copy.fail

Live preview

This site sends "X-Frame-Options: DENY", which blocks embedding it here.

Since copy.fail can't be embedded live, this is a captured screenshot instead — a snapshot from whenever it was last rendered, not necessarily this exact moment.

HTTP & security headers

Response

Server

cloudflare

Content-Type

text/html; charset=utf-8

Cache-Control

public, max-age=0, must-revalidate

Content-Encoding

Not sent

Security

Content-Security-Policy

Not sent

Strict-Transport-Security

max-age=63072000; includeSubDomains; preload

X-Frame-Options

DENY

X-Content-Type-Options

nosniff

Referrer-Policy

strict-origin-when-cross-origin

Permissions-Policy

interest-cohort=(), browsing-topics=()

What each security header does

Redirect chain

1. 1.http://copy.fail/HTTP 308

   → https://copy.fail/

2. 2.https://copy.fail/HTTP 200

Meta tags

Title

Copy Fail — CVE-2026-31431

Description

Copy Fail (CVE-2026-31431): a 732-byte Linux LPE — straight-line, no race, no per-distro offsets. Same Python script roots Ubuntu, Amazon Linux, RHEL, SUSE since 2017. Page-cache write bypasses on-disk file-integrity tools and crosses container boundaries. Found by Xint Code.

Canonical

https://copy.fail/

Robots

Not set

Generator

Not set

Open Graph title

Copy Fail — 732 Bytes to Root

Open Graph description

CVE-2026-31431. 100% Reliable Linux LPE — no race, no per-distro offsets, page-cache write that bypasses on-disk file-integrity tools and crosses containers. Found by Xint Code.

Open Graph image

https://copy.fail/og.png

Open Graph type

article

Twitter card

summary_large_image

Twitter title

Copy Fail — 732 Bytes to Root

Twitter image

https://copy.fail/og.png

robots.txt

Disallow rules (User-agent: *)

0

Disallow rules (other agents)

0

Technology detected

Best-effort, based on a small set of well-known signals — this may be incomplete.

• Cloudflarecdn

  Server: cloudflare

Related domains