Mi8E5-Unlocker-by-CVE-2026-43499

Mi 8e5 Unlock Toolkit Automated bootloader unlock assistant for Mi 8e5 series devices, implementing CVE-2026-43499. This is an English-translated and macOS/Linux-ported fork of the original Windows-only release by @Kernix. Original repo:...

OpenPetya

OpenPetya A Proof-of-Concept bootkit and UEFI boot application inspired by Petya ransomware, written in Assembly, C, and C++ If you find this project helpful or informative, I would truly appreciate a ⭐ on the repository. Your support would be a great motivation for me to continue improving this...

ch55x_firmware_extractor

CH55x firmware extractor The CH55x firmware extractor is used to read out firmware from CH55x integrated circuits. There is no in-built support in the devices for directly reading out the firmware through the bootloader. However, there is a functionality to verify the firmware contents 8 bytes at...

ROOT-ZTE-X1001

ZTE Blade X1001 — Root with Magisk Android 15, Unisoc UMS9230 ⚠️ WARNING: Rooting a device can void the warranty, brick the device if done incorrectly, and erase all data. Proceed at your own risk. This repository is for educational purposes only. Table of Contents Device information Prerequisites...

Bootloader_Unlock_Anbernic_T820

Anbernic Unisoc T820 Bootloader Unlock Guide - TheGammaSqueeze - https://github.com/TheGammaSqueeze The bootloader unlock is required before flashing any custom firmware or custom fixes. You may be interested in this analog stick sensitvity fix after unlocking your bootloader:...

Quantum-Silicon-Core-Loader

Quantum Silicon Core Loader Primary Core: qslcl.asm v0.0.2 under development Assistant Module: qslcl.bin v0.7.4 Universal Controller: qslcl.py v2.2.2 Legally Protected Research - This project operates under established legal frameworks for security research, right to repair, and academic freedom...

ipxe

iPXE network bootloader iPXE is the leading open source network boot firmware. It provides a full PXE implementation enhanced with additional features such as: boot from a web server via HTTP or HTTPS, boot from an iSCSI, FCoE, or AoE SAN, control the boot process with a script, create interactiv...

BareMetal-RAM-Dumper

BareMetal RAM Dumper A simple x86 bare-metal tool designed to boot from a disk/USB and dump the system's RAM directly to the booting medium. It relies on BIOS interrupts to boot and perform disk operations, and enters unreal mode to access memory above the 1MB barrier. Background: Cold Boot Attac...

DigiDuck-Framework

DigiDuck Framework Framework for Digiduck Development Boards running ATTiny85 processors and micronucleus bootloader! alt text Screenshot of DDF Welcome Screen Roadmap: Plan to implement a command for Duckyspark translation within the framework. Requirements: - ATTiny85 or other compatible...

CVE-2022-38694_unlock_bootloader

CVE-2022-38694 An attacker with physical access to the device can overwrite a function pointer somewhere in the BootROM data section or a return address stored on the stack and execute their own code with BootROM privileges. For detailed information, read the article by NCC Group. Quick links: To...

ABL_ROP

Updating ABL serial with ROP: When ran this notebook will load ABL and attempt to update the device's serial number via ROP chain to call memmove. Derived from eShard's https://github.com/eshard/pixel6-boot/blob/main/runablpublic.ipynb whilst following along with...

initroot

initroot: Motorola Bootloader Kernel Cmdline Injection Secure Boot & Device Locking Bypass CVE-2016-10277 By Roee Hay / Aleph Research, HCL Technologies First stage exploit: Tethered jailbreak This exploit gains an ephemeral unrestricted root access on the device. For example, on cedric some...

QuestStack

QuestStack QuestStack — это проект для получения root-доступа и разблокировки загрузчика на Meta Quest. Используя цепочку повышения привилегий GhostLock и уязвимость CVE-2021-1931 в ABL/fastboot, QuestStack предоставляет способ получить root-доступ на последней прошивке Quest 1, временно...

F9360-CVE43499

SM-F9360 Galaxy Z Fold4 / q4q Root через KernelSU без разблокировки Bootloader CVE-2026-43499 временный root → обход DEFEX через канал LDPRELOAD → kernelsu.ko без LTO, собранный clang-12 → su + полный функционал KernelSU Manager Статус: ✅ 2026-08-12 подтверждено на реальном устройстве прошивка...

CVE-2025-45512

U-Boot 1.1.3 Exploit PoC Usage Guide Introduction This Proof of Concept PoC was created to verify vulnerabilities in the U-Boot bootloader version 1.1.3 compiled on August 27, 2019. The code implements five different vulnerabilities relevant to the OWASP IoT Security Testing Guide ISTG categories...

GhostLock-for-OnePlus15T

GhostLock — OnePlus 15T Exploit noyau ciblant les appareils OnePlus 15T à bootloader verrouillé. Utilise CVE-2026-43499 pour obtenir un accès root sans déverrouiller le bootloader ni modifier boot.img. Uniquement à des fins de recherche en sécurité autorisée et d'éducation. Modifié à partir dudép...

GhostLock-for-OnePlus

GhostLock — OnePlus Exploit noyau ciblant les appareils OnePlus avec bootloader verrouillé. Utilise CVE-2026-43499 pour obtenir un accès root sans déverrouiller le bootloader ni modifier boot.img. Recherche en sécurité autorisée et usage éducatif uniquement. Table des matières Aperçu de la...

Super-UEFIinSecureBoot-Disk

Super UEFIinSecureBoot Disk Super UEFIinSecureBoot Disk est une image amorçable proof-of-concept non activement maintenue ou améliorée avec chargeur de démarrage GRUB2 conçue pour être utilisée comme base pour les clés USB de récupération. Fonctionnalité clé : le disque est entièrement fonctionne...

zenfone9-root

zenfone9-root — временный root на ASUS Zenfone 9 с заблокированным загрузчиком Исследовательский код и заметки для получения временного root uid 0 на ASUS Zenfone 9 AI2202, загрузчик которого невозможно разблокировать — потому что ASUS прекратила поддержку своего инструмента разблокировки, удалил...

Bootloader_Unlock_Retroid_Pocket_3Plus

Bootloader Unlocking for Retroid Pocket 3Plus 2 Methods of unlocking boorloader for the RP3+ Bootloader unlock using CVE-2022-38694 for Retroid Pocket 3+ By following this guide, you acknowledge that you understand the risks involved in unlocking your device's bootloader. Ensure you have backed u...