Auto-Root-Exploit

Auto-Root-Exploit Auto Root Exploit Tool Author : Nilotpal Biswas Facebook : https://www.facebook.com/nilotpal.biswas.73 Twitter : https://twitter.com/nilotpalhacker USAGE : for kernel version 2.6 all bash autoroot.sh 2 for kernel version 3 all bash autoroot.sh 3 for kernel version 4 all bash...

root-zte-open

root-zte-open exploit for CVE-2012-4220 working on zte-open Original Advisory: https://www.codeaurora.org/projects/security-advisories/multiple-issues-diagkgsl-system-call-handling-cve-2012-4220-cve-2012 Original Exploit: https://github.com/hiikezoe/breaksetresuid Build $ ndk-build NDKPROJECTPATH...

Android-Privilege-Escalation-Remote-Access-Vulnerability-CVE-2015-1805

Android-Privilege-Escalation-Remote-Access-Vulnerability-CVE-2015-1805 inject a root exploit as a silent installation to perform a malicious task on the device. Vulnerability AndroRAT does not focus on targeting a specific user but rather works to acquire the confidence of the entire network...

mali-pagecache-root

TCL 50C721 rooting toolkit Full root exploit chain and post-root toolkit for tethered root, SELinux Permissive, ad blocking, debloat and automated backup on one TCL Android TV firmware. This is firmware-specific research and tooling, not a universal TCL root tool or a supported installer. Tested...

ghostlock-sabrina

GhostLock Sabrina Root exploit for Chromecast with Google TV sabrina via CVE-2026-43499 -- a use-after-free in the Linux kernel's futex PI priority inheritance subsystem. Achieves root on a locked bootloader device running Android 14 with kernel 5.15.170 PGO+BOLT+LTO, clang 17. The vulnerability...

bad_io_uring

Bad IOuring https://www.blackhat.com/us-23/briefings/schedule/index.htmlbad-iouring-a-new-era-of-rooting-for-android-32243 Build the exploit Make sure the Android NDK is installed. For pixel 6, make pixel For samsung s22, make s22 How to use the exploit The exploit is written to support different...

LARE

LARE L ocal A uto R oot E xploiter is a simple bash script that helps you deploy local root exploits from your attacking machine when your victim machine do not have internet connectivity. The script is useful in a scenario where your victim machine do not have an internet connection eg. while yo...

iovy_root_research

Inspired by dosomder/iovyroot https://github.com/dosomder/iovyroot A root tool based on the CVE-2015-1805 vulnerability It supports 32 and 64bit, get sys call table address via swi. ref to Getting syscalltable on Android...

cheese

Root exploit for the Quest 3/3S for the August 7, 2025 update and earlier, based on CVE-2025-21479. screenshot of Magisk, Cheese, and Termux with a root shell Warning: Rooting is dangerous. If you brick a Quest 3/3S, there is no way to repair it. This disables all security when temp rooted. Do NO...

CVE-2016-8655_Android

CVE-2016-5195 GoldFish 3.4 This works on the goldfish 3.4 Emulator Initroot: https://alephsecurity.com/2017/06/07/initroot-moto/ has been released for my device harpia, so I have stopped porting the exploit to my device harpia/.... I have learnt a large amount from working on this project, but...

opd2415-6.6.118-cve-2026-64560-ksu

opd2415-6.6.118-cve-2026-64560-ksu Port of the public CVE-2026-64560 Android kernel proof-of-concept to the OnePlus Pad 3, plus a per-boot KernelSU late-load procedure and a companion Android app that drives the whole flow on-device. Target Item| Value ---|--- Device| OnePlus Pad 3, model OPD2415...

duchamp-root

中文 | English +One-Click+Root;CVE-2026-43499+\IonStack+Exploit;710%E8%A7%A3%E9%94%81%E8%8A%82%E6%9C%80%E6%96%B0%E5%8A%9B%E4%BD%9C+%F0%9F%94%A5 -blue -green ⚡ Proud user of JetBrains Mono ⚡ This README uses JetBrains Mono exclusively. Comic Sans is forbidden. !IMPORTANT 🚨 Disclaimer This exploit is...

CVE-2012-0056

CVE-2012-0056 Mempodipper, a linux local root exploit. Clone From http://git.zx2c4.com/CVE-2012-0056 ssh://[email protected]/CVE-2012-0056...

CVE-2026-46300

CVE-2026-46300 Linux kernel root exploit git clone https://github.com/ExploitEoom/CVE-2026-46300.git chmod +x exploit ./exploit...

PSSRoot

One-Click-Root program based on CVE-2016-5195 or "DirtyCOW"; this should work with the PlayStation Certified devices, but it may come in handy for other old android devices too; Tested on : Xperia Play Android 2.3; Kernel 2.6.32.9 Xperia S Android 4.1.2; Kernel 3.4.0+1.0.21100-313065 Sony Tablet ...

cve-2026-98432-mitigation

한국어 CVE-2026-98432 temporary mitigation This repository holds scripts that drop IPv4 TCP packets carrying IP options on a Linux host. On hosts without SELinux/Smack NetLabel CIPSO labeling, CVE-2026-98432 a Linux kernel IPv4 TCP use-after-free cannot trigger without such packets. It is a temporar...

cve-2026-98432-checker

CVE-2026-98432 checker: Linux TCP use-after-free CVSS 9.8 Understand and check CVE-2026-98432 , the race in the Linux kernel's IPv4 TCP handshake that lets a remote attacker use freed kernel memory. Anthropic's Frontier Red Team turned it into a zero-click root exploit against servers with a...

Probe-CVE-2026-98432

CVE-2026-98432 Detection Toolkit Tools for detecting exposure to CVE-2026-98432 — a Linux kernel IPv4 TCP use-after-free CVSS 9.8 affecting kernels 4.4 through pre-fix stable branches. Tools File| Purpose| Requires ---|---|--- check-cve-2026-98432.sh| Local kernel version check — confirms...

kernel98scan

Checks whether a Linux host may be exposed to CVE-2026-98432 , the use-after-free in the kernel's IPv4 TCP handshake. Part of shouldipanic.ch. A SYN carrying IPv4 options Record Route, Timestamp reaches code that reads the options after they may already have been freed. Any open IPv4 TCP port is...

ghostlock-s26

GhostLock CVE-2026-43499 for the Galaxy S26 CVE-2026-43499 ported to the Samsung Galaxy S26 series — Android 16 / GKI 6.12. One binary, three kernel lines, dynamic parameter matching at runtime: theoretically covers the whole S26 series without per-build compilation. Most GhostLock porting effort...