642 matches found
CVE-2022-25636
CVE-2022-25636 This is my exploit for CVE-2022-25636. I tested it against Ubuntu 21.10 with kernel 5.13.0-30. Works about 40% of the time, in the other cases you likely get a kernel panic. The exploit might corrupt important data on heap, after an unsuccessful attempt it's best to reboot...
collateral-damage
Collateral Damage Collateral Damage is a kernel exploit for Xbox SystemOS using CVE-2024-30088. It targets Xbox One and Xbox Series consoles running kernel versions 25398.4478, 25398.4908, and 25398.4909. The initial entrypoint is via the Game Script UWP application. The first stage payloads, PE...
cve-2013-1300
This is non-working, but is most of the way to a working exploit... https://labs.mwrinfosecurity.com/blog/2013/09/06/mwr-labs-pwn2own-2013-write-up---kernel-exploit/...
CVE-2022-22057_SM-F926U
Fork My adaptation for the SM-F926U from the original exploit here HUGE thanks to m-y-mo for discovering the exploit and his extreme patience with all my questions to port this to SM-F926U and make it useable I've added a startup daemon libtimeline.so based on code from Shizuku Added a dirty tric...
2005
2005 Linux Kernel Exploits - CVE-2005-0736 + CVE-2005-1263...
PS4-5.05-Kernel-Exploit
PS4 5.05 Kernel Exploit Summary In this project you will find a full implementation of the second "bpf" kernel exploit for the PlayStation 4 on 5.05. It will allow you to run arbitrary code as kernel, to allow jailbreaking and kernel-level modifications to the system. This exploit also contains...
darksword-kexploit
DarkSword Kernel Exploit Reimplemented in Objective-C. Supposed to support iOS 15.0 - 26.0.1. Offsets hardcoded for 15.x? NOTE: THIS EXPLOIT WAS NOT DISCOVERED / LEAKED BY ME, THE ORIGINAL SOURCE FOR THE LEAK IS https://github.com/htimesnine/DarkSword-RCE THIS EXPLOIT IS ALSO COMPLETELY UNRELATED...
cve-2026-43499-m3q-azf1
GhostLock SELinux park β SM-S948U1 / AZF1 m3q Research snapshot of a working SELinux-only park for Samsung Galaxy S26 Ultra SM-S948U1, codename m3q on firmware S948U1UES3AZF1 GKI 6.12.30-android16-5. This package is not a complete root. It flips SELinux to Permissive and holds reclaim long enough...
cve-2019-2215-3.18
cve2019-2215-3.18 cve2019-2215 poc for 3.18 kernel Based on Maddie Stone's POC from https://bugs.chromium.org/p/project-zero/issues/detail?id=1942...
GhostLock-Galaxy
GhostLock-Galaxy δΈζ: READMEZH.md This is a separate repository because this route requires Android shell permission, obtained through adb shell or Shizuku. The original YuKongA/ghostlock-app does not use shell permission and follows a different execution route; its requirements and code path shou...
PS5-IPV6-Kernel-Exploit
PS5 3.xx / 4.xx Kernel Exploit Summary This repo contains an experimental WebKit ROP implementation of a PS5 kernel exploit based on TheFlow's IPV6 Use-After-Free UAF , which was reported on HackerOne. The exploit strategy is for the most part based on TheFlow's BSD/PS4 PoC with some changes to...
2006
2006 Linux Kernel Exploits - CVE-2006-2451 + CVE-2006-3626...
ClearSword
ClearSword Overview A DarkSword Kernel exploit C port I tried to keep it as close to the original as possible, but had to do a few changes to make it work in earlier iOS versions. These changes and personal modifications will be denoted by NOTE comments. I've added line comments to basically ever...
CVE-2022-0995
CVE-2022-0995 This is my exploit for CVE-2022-0995, an heap out-of-bounds write in the watchqueue Linux kernel component. It uses the same technique described in https://google.github.io/security-research/pocs/linux/cve-2021-22555/writeup.html. The exploit targets Ubuntu 21.10 with kernel...
CVE-2022-0995
CVE-2022-0995 Exploit for CVE-2022-0995. Uses a heap out-of-bounds write in the watchqueue component of the Linux kernel. A similar technique is described in this research https://google.github.io/security-research/pocs/linux/cve-2021-22555/writeup.html. The exploit has been tested on Ubuntu 21.1...
chronomaly
Chronomaly Chronomaly is a kernel exploit for the Android / Linux kernel using CVE-2025-38352. The exploit was written specifically for Linux kernel v5.10.157, but should work against all vulnerable v5.10.x kernels, as it does not require any specific kernel text offsets to work. I covered the...
CVE-2025-29824-Exploit
π¨ CVE-2025-29824 Exploit: PipeMagic Ransomware Chain π Critical Vulnerability Overview Privilege Escalation Flaw in Windows CLFS β SYSTEM Privilege Hijack Exploited in Active Ransomware Attacks by Storm-2460 Threat Group π₯οΈ Affected Systems Expand System List 𧩠Exploit Chain Workflow graph LR...
ExploitGSM
ExploitGSM Exploit for 6.4 - 6.5 kernels and another exploit for 5.15 - 6.5 Telegram for contact - https://t.me/YuriiCrimson Telegram chat - https://t.me/itcrowdua In winter I found two vulnerabilities in the ngsm driver. After that Jammes wrote to me offering to buy them from me. As you...
GhostLock-NVIDIA-Shield-9.2.4
GhostLock for NVIDIA Shield TV Pro 9.2.4 Validated arm64 port of the GhostLock futex PI use-after-free CVE-2026-43499 for the 2019 NVIDIA Shield TV Pro mdarcy running Shield Experience 9.2.4. The payload changes the credentials of the live ADB daemon, so new ADB shells are UID 0 without a...
Trigon
Trigon Trigon is a deterministic kernel exploit and PPL bypass based on CVE-2023-32434. It supports A9 - A16 devices running iOS 13 - 16.5.1. Being deterministic means that this exploit will never panic during or after exploitation and is completely reliable. Trigon exploits an integer overflow i...