Lucene search
+L

1944 matches found

Kitploit
Kitploit
added 2026/09/19 4:37 a.m.8 views

F9360-CVE43499

SM-F9360 Galaxy Z Fold4 / q4q Bootloader-Unlock-Free KernelSU Root CVE-2026-43499 temporary root → LDPRELOAD channel bypasses DEFEX → no-LTO clang-12 build of kernelsu.ko → full su + KernelSU Manager functionality Status: ✅ Verified on real device 2026-08-12 firmware F9360ZCSAIZF1, kernel...

7.8CVSS7.5AI score0.00789EPSS
SaveExploits100References1
Kitploit
Kitploit
added 2026/09/19 4:33 a.m.12 views

Quantum-Silicon-Core-Loader

Quantum Silicon Core Loader Primary Core: qslcl.asm v0.0.2 under development Assistant Module: qslcl.bin v0.7.4 Universal Controller: qslcl.py v2.2.2 Legally Protected Research - This project operates under established legal frameworks for security research, right to repair, and academic freedom...

5.9AI score
SaveExploits0References3
Kitploit
Kitploit
added 2026/09/19 4:06 a.m.9 views

CVE-2025-45512

U-Boot 1.1.3 Exploit PoC Usage Guide Introduction This Proof of Concept PoC was created to verify vulnerabilities in the U-Boot bootloader version 1.1.3 compiled on August 27, 2019. The code implements five different vulnerabilities relevant to the OWASP IoT Security Testing Guide ISTG categories...

6.5CVSS6.1AI score0.00314EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/09/19 3:26 a.m.9 views

ch55x_firmware_extractor

CH55x firmware extractor The CH55x firmware extractor is used to read out firmware from CH55x integrated circuits. There is no in-built support in the devices for directly reading out the firmware through the bootloader. However, there is a functionality to verify the firmware contents 8 bytes at...

5.7AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/18 11:53 p.m.19 views

OpenPetya

OpenPetya A Proof-of-Concept bootkit and UEFI boot application inspired by Petya ransomware, written in Assembly, C, and C++ If you find this project helpful or informative, I would truly appreciate a ⭐ on the repository. Your support would be a great motivation for me to continue improving this...

6.3AI score
SaveExploits0References8
Kitploit
Kitploit
added 2026/09/18 10:17 p.m.15 views

ABL_ROP

Updating ABL serial with ROP: When ran this notebook will load ABL and attempt to update the device's serial number via ROP chain to call memmove. Derived from eShard's https://github.com/eshard/pixel6-boot/blob/main/runablpublic.ipynb whilst following along with...

6AI score
SaveExploits0References1
Kitploit
Kitploit
added 2026/09/18 9:53 p.m.10 views

GhostLock-for-OnePlus

GhostLock — OnePlus Kernel exploit targeting locked-bootloader OnePlus devices. Uses CVE-2026-43499 to obtain root access without unlocking the bootloader or modifying boot.img. Authorized security research and educational purposes only. Table of Contents Vulnerability Overview Supported Devices...

7.8CVSS7.5AI score0.00789EPSS
SaveExploits100References1
Kitploit
Kitploit
added 2026/09/18 9:20 p.m.10 views

DigiDuck-Framework

DigiDuck Framework Framework para placas de desarrollo Digiduck que ejecutan procesadores ATTiny85 y el bootloader micronucleus! alt text Captura de pantalla de la pantalla de bienvenida de DDF Hoja de ruta: Plan para implementar un comando de traducción de Duckyspark dentro del framework...

6.1AI score
SaveExploits0References7
Kitploit
Kitploit
added 2026/09/18 8:42 p.m.8 views

QuestStack

QuestStack QuestStack is a Meta Quest root and bootloader unlocking project. Using the GhostLock privilege escalation chain and the CVE-2021-1931 ABL/fastboot vulnerability, QuestStack provides a way to gain root access on the latest Quest 1 firmware, temporarily boot using a vulnerable ABL, and...

7.2CVSS6.7AI score0.00223EPSS
SaveExploits0References2
Kitploit
Kitploit
added 2026/09/18 6:21 p.m.12 views

shim

shim, a first-stage UEFI bootloader shim is a trivial EFI application that, when run, attempts to open and execute another application. It will initially attempt to do this via the standard EFI LoadImage and StartImage calls. If these fail because Secure Boot is enabled and the binary is not sign...

5.9AI score
SaveExploits0References3
Kitploit
Kitploit
added 2026/09/18 5:50 p.m.15 views

BareMetal-RAM-Dumper

BareMetal RAM Dumper Una herramienta bare-metal simple para x86 diseñada para arrancar desde un disco/USB y volcar la RAM del sistema directamente al medio de arranque. Se basa en interrupciones de BIOS para arrancar y realizar operaciones de disco, y entra en modo unreal para acceder a memoria p...

6.1AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/18 5:18 p.m.12 views

GhostLock-for-OnePlus15T

GhostLock — OnePlus 15T Kernel exploit targeting locked-bootloader OnePlus 15T devices. Uses CVE-2026-43499 to obtain root access without unlocking the bootloader or modifying boot.img. Authorized security research and educational purposes only. Modified from the originalGhostLock-for-OnePlus...

7.8CVSS7.3AI score0.00789EPSS
SaveExploits100References2
Kitploit
Kitploit
added 2026/09/18 5:18 p.m.12 views

ipxe

iPXE network bootloader iPXE is the leading open source network boot firmware. It provides a full PXE implementation enhanced with additional features such as: boot from a web server via HTTP or HTTPS, boot from an iSCSI, FCoE, or AoE SAN, control the boot process with a script, create interactiv...

5.8AI score
SaveExploits0References2
Kitploit
Kitploit
added 2026/09/18 4:35 p.m.28 views

Mi8E5-Unlocker-by-CVE-2026-43499

Mi 8e5 Unlock Toolkit Automated bootloader unlock assistant for Mi 8e5 series devices, implementing CVE-2026-43499. This is an English-translated and macOS/Linux-ported fork of the original Windows-only release by @Kernix. Original repo:...

7.8CVSS7.3AI score0.00789EPSS
SaveExploits100References3
Kitploit
Kitploit
added 2026/09/18 4:18 p.m.14 views

So You Want To Build A Nethunter Kernel

So You Want To Build A Nethunter Kernel Introduction The biggest hurdle for most people who want to set up a Nethunter device is the kernel requirement. Unless your device already has a prebuilt and maintained kernel, then you will be told to build one yourself. There is a lot of documentation on...

5.8AI score
SaveExploits0References16
EUVD
EUVD
added 2026/09/18 4:16 p.m.5 views

EUVD-2026-83046

A CM2507 IP camera running firmware version HMT.CM2507 v251211.1507 exposes an interactive bootloader through a physical debug interface without requiring authentication. An attacker with physical access could interrupt the normal boot process and access functionality that permits inspection or...

3.5CVSS
SaveExploits0References2
CVE
CVE
added 2026/09/18 4:16 p.m.11 views

CVE-2026-85478

The CareCam CM2507 IP camera running firmware HMT.CM2507 v251211.1507 exposes an interactive bootloader through a physical debug interface with no authentication required . An attacker with physical access can interrupt the normal boot process and inspect or modify boot configuration, firmware da...

3.5CVSS
SaveExploits0References2
Kitploit
Kitploit
added 2026/09/18 4:14 p.m.14 views

Bootloader_Unlock_Anbernic_T820

Anbernic Unisoc T820 Bootloader Unlock Guide - TheGammaSqueeze - https://github.com/TheGammaSqueeze The bootloader unlock is required before flashing any custom firmware or custom fixes. You may be interested in this analog stick sensitvity fix after unlocking your bootloader:...

7.8CVSS5.9AI score0.00586EPSS
SaveExploits2References3
Kitploit
Kitploit
added 2026/09/18 3:36 p.m.7 views

xperia_5_bl_unlocker_poc

Can't use as is, since memory address maybe different for each device This is for archival purposes...

5.7AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/18 11:16 a.m.13 views

CVE-2022-38694_unlock_bootloader

CVE-2022-38694 An attacker with physical access to the device can overwrite a function pointer somewhere in the BootROM data section or a return address stored on the stack and execute their own code with BootROM privileges. For detailed information, read the article by NCC Group. 快速指路:...

7.8CVSS5.9AI score0.00586EPSS
SaveExploits2References2
Rows per page
Query Builder