CVE-2024-36971

CVE-2024-36971 — Proof of Concept Research & Analysis Only ⚠️ DISCLAIMER — READ BEFORE USING THIS REPOSITORY This repository is intended only for defensive research, analysis, and responsible reporting. It contains a non-exploitable proof of concept file named CVE-2024-36971 and a publicly...

vivo_iqoo_neo_9_root_research_on_CVE-2025-21479

Neo9Root iQOO Neo9 PD2338C Unlock-Free Caps-Root Tool — Arbitrary physical-write privilege escalation based on CVE-2025-21479 Adreno GPU SDS No bootloader unlock, no flashing, no Magisk required. Achieves kernel-level arbitrary physical write through a GPU vulnerability; after patching key kernel...

CyberMeowfiaNS

CyberMeowfia Android Kernel Research This repository documents methods, tools, and case records for Android kernel sample analysis, following the CyberMeowfia research line. The two routes are CVE-2026-43499 and CVE-2026-43074. It is a proof-of-concept disclosure: how to judge root cause, bind...

android_kernel_modules_and_devicetree_oneplus_sm8550

This repository does not have a README...

ghostlock-app

GhostLock-App 中文 GhostLock uses CVE-2026-43499 to gain temporary root on supported Android kernels and load KernelSU. Use the app 1. Install a root manager APK from KernelSU, BakaSU/ReSukiSU, or KowSU. 2. Install the GhostLock APK and open it. 3. Check that your kernel is supported, then tap Run...

CVE-2026-43499-aristotle-apk

Aristotle ADB Enable A minimal Android app that turns on ADB on an au/KDDI Xiaomi "aristotle" XIG04, Android 12 whose developer options can't be reached, using a temporary root obtained from CVE-2026-43499. It is a device-owner tool in the same category as KingRoot: it roots your own phone to fli...

TowelRoot

What is TowelRoot? Towelroot gains root access by exploiting a vulnerability in the kernel of Android, which is based on Linux and is a very basic component of the device that basically acts as a middle-man to make the operating system and the physical hardware talk to one another...

UnPlus

unplus CVE-2026-43499 Futex PI UAF kernel arbitrary-address-write exploit core logic code, used to bypass SELinux and gain root. This repository only contains the core exploit logic source src/ and the single-binary packager wrapper/. src/target.h is a template ; you must fill in parameters for...

So You Want To Build A Nethunter Kernel

So You Want To Build A Nethunter Kernel Introduction The biggest hurdle for most people who want to set up a Nethunter device is the kernel requirement. Unless your device already has a prebuilt and maintained kernel, then you will be told to build one yourself. There is a lot of documentation on...

CVE-2019-2215

CVE-2019-2215 Android Kernel Vulnerability CVE-2019-2215 temporary root PoC. It works on Google Pixel 2/Pixel 2 XL walleye/taimen devices running the September 2019 QP1A.190711.020 image with kernel version-BuildID 4.4.177-g83bee1dc48e8. Usage Now, Binary support arm64 only. $ git clone...

CVE-2019-2215

CVE-2019-2215 PoC for old Binder vulnerability based on P0 exploit Description A use-after-free in binder.c allows an elevation of privilege from an application to the Linux Kernel. No user interaction is required to exploit this vulnerability, however exploitation does require either the...

CVE-2015-6640

CVE-2015-6640 poc by Edward Hung https://source.android.com/security/bulletin/2016-01-01.html https://android.googlesource.com/kernel/common/+/69bfe2d957d903521d32324190c2754cb073be15%5E%21/F0...

qu1ckr00t

qu1ckr00t A PoC application demonstrating the power of an Android kernel arbitrary R/W CVE-2019-2215. Writeup: https://hernan.de/blog/2019/10/15/tailoring-cve-2019-2215-to-achieve-root/ Qu1ckR00t is a PROOF OF CONCEPT. It should NOT be used on your personal device with valuable userdata. It has...

CVE-2021-28663

CVE-2021-28663 A basic PoC leak for CVE-2021-28663 Internal of the Android kernel backdoor vulnerability This is a basic PoC for CVE-2021-28663. A design flaw in Mali GPU Android Kernel Driver. 1. Create a GPUVA and also mmap to it so we can get virtual addr for phys pages. 2. Create an alias for...

bad_io_uring

Bad IOuring https://www.blackhat.com/us-23/briefings/schedule/index.htmlbad-iouring-a-new-era-of-rooting-for-android-32243 Build the exploit Make sure the Android NDK is installed. For pixel 6, make pixel For samsung s22, make s22 How to use the exploit The exploit is written to support different...

android_kernel_xiaomi_sm8150

This repository does not have a README...

CVE-2022-20607

CVE-2022-20607 In the Pixel cellular firmware, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution with LTE authentication needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID:...

ghost-hoock

ghost-hoock A minimal fork of GhostLock that keeps only one primitive : turning off SELinux via CVE-2026-43499 futex PI UAF. ghost-hoock running on Samsung A17 -green Table of contents What is this How it works What was kept from the original What was removed Building Running Requirements...

CVE-2019-2215

CVE-2019-2215 CVE-2019-2215 POC for kernel 3.18 Based on Maddie Stone's POC from https://bugs.chromium.org/p/project-zero/issues/detail?id=1942 How to use: adb push su98 /data/local/tmp adb push su98-memory-kallsyms /data/local/tmp adb shell G8231:/ $ cd /data/local/tmp G8231:/ $ chmod 755...

ghost-hoock

ghost-hoock A minimal fork of GhostLock that keeps only one primitive : turning off SELinux via CVE-2026-43499 futex PI UAF. -green Table of contents What is this How it works What was kept from the original What was removed Building Running Requirements Limitations and risks Project layout Licen...