AIP

Attacker IP Prioritization AIP Tool The Attacker IP Prioritization AIP is a tool to generate efficient and economic IP blocklists based on network traffic captured from honeypot networks. With the advent of 5G, IoT devices are directly connected often without firewall protection. Therefore we nee...

CVE-2026-2035703-x300

CVE-2026-108576: Tozed ZLT X300 5G CPE — Remote Root Code Execution via SDR Rogue Base Station Status: Published — coordinated disclosure via CISA ICS and CERT/CC Discovered: 2026-08-08 Researcher: Muhammad Nadeem Danish danish1162 CVE ID: CVE-2026-108576 assigned by VulDB CNA, published on cve.o...

Awesome-Cellular-Hacking

Awesome Cellular Hacking A comprehensive curated list of resources for 2G/3G/4G/5G cellular security research and analysis This repository consolidates community knowledge in the cellular security space, including exploits, research papers, tools, and educational resources. The goal is to preserv...

iQOO-Z9_5G-vivo-T3_5G-Root-GhostLock

iQOO Z9 5G / vivo T3 5G Jailbreak Root GhostLock Installed KernelSU An iQOO Z9 5G and vivo T3 5G jailbreak/root Android application and payloads. Both devices use the MediaTek Dimensity 7200 MT6886 platform. There are two supported run methods: the Android APK with Shizuku, or the native helper r...

CYBERDUDEBIVASH-5G-Core-Key-Rotation-Ghost-Admin-Auditor

CYBERDUDEBIVASH 5G Core Key Rotation & Ghost Admin Auditor v1.1 © 2026 CYBERDUDEBIVASH – All Rights Reserved Global Authority in Zero-Trust 5G & Private Network Security Bhubaneswar, Odisha, India Production-grade tool for detecting & remediating CVE-2026-0622 Ghost Admin privilege escalation &...

Sec5GLoc

Sec5GLoc: Securing 5G Indoor Localization via Adversary-Resilient Deep Learning Architecture Our work addresses security and privacy challenges in 5G indoor localization by proposing an adversary-resilient deep learning architecture. Sec5GLoc combines Channel Impulse Response CIR fingerprinting...

wavedigger

WaveDigger Dig into wireless signals to discover their physical locations. WaveDigger helps you find Wi-Fi access points by their BSSID MAC address and cell towers LTE and 5G NR by their network parameters. Built with Next.js, TypeScript, and deck.gl for interactive map visualization. A hosted...

CVE-2026-43499-A36

CVE-2026-43499-A36 Standalone, device-tested CVE-2026-43499 port for the Canadian Galaxy A36 5G SM-A366W on exact firmware A366WVLS3AYG1, including KernelSU late-load and Root My Galaxy integration. This repository contains the device-specific native side of Root My Galaxy: exact firmware profile...

CVE-2026-22012-Diameter-Protocol-Credit-Control-Bypass-in-5G

CVE-2026-22012 – Diameter Protocol Credit‑Control Bypass in 5G Program Code Python Diameter sim diametercreditcontrolsim.py - Simulated OCS with missing final-unit indication class OCS: def processCCRself, request: Vulnerability: always returns SUCCESS with same quota, never sends final-unit retu...

cve-2026-43499

IonStack Kernel exploit for Redmi Pad Pro dizi / POCO Pad 5G. Cloudflare Pages Deployment Git Integration 1. Go to Cloudflare Dashboard Workers & Pages Create Pages Connect to Git 2. Select this repository 3. Build settings: Framework preset: None Build command: leave empty Build output directory...

ghostlock-somalia

GhostLock on a Unisoc T8300 Rooting a Redmi A7 Pro 5G CV...

Root-My-Galaxy-Payloads

Root My Galaxy Payloads This repository contains the device-s...

MASAR: Multi-Stage Attack Surface Analysis and Reasoning Framework for Telecom Networks

The increasing complexity of modern telecommunications networks introduces security challenges that require systematic threat analysis. However, a gap remains between architectural threat modeling frameworks, such as Spoofing, Tampering, Repudiation, Information Disclosure, Denial of Service, and...

Exploit for Write-what-where Condition in Linux Linux_Kernel

DirtyFrag Galaxy A57 5G Root temporário para o Samsung Galaxy...

rmgp-Payloads

Root My Galaxy Payloads This repository contains the device-s...

Exploit for Use After Free in Linux Linux_Kernel

GhostLock — HONOR Magic 7 Lite / X9C 5G BRP-NX1 Port Port o...

Root-My-Galaxy-Payloads

Root My Galaxy Payloads This repository contains the device-s...

Exploit for Missing Authentication for Critical Function in Qualcomm Ar9380_Firmware

Poco M7 Plus SM6375 — Temporary Root Research: Qualcomm G...

5G-Shark Lures Phones to Rogue 5G Cells Without Network Jamming

Researchers have developed 5G-Shark to lure phones onto rogue base stations, collect subscriber IDs, force network downgrades and…...

Improving the Reliability of Anomaly Detection for Encrypted OPC UA Traffic over Private 5G

Open Platform Communications Unified Architecture OPC UA is increasingly deployed over private 5G networks in industrial environments, where end-to-end encryption prevents payload inspection by network-based intrusion detection systems IDSs. Although payload-agnostic statistical features extracte...