So You Want To Build A Nethunter Kernel

So You Want To Build A Nethunter Kernel Introduction The biggest hurdle for most people who want to set up a Nethunter device is the kernel requirement. Unless your device already has a prebuilt and maintained kernel, then you will be told to build one yourself. There is a lot of documentation on...

CVE-2015-6640

CVE-2015-6640 poc by Edward Hung https://source.android.com/security/bulletin/2016-01-01.html https://android.googlesource.com/kernel/common/+/69bfe2d957d903521d32324190c2754cb073be15%5E%21/F0...

UnPlus

unplus CVE-2026-43499 Futex PI UAF kernel arbitrary-address-write exploit core logic code, used to bypass SELinux and gain root. This repository only contains the core exploit logic source src/ and the single-binary packager wrapper/. src/target.h is a template ; you must fill in parameters for...

CVE-2019-2215

CVE-2019-2215 PoC for old Binder vulnerability based on P0 exploit Description A use-after-free in binder.c allows an elevation of privilege from an application to the Linux Kernel. No user interaction is required to exploit this vulnerability, however exploitation does require either the...

libput_user_exploit

ATTENTION !!! This exploit writes more 3 bytes with zero. But it is enough to install ptmx.fsync handler and modify ueventhelper string...

android-kernel-exploitation-ashfaq-CVE-2019-2215

android-kernel-exploitation-ashfaq-CVE-2019-2215. Docker image provided by user Robert Dan in the workshop android-kernel-exploitation-ashfaq-CVE-2019-2215...

CVE-2026-43499-aristotle-apk

Aristotle ADB Enable A minimal Android app that turns on ADB on an au/KDDI Xiaomi "aristotle" XIG04, Android 12 whose developer options can't be reached, using a temporary root obtained from CVE-2026-43499. It is a device-owner tool in the same category as KingRoot: it roots your own phone to fli...

AndroidKernelVulnerability

Android Kernel Vulnerability Overview In November 2017 a use-after-free bug to linux kernel was detected by syzkaller system. In February 2018 this was patched in some linux kernels and android versions. This fix was never included in Android monthly security bulletins, so it was not patched in...

bad_io_uring

Bad IOuring https://www.blackhat.com/us-23/briefings/schedule/index.htmlbad-iouring-a-new-era-of-rooting-for-android-32243 Build the exploit Make sure the Android NDK is installed. For pixel 6, make pixel For samsung s22, make s22 How to use the exploit The exploit is written to support different...

TowelRoot

What is TowelRoot? Towelroot gains root access by exploiting a vulnerability in the kernel of Android, which is based on Linux and is a very basic component of the device that basically acts as a middle-man to make the operating system and the physical hardware talk to one another...

CVE-2021-28663

CVE-2021-28663 A basic PoC leak for CVE-2021-28663 Internal of the Android kernel backdoor vulnerability This is a basic PoC for CVE-2021-28663. A design flaw in Mali GPU Android Kernel Driver. 1. Create a GPUVA and also mmap to it so we can get virtual addr for phys pages. 2. Create an alias for...

android_kernel_modules_and_devicetree_oneplus_sm8550

This repository does not have a README...

CVE-2024-36971

CVE-2024-36971 — Proof of Concept Research & Analysis Only ⚠️ DISCLAIMER — READ BEFORE USING THIS REPOSITORY This repository is intended only for defensive research, analysis, and responsible reporting. It contains a non-exploitable proof of concept file named CVE-2024-36971 and a publicly...

android_kernel_xiaomi_sm8150

This repository does not have a README...

ghost-hoock

ghost-hoock A minimal fork of GhostLock that keeps only one primitive : turning off SELinux via CVE-2026-43499 futex PI UAF. -green Table of contents What is this How it works What was kept from the original What was removed Building Running Requirements Limitations and risks Project layout Licen...

ghostlock-honor-aak

ghostlock-honor-aak GhostLock CVE-2026-43499 exploit adapted for Honor AAK-AN00 MagicOS 10, kernel 6.6.89-android15...

IonStack-S22-cve-2026-43499

IonStack-S22-cve-2026-43499 MERGED WITH ORIGINAL REPO: Find it here https://github.com/CamsShaft/IonStack-S22 Full root in the kernel domain with selinux permissive on my SM-S901W S22 5.10.168-android12-9-27760517-abS901WVLS4DWL3. NOTES: I'm not going into great detail or lengths in this one sinc...

CVE-2022-0847

Información Exploit Title: Local Privilege Escalation in Linux kernel CVE-2022-0847 Tested on: ubuntu 20.04.1 LTS Affect product:Linux kernel 5.8 or later Fixed Product:Linux kernel 5.16.11, 5.15.25, 5.10.102 CVE ID: CVE-2022-0847 Cómo explotar Escalada de privilegios local gcc exploit.c -o explo...

android_kernel_oneplus_avicii

OnePlus Nord avicii NeverSettle Kernel Source OnePlus Nord codename:- avicii is the first upper mid-range non-flagship smartphone from OnePlus Technology Co., Ltd. released in the year 2020. The phone is available in 2 variants based on region: AC2001 India & AC2003 Europe & Global Features|...

ghostlock-app

GhostLock-App 中文: READMEZH.md Documentation Kernel Profile Porting Guide - add support for a new kernel. GhostLock matches kernels by exact uname -r and rejects unsupported builds, showing the status at the top. Built-in profiles live in app/src/main/assets/kernelprofiles/: one HOCON file per...