GhostLock-Galaxy

GhostLock-Galaxy 中文: READMEZH.md This is a separate repository because this route requires Android shell permission, obtained through adb shell or Shizuku. The original YuKongA/ghostlock-app does not use shell permission and follows a different execution route; its requirements and code path shou...

ExploitGSM

ExploitGSM Exploit for 6.4 - 6.5 kernels and another exploit for 5.15 - 6.5 Telegram for contact - https://t.me/YuriiCrimson Telegram chat - https://t.me/itcrowdua In winter I found two vulnerabilities in the ngsm driver. After that Jammes wrote to me offering to buy them from me. As you...

oob_entry

oobentry tfp0 kernel exploit supporting every armv7 iOS version iOS 3.0-10.3.4. The vulnerability used in this exploit is CVE-2023-32434. I will be releasing a write up in the coming weeks about this exploit and methods used...

cve-2018-8453-exp

cve-2018-8453-exp cve-2018-8453 exp This program is an exploit for CVE-2018-8453. The vulnerability itself exists in Windows 7 and later versions. Note: It can only be exploited on Windows 8.1 and later versions! Therefore, this EXP can only be used on Windows 8.1 and later versions...

DirtyClone

DirtyClone DirtyClone es una herramienta de escalada de privilegios local de diagnóstico y prueba de concepto escrita en C. Apunta a una ruta de explotación relacionada con kernel/XFRM descrita en la fuente como CVE-2026-43503 y está destinada únicamente a investigación de seguridad autorizada en...

totally-not-spyware

TotallyNotSpyware This program is definitely not spyware. Run it on your 64-bit iOS device as soon as possible. Your compliance will be rewarded. Live version at totally-not.spyware.lol Repo structure & building Frontend and WebKit exploit are in /root. Kernel exploit is in /glue. Post-exploitati...

Trinity

Trinity Trinity is the third public jailbreak for the PS Vita™ , which supports the latest firmwares 3.69 and 3.70. The exploit chain consists of three stages: the MIPS Kernel Exploit, the PSP Emulator Escape and the ARM Kernel Exploit. Write-up A technical explanation of the Trinity exploit chai...

RootMyVivo-Exploit

RMV Exploit — чистая сборка CVE-2026-43499 для iQOO Neo 11 PD2520 Форк boxiaolanya2008/CVE-2026-43499-Neo11Plus, переработанный под RootMyVivo Neo: убрано всё, что не нужно нашему сценарию, оставлено проверенное ядро эксплойта без изменений таймингов. Что убрано от upstream Компонент| Причина...

vivo-root-build

PD2415 6.6.89 Full-Flow Candidate This source is based on the same-device/same-SoC PD2415 6.6.57 IonStack engine: perf KASLR, pselect GhostLock, CFI fops, pipe physrw. The dumpstate carrier closure is retained from the validated PD2241 method. The archived 6.6.89 target keeps...

CVE-2026-4747-

CVE-2026-4747: FreeBSD Remote Kernel RCE First remote kernel exploit both discovered and exploited by an AI 📋 Quick Summary...

exploit-CVE-2025-39946

README This is an exploit for CVE-2025-39946. It will work on the lts-6.12.48 kCTF instance but not 100% reliable. I wrote a blog post analysing this vulnerability in detail. Check it out here! Adapting for other kernel versions The only modification the exploit should need to work for other kern...

desc_race

descrace iOS 15.1 kernel exploit POC for CVE-2021-30955 Huge thanks to @realBrightiup for the awesome bug and exploit stratergy. His writeup can be found at: https://www.cyberkl.com/cvelist/cvedetail/24...

CTT-NFS-Vortex-RCE

CTT-NFS-Vortex-RCE New Physics Disclosure This repository contains a full weaponized exploit for CVE-2026-21509 , targeting the Windows Network File System NFSv4.1 kernel-mode driver nfssvr.sys. CTT-NFS-Vortex-RCE CVE-2026-21509 ⚠️ Technical Advisory: New Physics Disclosure This repository contain...

CVE-2026-31431-exp

Adapted from https://github.com/theori-io/copy-fail-CVE-2026-31431. Added payload encryption and obfuscation, cache write-back to improve system stability, adaptive chunking, zero dependencies, multi-architecture support x86, arm, i386, etc., and other features. In theory, it can be exploited on...

ghostlock-a17

GhostLock — CVE-2026-43499 on Samsung Galaxy A17 Full user-to-root exploit chain for CVE-2026-43499 "GhostLock" on the Samsung Galaxy A17 SM-A175F , running Android 16 / GKI 6.12. The chain starts from the public GhostLock primitives and ends with a usermode helper executing as: root@kitploit:...

LSPromise

LSPromise A complete exploit chain that enables privilege escalation from a local untrusted app to root/kernel. It does not involve memory corruptions or race conditions, so attackers don't need to perform complex heap spraying or bypass mitigations against memory corruption vulnerabilities such ...

samsung-q60t-exploit

Tizen exploit Description Exploit and firmware decryption script presented at Grehack 2021. Slides are available inside the slides . directory and the replay video onYoutube . Directories This repository contains three directories: exploit/: containing the v8 exploit and the kernel exploit,...

cve-2018-8453-exp

cve-2018-8453-exp cve-2018-8453 exp Este programa es un exploit para cve-2018-8453. Plataforma de desarrollo/pruebas: x86: windows 10 rs2 15063 x64: windos 10 rs2 16299 Nota: utiliza Palette para leer y escribir el kernel Declaración importante: esta herramienta se utiliza únicamente para...

RootMyVivo

RootMyVivo Root for vivo and iQOO phones with a locked bootloader. No unlocking, no flashing — install the APK, press the button, wait. Built on GhostLock CVE-2026-43499, a use-after-free in futex PI plus KernelSU installed on top of the temporary root. Русский · 中文 How it goes 1. Install the APK...

GhostLock-NVIDIA-Shield-9.2.4

GhostLock for NVIDIA Shield TV Pro 9.2.4 Validated arm64 port of the GhostLock futex PI use-after-free CVE-2026-43499 for the 2019 NVIDIA Shield TV Pro mdarcy running Shield Experience 9.2.4. The payload changes the credentials of the live ADB daemon, so new ADB shells are UID 0 without a...