CVE-2023-4911

This exploit leverages a buffer overflow in glibc's dynamic loader (CVE-2023-4911) to achieve local privilege escalation by corrupting internal loader state and loading a malicious shared object. It patches libc.so.6 with shellcode to spawn a root shell when /usr/bin/su is executed with a crafted environment.

This repository contains a functional exploit for CVE-2023-4911 (Looney Tunables), leveraging a buffer overflow in glibc's dynamic loader via the GLIBC_TUNABLES environment variable. The exploit crafts malicious environment variables to achieve arbitrary code execution by overwriting critical structures in memory.

This repository contains a functional proof-of-concept exploit for CVE-2023-4911, a local privilege escalation vulnerability in glibc's dynamic loader. The exploit leverages a buffer overflow in the processing of GLIBC_TUNABLES environment variables to achieve arbitrary code execution with elevated privileges.

This repository contains a functional exploit for CVE-2023-4911, targeting the 'Looney Tunables' buffer overflow vulnerability in glibc. The exploit modifies the glibc library to inject shellcode and escalate privileges to root.

This repository contains a functional exploit for CVE-2023-4911 (Looney Tunables), leveraging a buffer overflow in glibc's dynamic loader via the GLIBC_TUNABLES environment variable. The exploit manipulates memory to achieve arbitrary code execution by injecting shellcode into a forged libc.so.6.

The repository contains a functional exploit for CVE-2023-4911, demonstrating a heap-based buffer overflow in sudo. The exploit leverages a crafted environment variable to achieve privilege escalation.

This repository contains a functional exploit for CVE-2023-4911 (Looney Tunables), a Linux privilege escalation vulnerability in glibc. The exploit leverages a buffer overflow in the GLIBC_TUNABLES environment variable parsing to achieve arbitrary code execution with elevated privileges.

This repository provides a detailed technical analysis of CVE-2023-4911, a local privilege escalation vulnerability in the GNU C Library's dynamic loader (ld.so) due to improper handling of the GLIBC_TUNABLES environment variable. The README includes a thorough breakdown of the vulnerability, affected code paths, and references to external resources for further study.

This repository contains a functional proof-of-concept exploit for CVE-2023-4911, a local privilege escalation vulnerability in glibc's dynamic loader. The exploit leverages the Looney Tunables vulnerability to achieve arbitrary code execution by manipulating environment variables and heap grooming techniques.

This repository contains a functional exploit for CVE-2023-4911 (Looney Tunables), a local privilege escalation vulnerability in glibc's dynamic loader. The exploit manipulates environment variables to achieve arbitrary code execution with elevated privileges.

This repository contains a functional exploit for CVE-2023-4911, a buffer overflow in the GNU C Library's dynamic loader (glibc) that allows local privilege escalation. The exploit leverages the GLIBC_TUNABLES environment variable to trigger the vulnerability and gain root access.

This repository contains a functional proof-of-concept exploit for CVE-2023-4911 (Looney Tunables), a local privilege escalation vulnerability in glibc's ld.so. The exploit leverages a buffer overflow in the GLIBC_TUNABLES environment variable to achieve arbitrary code execution with root privileges.

This repository contains a functional exploit for CVE-2023-4911 (Looney Tunables), a buffer overflow in glibc's dynamic loader. The exploit manipulates environment variables to trigger a buffer overflow, leading to arbitrary code execution via a forged libc.so.6 with embedded shellcode.

This repository contains a functional exploit for CVE-2023-4911, a local privilege escalation vulnerability in glibc's dynamic loader. The exploit leverages a buffer overflow in the GLIBC_TUNABLES environment variable parsing to achieve arbitrary code execution with elevated privileges.

This repository provides a Docker-based environment for analyzing and exploiting CVE-2023-4911 (Looney Tunables), a buffer overflow in glibc's dynamic loader (ld.so) leading to local privilege escalation. It includes functional exploit code, test binaries, and detailed analysis tools.

This repository contains a functional exploit for CVE-2023-4911, targeting a buffer overflow in the GNU C Library's dynamic loader. The exploit manipulates environment variables to trigger the vulnerability and achieve arbitrary code execution.

This repository contains a functional exploit for CVE-2023-4911, the 'Looney Tunables' glibc vulnerability, which allows local privilege escalation (LPE) to root. The exploit modifies the glibc library and leverages a buffer overflow in environment variable processing to execute arbitrary code with elevated privileges.

This repository contains a functional exploit for CVE-2023-4911 (Looney Tunables), a Linux privilege escalation vulnerability in glibc. The exploit leverages a buffer overflow in the GLIBC_TUNABLES environment variable parsing to achieve arbitrary code execution with elevated privileges.

This repository contains a functional exploit for CVE-2023-4911, targeting the Looney Tunables vulnerability in glibc's dynamic loader. The exploit manipulates environment variables to achieve arbitrary code execution via buffer overflow in the dynamic linker.

This PoC exploits CVE-2023-4911 (Looney Tunables) by manipulating the GLIBC_TUNABLES environment variable to trigger a buffer overflow in the dynamic loader, leading to arbitrary code execution. The exploit uses carefully crafted environment variables and a fork bomb to maximize the chance of successful exploitation.

This repository contains a functional Python-based exploit for CVE-2023-4911 (Looney Tunables), which leverages a buffer overflow in the glibc dynamic loader's GLIBC_TUNABLES environment variable parsing. The exploit crafts a malicious environment to achieve local privilege escalation by overwriting the DT_RPATH entry in the link_map structure.

This repository contains a functional exploit for CVE-2023-4911, leveraging a buffer overflow in the GLIBC_TUNABLES environment variable to achieve local privilege escalation (LPE). The exploit modifies the libc.so.6 file to inject shellcode and repeatedly forks processes to trigger the vulnerability.

This repository contains a functional exploit for CVE-2023-4911 (Looney Tunables), targeting a buffer overflow in glibc's dynamic loader. The exploit manipulates the GLIBC_TUNABLES environment variable to achieve arbitrary code execution via a crafted libc.so.6.

This Metasploit module exploits CVE-2023-4911, a buffer overflow in the GNU C Library's dynamic loader (ld.so) via the GLIBC_TUNABLES environment variable, allowing local privilege escalation to root on vulnerable Ubuntu and Debian systems.