27 matches found
DirtyPipe-Android
DirtyPipe for Android Dirty Pipe CVE-2022-0847 temporary root PoC for Android. Targets Currently only run on Pixel 6 with security patch level from 2022-02-05 to 2022-04-05. Don't use on other devices or other versions. It must crash reboot. Dirty Pipe is finally patched on 2022 May security upda...
CVE-2026-43499-aristotle-apk
Aristotle ADB Enable A minimal Android app that turns on ADB on an au/KDDI Xiaomi "aristotle" XIG04, Android 12 whose developer options can't be reached, using a temporary root obtained from CVE-2026-43499. It is a device-owner tool in the same category as KingRoot: it roots your own phone to fli...
zenfone9-root
zenfone9-root — temporary root on a bootloader-locked ASUS Zenfone 9 Research code and notes for obtaining temporary root uid 0 on an ASUS Zenfone 9 AI2202 whose bootloader cannot be unlocked — because ASUS discontinued its unlock tool, removed the OEM-unlocking toggle from Developer options, and...
CVE-2022-22057_SM-F926U
Fork My adaptation for the SM-F926U from the original exploit here HUGE thanks to m-y-mo for discovering the exploit and his extreme patience with all my questions to port this to SM-F926U and make it useable I've added a startup daemon libtimeline.so based on code from Shizuku Added a dirty tric...
rmg-s9180-fzg1
Root My Galaxy SM-S9180 dm3q — FZG1 payload ports Ports of the CVE-2026-43499 payload UAF → KernelSU LKM temporary root for Samsung Galaxy S23 Ultra SM-S9180 dm3q. Hong Kong TGY — S9180ZHS8FZG1 Kernel: 5.15.189-android13-8-33413713-abS9180ZHS8FZG1 2026-07-05 security patch Root method:...
cve-2019-2215
CVE-2019-2215 Pixel 2 和 Pixel 2 XL 的临时 Root（利用 CVE-2019-2215） （基于 Google Project Zero 的 Jann Horn 和 Maddie Stone 的 概念验证） 概述 演示一种仅通过内核内存读/写实现权限提升的攻击，最终获得临时 root shell。 该工具在 Google Pixel 2 / Pixel 2 XL（walleye/taimen）设备上运行，系统镜像为 2019 年 9 月的 QP1A.190711.020，内核版本-BuildID 4.4.177-g83bee1dc48e8 。...
cheese
适用于 Quest 3/3S 的 Root 漏洞利用（2025 年 8 月 7 日更新及更早版本），基于 CVE-2025-21479。 Magisk、Cheese 和 Termux 带有 root shell 的截图 警告： Root 是危险的。如果你将 Quest 3/3S 变砖，将无法修复。 此操作在临时 root 状态下会禁用所有安全机制。 不要运行你不可信的应用程序或浏览你不可信的网站。 不要写入 boot 或 system 分区。否则你会变砖。 不要使用 Magisk 的“安装”功能。 你可能希望在 root 后备份你的 deviceKey、Meta Access Token...
cve-2026-43499-aak-an00
CVE-2026-43499 · 荣耀 WIN RT AAK-AN00 临时 Root 研究笔记 （全是deepseek写的，我啥也不懂） 设备 Bootloader 永久锁死 （ro.oemunlock.supported 为空），没有 fastboot、没有持久 su、没有 Magisk。 唯一还能走的路是内核漏洞。本仓库记录从「能不能打」到「打完之后到底有多稳」的完整过程。 性质：临时 root，重启即失效。 免责声明 本仓库记录的是在本人自有设备 上进行的安全研究过程，目的是理解内核 PI 竞态的成因与稳定性边界。 不包含任何 exploit 二进制或可直接运行的利用载荷 ——...
ghostlock-s26
GhostLock - Android wrapper indev.ghostlock.s26 One-click Android wrapper for 1ndevelopment/ghostlock-s26: GhostLock CVE-2026-43499 ported to the whole Samsung Galaxy S26 series Android 16 / GKI 6.12. One APK, three kernel lines, runtime parameter matching - no per-build app variants. Use only on...
CVE-2019-2215
CVE-2019-2215 Vulnerabilidad del kernel de Android CVE-2019-2215 PoC de root temporal. Funciona en dispositivos Google Pixel 2/Pixel 2 XL walleye/taimen que ejecutan la imagen QP1A.190711.020 de septiembre de 2019 con el kernel versión-BuildID 4.4.177-g83bee1dc48e8. Uso Actualmente, el binario so...
cheese-cake
CORREGIR PROBLEMAS :- 1. adaptar a dispositivo Samsung, quizás rama separada, añadir función de encontrar kernel base usando GPU 2. cambiar README 🤝 Contribuciones ¡Las Pull Requests PRs son bienvenidas y muy apreciadas! Ya sean correcciones, mejoras, refactorizaciones o soporte para nuevos...
hazel-cve-2026-43499
Hazel Fire TV temporary root Temporary root exploit for the Amazon hazel Fire TV platform, based on CVE-2026-43499. The exploit is is intended for the ARM32 Linux 4.9 firmware shared by Hazel televisions from several manufacturers. Profiles currently cover firmware from PS7657.3645N through...
ghostlock-x200-app
GhostLock X200 App An on-device one-click root App for the vivo X200 , based on the GhostLock CVE-2026-43499 kernel vulnerability: no flashing, no bootloader unlock, no data wipe. Running it grants temporary root , which is lost after reboot; simply reopen the App to root again with one click. Th...
Root-My-Galaxy-S938B
Root My Galaxy — S938B Root My Galaxy is a firmware-profiled installer for temporary KernelSU root on supported Samsung builds. This fork is maintained for the Galaxy S25 Ultra SM-S938B running: root@kitploit: Build: BP4A.251205.006.S938BXXSBCZG3 Kernel:...
xiaomi15-dada-cve-2026-64560
Xiaomi 15 dada CVE-2026-64560 Device-specific adaptation of the NebuSec CVE-2026-64560 Android proof of concept for one exact Xiaomi 15 build. It provides temporary root access for the current boot through an ADB-shell-only helper. !WARNING This is experimental kernel exploit code. It can reboot...
sh53d-temp-root
SH-53D temporary root This is a build-specific proof of conce...
iqoo-temp-root
vivo/iQOO Temporary Root Toolkit No bootloader unlocking, no flashing needed, temporary root lost on reboot. Core principle: CVE-2026-43499 futex PI UAF kernel exploit + temporary KernelSU loading. Supported devices App version Device| Codename| Payload ---|---|--- iQOO Z10 Turbo| z10t / iqooz10t...
ghostlock-x200-root
GhostLock-X200 v1.3.5 ⚠️ 法律与安全声明（请务必先阅读） 本仓库仅用于安全研究与教育目的 ，并且只允许在你自己拥有、或已获得明确 书面授权的设备上使用 。未经授权对他人设备使用本工具，可能违反当地法律法规。 使用本工具可能导致设备异常重启、数据损坏、系统异常、保修失效等后果，请自行 评估风险。作者不对任何直接或间接损害承担责任，亦不对任何滥用行为负责。 继续阅读或使用本仓库，即表示你已理解并同意自行承担全部风险与责任。 针对 vivo X200（PD2415 / Dimensity 9400 / b57 内核） 、基于...