Skip to content

C Version with x86+ARM shellcode - #67

Open
huberteff wants to merge 2 commits into
theori-io:mainfrom
huberteff:main
Open

C Version with x86+ARM shellcode#67
huberteff wants to merge 2 commits into
theori-io:mainfrom
huberteff:main

Conversation

@huberteff

Copy link
Copy Markdown

Here is an exploit written in C for the the copy.fail (https://copy.fail/, CVE-2026-31431) vulnerability. The embedded shellcode works on other CPUs than X86, with ARM as a primary target.

Code: https://github.com/huberteff/copy-fail-CVE-2026-31431/
Technical writeup: https://www.feyrer.de/redir/copy.fail-C-version-Writeup.html

@fanoush

fanoush commented Apr 30, 2026

Copy link
Copy Markdown

it probably needs pip install pwntools first or it fails and even then it does not seem to work for me on aarch64 ubuntu. Or is this expected?

 ./cfcARM 
Starting XFRM IPSec tunnel simulation...
Decompressed size: 188 bytes
First few bytes: 7f 45 4c 46...
Processed 0/188 bytes
Done processing 188 bytes
Executing su...
Password: 
su: Authentication failure

python version from #42 works fine

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants