totally-not-spyware

TotallyNotSpyware This program is definitely not spyware. Run it on your 64-bit iOS device as soon as possible. Your compliance will be rewarded. Live version at totally-not.spyware.lol Repo structure & building Frontend and WebKit exploit are in /root. Kernel exploit is in /glue. Post-exploitati...

RootMyVivo-Exploit

RMV Exploit — CVE-2026-43499 for vivo and iQOO A fork of boxiaolanya2008/CVE-2026-43499-Neo11Plus, reworked for RootMyVivo. Everything that broke the phone after rooting is gone; the exploit core keeps its proven timing. Русский · 中文 Targets Directory| Device| Kernel| Offset source ---|---|---|--...

GhostLock-NVIDIA-Shield-9.2.4

GhostLock for NVIDIA Shield TV Pro 9.2.4 Validated arm64 port of the GhostLock futex PI use-after-free CVE-2026-43499 for the 2019 NVIDIA Shield TV Pro mdarcy running Shield Experience 9.2.4. The payload changes the credentials of the live ADB daemon, so new ADB shells are UID 0 without a...

LSPromise

LSPromise A complete exploit chain that enables privilege escalation from a local untrusted app to root/kernel. It does not involve memory corruptions or race conditions, so attackers don't need to perform complex heap spraying or bypass mitigations against memory corruption vulnerabilities such ...

ghostlock-h8q

GhostLock CVE-2026-43499 for Galaxy Z Fold 8 h8q / Fold 8 Ultra q8q Most of this code is based on @polygraphene's fork of the original. Heavy modifications were required because the main primer used select for most published variants of the exploit does not properly align with the rtmutexwaiter...

RootMyVivo

RootMyVivo Root for vivo and iQOO phones with a locked bootloader. No unlocking, no flashing — install the APK, press the button, wait. Built on GhostLock CVE-2026-43499, a use-after-free in futex PI plus KernelSU installed on top of the temporary root. Русский · 中文 How it goes 1. Install the APK...

PIE-Stack-Clash-CVE-2017-1000253

PIE-Stack-Clash-CVE-2017-1000253 Demo-ing CVE-2017-1000253 in a container. This demo relies on Qualys POC code that performs the exploit over CentOS. Install a vulnerable kernel 1.Install CentOS 7 2.Install Docker 3.Edit the /etc/yum.repos.d/CentOS-Vault.repo file: 1.Change each entry to path to...

CVE-2026-31431-exp

Adapted from https://github.com/theori-io/copy-fail-CVE-2026-31431. Added payload encryption and obfuscation, cache write-back to improve system stability, adaptive chunking, zero dependencies, multi-architecture support x86, arm, i386, etc., and other features. In theory, it can be exploited on...

CVE-2026-4747-

CVE-2026-4747: FreeBSD Remote Kernel RCE First remote kernel exploit both discovered and exploited by an AI 📋 Quick Summary Aspect| Detail ---|--- CVE| CVE-2026-4747 Vulnerability| Stack buffer overflow in kgssapi.ko RPCSECGSS Impact| Remote Kernel Code Execution → uid 0 reverse shell Affected|...

exploit-CVE-2025-39946

README This is an exploit for CVE-2025-39946. It will work on the lts-6.12.48 kCTF instance but not 100% reliable. I wrote a blog post analysing this vulnerability in detail. Check it out here! Adapting for other kernel versions The only modification the exploit should need to work for other kern...

Trinity

Trinity Trinity is the third public jailbreak for the PS Vita™ , which supports the latest firmwares 3.69 and 3.70. The exploit chain consists of three stages: the MIPS Kernel Exploit, the PSP Emulator Escape and the ARM Kernel Exploit. Write-up A technical explanation of the Trinity exploit chai...

desc_race

descrace iOS 15.1 kernel exploit POC for CVE-2021-30955 Huge thanks to @realBrightiup for the awesome bug and exploit stratergy. His writeup can be found at: https://www.cyberkl.com/cvelist/cvedetail/24...

CTT-NFS-Vortex-RCE

CTT-NFS-Vortex-RCE New Physics Disclosure This repository contains a full weaponized exploit for CVE-2026-21509 , targeting the Windows Network File System NFSv4.1 kernel-mode driver nfssvr.sys. CTT-NFS-Vortex-RCE CVE-2026-21509 ⚠️ Technical Advisory: New Physics Disclosure This repository contain...

samsung-q60t-exploit

Tizen exploit Description Exploit and firmware decryption script presented at Grehack 2021. Slides are available inside the slides . directory and the replay video onYoutube . Directories This repository contains three directories: exploit/: containing the v8 exploit and the kernel exploit,...

CVE-2024-38063

CVE-2024-38063 - Remotely Exploiting The Kernel Via IPv6 Since the latest Windows patch dropped on the 13th of August I’ve been deep in the weeds of tcpip.sys the kernel driver responsible for handling TCP/IP packets. A vulnerability with a 9.8 CVSS score in the most easily reachable part of the...

cve-2016-0095-x64

cve-2016-0095-x64 windows 7 Ultimate Ultimate x64 poc of cve-2016-0095MS16-034 A newbie starts learning cve, referencing: https://whereisk0shl.top/ssctfpwn450windowskernelexploitationwriteup.html and the code from expert k0shl at https://github.com/k0keoyo/SSCTF-pwn450-ms16-034-writeup. Modified ...

SELinux-Permissive-Only-CVE-2025-21479

SELinux-Permissive-Only-version-of-Cheese-aka-CVE-2025-21479 This is an SELinux permissive only version, for now, of the Cheese exploit also known as CVE-2025-21479 which affected the adreno kgsl on many devices including Samsung snapdragon devices Some of the code has been recycled from the...

rmx3888-cve-2026-43499-config

CVE-2026-43499 Exploit Configuration for realme RMX3888 Device Information Brand/Model : realme RMX3888 Android Version : 16 SDK 36 Build ID : BP2A.250605.015 Kernel : Linux 6.1.141-android14-11-o-gffc54a6d2287 SoC : Qualcomm SM8650 Snapdragon 8 Gen 3 Architecture : ARM64 aarch64 Overview This...

root-sonim-xp3800

Root Sonim XP3800 Root access for the Sonim XP3800. Two methods are available — choose whichever fits your situation. Root Manager App The Root Manager app exploits CVE-2019-2215 a binder use-after-free kernel vulnerability to gain root directly on the device. No computer, no bootloader unlock, n...

CVE-2019-13272

CVE-2019-13272 PTRACETRACEME NOTE: This python3 version of the exploit DOES NOT REQUIRE any external source. The sources that follows are just credits for the original exploit in C. Details: https://bugs.chromium.org/p/project-zero/issues/detail?id=1903 Exposure: highly probable Tags:...