GhostLock-5.10

GhostLock 5.10 This is a kernel root exploit for the Amazon Fire Max 11 sunstone and the Fire TV Stick 4K Max 2nd Gen / 2023 karat, adapted from CVE-2026-43499 in CyberMeowfia. Supported devices Two devices are supported, both on Fire OS 8. Each has its own build target. Fire Max 11 sunstone Fire...

hp-slate7-root-kit

Root for the HP Slate 7 2800 on Android 4.1.1 English | Русский This repository contains a complete, self-contained kit for obtaining persistent root access on the HP Slate 7 2800 running firmware 1.05.18 and kernel Linux 3.0.8+ by exploiting the local vulnerability CVE-2015-1805. The kit was run...

CVE-2019-8781-macOS

CVE-2019-8781 Security Advisory CVE-2019-8781 POC Details The POC elevate the process to root and execute a shell. Exploit environment root@kitploit: - macOS 10.14.6 18G95 Should works on all macOS version that's released before 10.15.0 - SMEP: On - SMAP: Off - Kernel ASLR slide passed to the arg...

GhostLock-for-OnePlus

GhostLock — OnePlus Kernel exploit targeting locked-bootloader OnePlus devices. Uses CVE-2026-43499 to obtain root access without unlocking the bootloader or modifying boot.img. Authorized security research and educational purposes only. Table of Contents Vulnerability Overview Supported Devices...

ClearSword

ClearSword Resumen Un port en C del exploit de Kernel DarkSword Intenté mantenerlo lo más fiel posible al original, pero tuve que hacer algunos cambios para que funcionara en versiones anteriores de iOS. Estos cambios y modificaciones personales se indicarán con comentarios NOTE. He añadido...

CVE-2026-43499-S25U

CVE-2026-43499 PoC for Galaxy S25 Ultra Device-specific proof of concept for CVE-2026-43499 on the Korean Samsung Galaxy S25 Ultra. Supported target root@kitploit: Model: SM-S938N Codename: pa3q Android: 16 / API 36 Build: S938NKSUACZF1 Display ID: BP4A.251205.006.S938NKSUACZF1 Fingerprint:...

Linux-Kernel-Exploit-LAB

Linux-Kernel-Exploit Dirty COW CVE-2016-5195...

Trigon

Trigon Trigon es un exploit determinista del kernel basado en CVE-2023-32434. Actualmente es compatible con dispositivos A9 - A11 que ejecutan iOS 13 - 15.7.6. Ser determinista significa que este exploit nunca provocará un panic durante o después de la explotación y es completamente fiable. Trigo...

used_sock

usedsock Kernel exploit for iOS 12-12.2 and 12.4. This isn't meant to be used in a jailbreak. You can find the writeup here...

CVE-2019-2215-HuaweiP20Lite

Port CVE-2019-2215 bad binder to Huawei P20lite Android 8.0.0 Description This project is an exploit for CVE-2019-2215 on Huawei P20lite in version Android 8.0.0. Kernel is in version 4.4.23. This vulnerability is probably the most documented one tutorials, real port on physical phone on this top...

Inspector

Privilege Escalation unix helper SUMMARY Inspector is a python script for help in privilege escalation, for linux environement. After starting, this script search the kernel version and check if is exploit exists, load file history bash,zsh,mysql... and load list of programs loaded with root user...

CVE-2021-21551-POC

DbUtilAx Una prueba de concepto extendida para el exploit de kernel Dell ‘dbutil23.sys’ del CVE-2021-21551. Lee el artículo completo aquí...

CVE-2019-2215

Bad-Binder CVE-2019-2215 The following is the exploit for the bad binder CVE-2019-2215 vulnz that was tested on an x86 Emulator. The aim was to abuse the UAF vulnerability to trigger an AAR primitive to leak kernel addresses and use an AAW primitive to overwrite addrlimit leading to a Kernel Read...

PIE-Stack-Clash-CVE-2017-1000253

PIE-Stack-Clash-CVE-2017-1000253 Demo-ing CVE-2017-1000253 in a container. This demo relies on Qualys POC code that performs the exploit over CentOS. Install a vulnerable kernel root@kitploit: 1.Install CentOS 7 2.Install Docker 3.Edit the /etc/yum.repos.d/CentOS-Vault.repo file: 1.Change each...

ved-ebpf

VED-eBPF: Kernel Exploit and Rootkit Detection using eBPF VED Vault Exploit Defense-eBPF leverages eBPF extended Berkeley Packet Filter to implement runtime kernel security monitoring and exploit detection for Linux systems. Introduction eBPF is an in-kernel virtual machine that allows code...

ved-ebpf

VED-eBPF: Detección de Exploits y Rootkits del Kernel usando eBPF VED Vault Exploit Defense-eBPF aprovecha eBPF extended Berkeley Packet Filter para implementar monitoreo de seguridad del kernel en tiempo de ejecución y detección de exploits para sistemas Linux. Introducción eBPF es una máquina...

slides

slides A collection of slides. 2025 A tale of challenging MTE: Rooting Google Pixel with kernel MTE enabled in one shot Conference: POC 2025 2024 Simple bug but not easy exploit: Rooting Android devices in one shot Conference: Cansecwest 2024 Almost same with POC 2023, except for MTE 2023 Simple...

collateral-damage

Collateral Damage Collateral Damage is a kernel exploit for Xbox SystemOS using CVE-2024-30088. It targets Xbox One and Xbox Series consoles running kernel versions 25398.4478, 25398.4908, and 25398.4909. The initial entrypoint is via the Game Script UWP application. The first stage payloads, PE...

CVE-2019-13272

CVE-2019-13272 PTRACETRACEME NOTE: This python3 version of the exploit DOES NOT REQUIRE any external source. The sources that follows are just credits for the original exploit in C. Details: https://bugs.chromium.org/p/project-zero/issues/detail?id=1903 Exposure: highly probable Tags:...

CVE-2022-22057_SM-F926U

Fork My adaptation for the SM-F926U from the original exploit here HUGE thanks to m-y-mo for discovering the exploit and his extreme patience with all my questions to port this to SM-F926U and make it useable I've added a startup daemon libtimeline.so based on code from Shizuku Added a dirty tric...