Xiaomi-C200-Firmware-Analysis

The Scope In this repo i will show how i got access to the UART interface even without the common set of exposed pins / test pads, using U-Boot and tricks to gain root on an early stage and eventually dumping the firmware Initial Reconnaissance There are a few key things clear from the PCB Chip...

android_kernel_xiaomi_sunny

Linux kernel This file was moved to Documentation/admin-guide/README.rst Please notice that there are several guides for kernel developers and users. These guides can be rendered in a number of formats, like HTML and PDF. In order to build the documentation, use make htmldocs or make pdfdocs. The...

duchamp-root

中文 | English +One-Click+Root;CVE-2026-43499+\IonStack+Exploit;710%E8%A7%A3%E9%94%81%E8%8A%82%E6%9C%80%E6%96%B0%E5%8A%9B%E4%BD%9C+%F0%9F%94%A5 -blue -green ⚡ Proud user of JetBrains Mono ⚡ This README uses JetBrains Mono exclusively. Comic Sans is forbidden. !IMPORTANT 🚨 Disclaimer This exploit is...

android_kernel_xiaomi_sm8150

This repository does not have a README...

CVE-2026-43499-aristotle-apk

Aristotle ADB Enable A minimal Android app that turns on ADB on an au/KDDI Xiaomi "aristotle" XIG04, Android 12 whose developer options can't be reached, using a temporary root obtained from CVE-2026-43499. It is a device-owner tool in the same category as KingRoot: it roots your own phone to fli...

cve-2024-4406-xiaomi13pro-exploit-files

cve-2024-4406-xiaomi13pro-exploit-files Files related to the Pwn2Own Toronto 2023 exploit against the Xiaomi 13 Pro...

CVE-2024-45352

CVE-2024-45352 小米中的漏洞 CVE-2024-45352...

CVE-2026-43499-aristotle

CVE-2026-43499 — aristotle au/KDDI 小米 XIG04 针对搭载Android 12 的au/KDDI 小米 "aristotle" XIG04 的本地权限提升（tmp-root），利用CVE-2026-43499 。这是一个设备所有者root原始方法：用于root你自己的手机（例如，当开发者选项无法访问时重新启用ADB）。 这是上游实现的一个aristotle 移植 ：https://github.com/x-spy/CVE-2026-43499-popsicle —— 该实现针对小米17 / Pro / Ultra（popsicle，骁龙，Androi...

-CVE-2024-45352

🚨 CVE-2024-45352 – 小米智能家居远程代码执行（RCE） 📌 摘要 在小米智能家居（Xiaomi Smarthome）应用中发现了一个严重漏洞（CVE-2024-45352），由于内部 API 解析器的输入处理不当，允许未经身份验证的远程代码执行（RCE）。本地网络中的攻击者可利用此漏洞在受影响系统上执行任意命令。 🛡️ CVE 编号 CVE： CVE-2024-45352 CVSS（估计值）： 8.8（高危） 攻击向量： 网络 攻击复杂度： 低 所需权限： 无 用户交互： 无 🧪 概念验证（PoC） 以下 PoC 通过向小米智能家居本地 API 发送恶意构造的请求来演示...

CVE-2026-43499-warhol-root

warhol-root CVE-2026-43499 IonStack local privilege escalation, ported to the Xiaomi 17T Pro warhol — MediaTek MT6993, Android 16. GKI 6.12 / android16 only. The waiter overlay, the pselect stack layout and every struct offset are pinned to that branch, so nothing here transfers to 6.6, 6.1 or 5....

CVE-2019-18370_XiaoMi_Mi_WIFI_RCE_analysis

This repository does not have a README...

xiaomi15-dada-cve-2026-64560

Xiaomi 15（dada）CVE-2026-64560 针对 NebuSec CVE-2026-64560 Android 概念验证的特定设备适配版本，适用于某一精确的 Xiaomi 15 构建版本。它通过仅限 ADB shell 的辅助程序，为当前启动提供临时 root 访问权限。 !WARNING 这是实验性内核漏洞利用代码。它可能导致设备重启、内核状态损坏或数据丢失。请仅在您拥有或明确获授权测试的设备上使用。请先备份重要数据。 支持的目标 属性| 必需值 ---|--- 设备| Xiaomi 15 / dada 指纹|...

Xiaomi Mi WiFi R3G Routers - Local file Inclusion

Xiaomi Mi WiFi R3G devices before 2.28.23-stable are susceptible to local file inclusion vulnerabilities via a misconfigured NGINX alias, as demonstrated by api-third-party/download/extdisks../etc/config/account. With this vulnerability, the attacker can bypass authentication. id: CVE-2019-18371...

xiaomi-cve-2024-45352

xiaomi-cve-2024-45352 Reporte técnico sobre vulnerabilidad crítica de Xiaomi Vulnerability Summary A vulnerability was discovered in Xiaomi's default browser com.android.browser on various MIUI devices. The app fails to properly validate intents passed via startActivity, allowing malicious apps t...

HyperOS-Directory-Traversal-Analysis

🔬 CVE-2025-21082: HyperOS AVCodec Use-After-Free Comprehensive Analysis of the Use-After-Free Vulnerability in Xiaomi HyperOS AVCodec Media Framework and Simulation with Rust...

CVE-2026-26898-Xiaomi-SSRF-HostHeaderInjection

CVE-2026-26898: Xiaomi Mi Router 4A Gigabit - SSRF via Host Header Injection -orange Summary A Server-Side Request Forgery SSRF vulnerability exists in the Xiaomi Mi Router 4A Gigabit Edition. The router's web interface fails to validate the HTTP Host header, allowing an unauthenticated attacker ...

CVE-2024-4309-Analysis

🛡️ CVE-2024-4309 Xiaomi HyperOS System Updater — OTA Signature Verification Bypass & RCE...

CVE-2020-0069_poc

Description This repository contains the materials we used to investigate CVE-2020-0069 on a Xiaomi Redmi 6a with a Mediatek SoC MT6762M. There are three programs: kernelrw.c a C program allowing to read/write kernel memory poc.sh a shell script syscallhook.c a C library that can be used to trace...

CVE-2026-43499-For-Xiaomi-17T-chagall

CVE-2026-43499-For-Xiaomi-17T-chagall CVE-2026-43499 reproduce in Xiaomi 17T. kernelsu incomplete...

CVE-2026-43499-popsicle

CVE-2026-43499 for popsicle This repository contains an Android 16 local privilege escalation implementation for CVE-2026-43499 on Xiaomi 17 Pro Max popsicle. Verified kernel: root@kitploit: 6.12.23-android16-5-g75e9b1c7ae7c-abogki463945075-4k Devices with this kernel Xiaomi 17, Pro, and Ultra...