 to gain root shell via…

g1nt0n1x/copy-fail-cve-2026-31431-shell

PoC shell exploit for CVE-2026-31431 (copy_fail) — Linux LPE via AF_ALG + splice page-cache overwrite. Single-shot, no race condition, kernel…

adityabhatt3010/cve-2026-31431

Local privilege escalation exploit for CVE-2026-31431, abusing AF_ALG AEAD socket handling to achieve root shell access on vulnerable Linux kernels.

h1d3r/copy-fail_lpe_interactive

Exploit for CVE-2026-31431, a Linux kernel page cache corruption vulnerability, providing interactive root shell and non-interactive command…

dennisdgr/cve-2026-31431-poc

An adapted version of the copy fail exploit to use parameters instead of dropping you into a root shell

shur1k-n/project-pwnag0dchi

A dope AF repo of all customized plugins & configurations I use as seen on my socials / YouTube. Helpful guides and troubleshooting too.

pavel-odintsov/fastnetmon

Very fast DDoS sensor with sFlow/Netflow/IPFIX/SPAN support

vectra-ai-research/maad-af

MAAD Attack Framework - An attack tool for simple, fast & effective security testing of M365 & Entra ID (Azure AD).

sgkdev/page_inject

CVE-2026-31431-killed page-cache exploit — code exec into containers sharing the same image layer

sgkdev/bad_garbage

CVE-2026-53361 AF_UNIX GC vs MSG_PEEK use-after-free container escape

zephrfish/copyfail-cve-2026-31431

Linux kernel LPE exploit (CVE-2026-31431) using AF_ALG + splice to overwrite setuid-binary page cache for root. No race conditions, works on all…

sammwyy/copyfail-rs

Copy Fail exploit (CVE-2026-31431) but in Rust.

b5null/cve-2026-31431-c

Local privilege escalation exploit for Linux kernel CVE-2026-31431, abusing AF_ALG and splice to patch /usr/bin/su and gain root.

suominen/cve-2025-39964

Patch-status tracker for CVE-2025-39964, a Linux AF_ALG race condition enabling local privilege escalation, recording per-distribution fix…

beatbeast007/linux-copyfail-c-version-cve-2026-31431

Clean C implementation of the Copy Fail Linux local privilege escalation exploit (CVE-2026-31431). Uses AF_ALG and splice to overwrite page cache of…

mahdi13830510/cve-2026-31431-mitigation-suite

Kernel-runtime defense framework for AF_ALG vulnerabilities, featuring eBPF socket tracing, Ansible hardening, and a crypto auditor for drift…

juliosuas/copyfail-guard

Fast, auditable Linux mitigation for CVE-2026-31431 Copy Fail: algif_aead block, verification, and AF_ALG seccomp hardening.