CVE-2023-0386

This PoC exploits CVE-2023-0386, a Linux kernel vulnerability in the OverlayFS subsystem, to achieve local privilege escalation (LPE). It uses FUSE to manipulate file attributes and overlayfs mounts to gain root privileges.

This repository contains a proof-of-concept exploit for CVE-2023-0386, a local privilege escalation vulnerability in the Linux kernel's overlay filesystem. The exploit leverages a FUSE filesystem to create a malicious file with elevated privileges, which is then copied to an overlay filesystem to gain root access.

This PoC exploits CVE-2023-0386, a Linux OverlayFS vulnerability, to achieve local privilege escalation (LPE) by manipulating file capabilities and user namespaces. The exploit uses FUSE to create a malicious filesystem and overlay mounts to trigger the vulnerability.

This repository contains a working proof-of-concept exploit for CVE-2023-0386, which leverages a vulnerability in OverlayFS to achieve local privilege escalation (LPE) by copying a FUSE-generated SUID binary from a lower layer to an upper layer, bypassing security restrictions.

This repository contains a functional proof-of-concept exploit for CVE-2023-0386, targeting a privilege escalation vulnerability in the Linux kernel's OverlayFS subsystem. The exploit leverages FUSE and user namespace manipulation to escalate privileges by copying a capable file from a nosuid mount.

This PoC exploits CVE-2023-0386, a vulnerability in the Linux kernel's overlayfs module, to achieve local privilege escalation by manipulating file attributes and using FUSE to create a malicious filesystem. The exploit drops a SUID binary to gain root access.

This PoC exploits CVE-2023-0386, a vulnerability in the Linux kernel's overlayfs, by creating a FUSE filesystem with a setuid binary and leveraging overlayfs to gain root privileges. The exploit uses shellcode to spawn a root shell.

The repository contains documentation files from a Linux kernel version 4.19.72, including ABI stability guidelines, configuration scripts, and hardware-specific documentation. No exploit code or proof-of-concept for CVE-2023-0386 is present in the provided files.

This PoC exploits CVE-2023-0386, a Linux kernel vulnerability in the overlayfs module, to achieve local privilege escalation. It uses FUSE to create a fake filesystem and overlayfs to trigger the vulnerability, resulting in a SUID binary that spawns a root shell.

Detailed technical walkthrough of CVE-2023-0386 (OverlayFS + FUSE LPE) exploitation in a Hack The Box machine, including API enumeration, command injection (RCE), and privilege escalation via a kernel exploit. The writeup provides root cause analysis, step-by-step exploitation, and patch context.

This repository contains a functional exploit for CVE-2023-0386, which leverages OverlayFS and FUSE to achieve local privilege escalation (LPE) by tricking OverlayFS into copying a fake SUID binary with root privileges onto disk. The exploit involves creating a FUSE filesystem serving a fake SUID binary and using OverlayFS to perform a copy-up operation, thereby granting the binary real SUID privileges.

This repository provides a functional exploit for CVE-2023-0386, a Linux kernel overlayfs vulnerability leading to local privilege escalation (LPE). The exploit leverages FUSE to manipulate file capabilities and achieve root access via unprivileged user namespaces and overlayfs mounting.

This repository contains a functional exploit for CVE-2023-0386, a Linux kernel vulnerability involving overlayfs and FUSE. The exploit leverages a capability bypass to escalate privileges, using a combination of overlayfs mounting and FUSE filesystem manipulation to achieve root access.

This repository contains a functional exploit for CVE-2023-0386, a Linux kernel vulnerability in the OverlayFS subsystem. The exploit uses FUSE to manipulate file capabilities and achieve local privilege escalation (LPE) by creating a setuid binary.

This repository contains a fully functional CTF environment exploiting CVE-2023-0386, a Linux kernel vulnerability in OverlayFS. It includes a Vagrantfile and Ansible playbook to provision a vulnerable Ubuntu system with a specific kernel version (5.15.0-25-generic) and misconfigured Apache 2.4.49, enabling path traversal and RCE via CGI scripts.

This is a detailed technical writeup for the HackTheBox TwoMillion machine, covering API abuse, command injection, and privilege escalation via CVE-2023-0386 (OverlayFS). It includes step-by-step exploitation details, code snippets, and technical analysis.

This Go-based PoC exploits CVE-2023-0386, a Linux kernel vulnerability in the overlayfs filesystem, to achieve local privilege escalation (LPE). It uses FUSE and overlayfs to create a malicious binary with SUID bit set, allowing execution as root.

This repository contains a functional proof-of-concept exploit for CVE-2023-0386, a local privilege escalation vulnerability in Linux OverlayFS. The exploit leverages incorrect handling of file capabilities during copy-up operations to escalate privileges to root.

This PoC exploits CVE-2023-0386, a Linux kernel vulnerability in the overlayfs module, by creating a malicious FUSE filesystem with a setuid binary to achieve local privilege escalation. The exploit leverages overlayfs to manipulate file permissions and execute arbitrary code with elevated privileges.

This PoC exploits CVE-2023-0386, a Linux OverlayFS vulnerability, to achieve local privilege escalation (LPE) by manipulating file capabilities and user namespaces. The exploit uses FUSE to create a malicious filesystem and overlay mounts to trigger the vulnerability.

The repository contains only a README.md file with a CVE identifier and no exploit code or technical details. It appears to be a placeholder or stub.

This Metasploit module exploits CVE-2023-0386, a Linux kernel vulnerability in OverlayFS that allows local privilege escalation by manipulating uid mappings when copying capable files from a nosuid mount. It compiles or uploads an exploit binary and a payload executable to achieve root privileges.