Showing 1 - 7 of 7

Files from Andrey Konovalov

First Active	2017-02-27
Last Active	2018-08-09

Linux Kernel 4.14.7 (Ubuntu 16.04 / CentOS 7) Arbitrary File Read: Posted Aug 9, 2018; Authored by Andrey Konovalov; Linux Kernel version 4.14.7 (Ubuntu 16.04 / CentOS 7) arbitrary file read exploit with KASLR and SMEP bypass.; tags | exploit, arbitrary, kernel; systems | linux, ubuntu, centos; advisories | CVE-2017-18344; SHA-256 | 1ae85ec6d04c32f099ad5a0ffd9c537802c71e873dfb28f79abf9a426f8557a6; Download | Favorite | View

Linux Kernel UDP Fragmentation Offset (UFO) Privilege Escalation: Posted Aug 3, 2018; Authored by h00die, Brendan Coles, Andrey Konovalov | Site metasploit.com; This Metasploit module attempts to gain root privileges on Linux systems by abusing UDP Fragmentation Offload (UFO). This exploit targets only systems using Ubuntu (Trusty / Xenial) kernels 4.4.0-21 <= 4.4.0-89 and 4.8.0-34 <= 4.8.0-58, including Linux distros based on Ubuntu, such as Linux Mint. The target system must have unprivileged user namespaces enabled and SMAP disabled. Bypasses for SMEP and KASLR are included. Failed exploitation may crash the kernel. This Metasploit module has been tested successfully on various Ubuntu and Linux Mint systems, including: Ubuntu 14.04.5 4.4.0-31-generic x64 Desktop; Ubuntu 16.04 4.8.0-53-generic; Linux Mint 17.3 4.4.0-89-generic; Linux Mint 18 4.8.0-58-generic; tags | exploit, kernel, root, udp; systems | linux, ubuntu; advisories | CVE-2017-1000112; SHA-256 | f3e398dc7268af675856d83dae02dec9fd8bde412098486a7565fb7cdd8541e2; Download | Favorite | View

AF_PACKET packet_set_ring Privilege Escalation: Posted May 17, 2018; Authored by Brendan Coles, Andrey Konovalov | Site metasploit.com; This Metasploit module exploits a heap-out-of-bounds write in the packet_set_ring function in net/packet/af_packet.c (AF_PACKET) in the Linux kernel to execute code as root (CVE-2017-7308). The bug was initially introduced in 2011 and patched in version 4.10.6, potentially affecting a large number of kernels; however this exploit targets only systems using Ubuntu Xenial kernels 4.8.0 < 4.8.0-46, including Linux distros based on Ubuntu Xenial, such as Linux Mint. The target system must have unprivileged user namespaces enabled and two or more CPU cores. Bypasses for SMEP, SMAP and KASLR are included. Failed exploitation may crash the kernel. This Metasploit module has been tested successfully on Linux Mint 18 (x86_64) with kernel versions: 4.8.0-34-generic; 4.8.0-36-generic; 4.8.0-39-generic; 4.8.0-41-generic; 4.8.0-42-generic; 4.8.0-44-generic; 4.8.0-45-generic.; tags | exploit, kernel, root; systems | linux, ubuntu; advisories | CVE-2017-7308; SHA-256 | 7b4f48c24e371972810721c416bade431b286fec0e3a136c171f4ecb92af8692; Download | Favorite | View

Linux Kernel 3.x usb-midi Local Privilege Escalation: Posted May 12, 2017; Authored by Andrey Konovalov; Linux kernel version 3.x (Ubuntu 14.04 / Mint 17.3 / Fedora 22) double-free usb-midi SMEP local privilege escalation exploit.; tags | exploit, kernel, local; systems | linux, fedora, ubuntu; advisories | CVE-2016-2384; SHA-256 | e7882ec726796b90a0e6bf5db2b33500a6997e2fba0c1e07b3cf8985646d15b1; Download | Favorite | View

Linux Kernel SO_SNDBUFFORCE / SO_RCVBUFFORCE Local Privilege Escalation: Posted May 12, 2017; Authored by Andrey Konovalov; Linux kernel versions 3.11 through 4.8 O_SNDBUFFORCE and SO_RCVBUFFORCE local privilege escalation exploit.; tags | exploit, kernel, local; systems | linux; advisories | CVE-2016-9793; SHA-256 | 3f9a6416a28509909106dbad3e284de2a20f84d964933b9948e0de462f67f961; Download | Favorite | View

Linux Kernel 4.4.0 Ubuntu DCCP Double-Free Crash: Posted Feb 27, 2017; Authored by Andrey Konovalov; Linux kernel version 4.4.0 (Ubuntu) DCCP double-free crash denial of service proof of concept exploit.; tags | exploit, denial of service, kernel, proof of concept; systems | linux, ubuntu; advisories | CVE-2017-6074; SHA-256 | a0f4f346bb3922a65ad83f6434b6f4f0bf3fb14dd45ace78225df3ddb92a4015; Download | Favorite | View

Linux Kernel 4.4.0 Ubuntu DCCP Double-Free Privilege Escalation: Posted Feb 27, 2017; Authored by Andrey Konovalov; Linux Kernel version 4.4.0 (Ubuntu) DCCP double-free privilege escalation exploit that includes a semi-reliable SMAP/SMEP bypass.; tags | exploit, kernel; systems | linux, ubuntu; advisories | CVE-2017-6074; SHA-256 | d95a6320998d1c07f0dc742ce98f62afafaa9089380d2236114f837209858df1; Download | Favorite | View

Page 1 of 1 Back 1 Next

Top Authors In Last 30 Days