Sploitus

Exploit for copy-fail-CVE-2026-31431-universal

kitploit ยท 2026-08-27

Exploit Code

MARKDOWN24 lines
## https://sploitus.com/exploit?id=KITPLOIT:TOOLS-GITHUB-Y5NEKO-COPY-FAIL-CVE-2026-31431-UNIVERSAL
# CVE-2026-31431 - AF_ALG AEAD Splice UAF PoC

๋‹ค์ค‘ ์–ธ์–ด ๊ตฌํ˜„ ๋ฐ ์ด์ „ ๋ฒ„์ „์˜ Python๊ณผ์˜ ํ˜ธํ™˜์„ฑ.

## C (`exploit.c`)

root@kitploit:~
    
    
    gcc -o exploit exploit.c -O2
    gcc -o exploit exploit.c -static -O2
    ./exploit
    

Ubuntu 20.04์—์„œ ํ…Œ์ŠคํŠธ๋จ:

![C exploit](https://assets.kitploit.com/production/public/readmes/51898/1b5b6c91bcfcdbc94d3daf6aaa57bee5e98303fab46d2fbe82699890336874d5/1ef1e4065158fcca4f38ef365948add8a5971489f977e95866eef17bb8faae90-display-v1.webp)

## Python (`exploit-python3-8-10.py`)

Python 3.8.10 ๋ฐ ์ด์ „ ๋ฒ„์ „๊ณผ ํ˜ธํ™˜๋ฉ๋‹ˆ๋‹ค. ํ˜ธํ™˜์„ฑ ์ฐธ๊ณ  ์‚ฌํ•ญ:

  * `os.splice()`๋Š” 3.10+๊ฐ€ ํ•„์š”ํ•จ โ€” `ctypes`๋ฅผ ์‚ฌ์šฉํ•˜์—ฌ libc `splice()`๋ฅผ ์ง์ ‘ ํ˜ธ์ถœ