PSSRoot

One-Click-Root program based on CVE-2016-5195 or "DirtyCOW"; this should work with the PlayStation Certified devices, but it may come in handy for other old android devices too; Tested on : root@kitploit: Xperia Play Android 2.3; Kernel 2.6.32.9 Xperia S Android 4.1.2; Kernel 3.4.0+1.0.21100-3130...

duchamp-root

中文 | English +One-Click+Root;CVE-2026-43499+\IonStack+Exploit;710%E8%A7%A3%E9%94%81%E8%8A%82%E6%9C%80%E6%96%B0%E5%8A%9B%E4%BD%9C+%F0%9F%94%A5 -blue -green ⚡ Proud user of JetBrains Mono ⚡ This README uses JetBrains Mono exclusively. Comic Sans is forbidden. !IMPORTANT 🚨 Disclaimer This exploit is...

cheese

Root exploit for the Quest 3/3S for the August 7, 2025 update and earlier, based on CVE-2025-21479. screenshot of Magisk, Cheese, and Termux with a root shell Warning: Rooting is dangerous. If you brick a Quest 3/3S, there is no way to repair it. This disables all security when temp rooted. Do NO...

Android-Privilege-Escalation-Remote-Access-Vulnerability-CVE-2015-1805

Android-Privilege-Escalation-Remote-Access-Vulnerability-CVE-2015-1805 inject a root exploit as a silent installation to perform a malicious task on the device. Vulnerability AndroRAT does not focus on targeting a specific user but rather works to acquire the confidence of the entire network...

LARE

LARE L ocal A uto R oot E xploiter is a simple bash script that helps you deploy local root exploits from your attacking machine when your victim machine do not have internet connectivity. The script is useful in a scenario where your victim machine do not have an internet connection eg. while yo...

Auto-Root-Exploit

Auto-Root-Exploit Auto Root Exploit Tool Author : Nilotpal Biswas Facebook : https://www.facebook.com/nilotpal.biswas.73 Twitter : https://twitter.com/nilotpalhacker USAGE : root@kitploit: for kernel version 2.6 all bash autoroot.sh 2 for kernel version 3 all bash autoroot.sh 3 for kernel version...

bad_io_uring

Bad IOuring https://www.blackhat.com/us-23/briefings/schedule/index.htmlbad-iouring-a-new-era-of-rooting-for-android-32243 Build the exploit Make sure the Android NDK is installed. For pixel 6, root@kitploit: make pixel For samsung s22, root@kitploit: make s22 How to use the exploit The exploit i...

cheese

适用于 Quest 3/3S 的 Root 漏洞利用（2025 年 8 月 7 日更新及更早版本），基于 CVE-2025-21479。 Magisk、Cheese 和 Termux 带有 root shell 的截图 警告： Root 是危险的。如果你将 Quest 3/3S 变砖，将无法修复。 此操作在临时 root 状态下会禁用所有安全机制。 不要运行你不可信的应用程序或浏览你不可信的网站。 不要写入 boot 或 system 分区。否则你会变砖。 不要使用 Magisk 的“安装”功能。 你可能希望在 root 后备份你的 deviceKey、Meta Access Token...

iovyroot

iovyroot 一个基于 CVE-2015-1805 漏洞 的 root 工具 它支持 32 位和 64 位，但需要绝对内核地址（请参见 offsets.c） PoC 由 idler1984 完成 https://github.com/idl3r/testcode...

CVE-2021-4034

Exploit CVE-2021-4034 Exploit root para la vulnerabilidad PwnKit. Consulta el informe original aquí. Utiliza este exploit solo con el permiso expreso de los propietarios del sistema objetivo. Compilación No se necesitan dependencias además de libc. Solo ejecuta make. Ejecución Ejecutar sin opcion...

CVE-2022-34753-EXPLOIT

CVE-2022-34753 - OS Command Injection in SpaceLogic C-Bus Home Controller CVE-2022-34753 is a critical security vulnerability classified under CWE-78, indicating an "Improper Neutralization of Special Elements used in an OS Command" commonly referred to as 'OS Command Injection'. This vulnerabili...

root-zte-open

root-zte-open exploit for CVE-2012-4220 working on zte-open Original Advisory: https://www.codeaurora.org/projects/security-advisories/multiple-issues-diagkgsl-system-call-handling-cve-2012-4220-cve-2012 Original Exploit: https://github.com/hiikezoe/breaksetresuid Build root@kitploit: $ ndk-build...

iovy_root_research

灵感来自 dosomder/iovyroot https://github.com/dosomder/iovyroot 一个基于 CVE-2015-1805 漏洞 的 root 工具 它支持 32 位和 64 位，通过 swi 获取系统调用表地址。参考 在 Android 上获取 syscalltable...

CVE-2016-8655_Android

CVE-2016-5195 GoldFish 3.4 This works on the goldfish 3.4 Emulator Initroot: https://alephsecurity.com/2017/06/07/initroot-moto/ has been released for my device harpia, so I have stopped porting the exploit to my device harpia/.... I have learnt a large amount from working on this project, but...

ghostlock-s26

GhostLock CVE-2026-43499 for the Galaxy S26 CVE-2026-43499 ported to the Samsung Galaxy S26 series — Android 16 / GKI 6.12. One binary, three kernel lines, dynamic parameter matching at runtime: theoretically covers the whole S26 series without per-build compilation. Most GhostLock porting effort...

CVE-2026-46300

CVE-2026-46300 Linux kernel root exploit root@kitploit: git clone https://github.com/ExploitEoom/CVE-2026-46300.git chmod +x exploit ./exploit...

CVE-2012-0056

CVE-2012-0056 Mempodipper, a linux local root exploit. Clone From http://git.zx2c4.com/CVE-2012-0056 ssh://[email protected]/CVE-2012-0056...

Astra Linux – Vulnerability found in Linux 6.1, Linux 6.12

In the Linux kernel, the following vulnerabilities have been resolved: net: skbuff: Fixed an issue where a missing zerocopy reference was present in the pskbcarve helpers. Both pskbcarveinsideheader and pskbcarveinsidenonlinear copy the old skbsharedinfo header into a new buffer using memcpy. Thi...

duchamp-root v52c8d05bcf

中文 | English +One-Click+Root;CVE-2026-43499+\IonStack+Exploit;710%E8%A7%A3%E9%94%81%E8%8A%82%E6%9C%80%E6%96%B0%E5%8A%9B%E4%BD%9C+%F0%9F%94%A5 -blue -green ⚡ Proud user of JetBrains Mono ⚡ This README uses JetBrains Mono exclusively. Comic Sans is forbidden. !IMPORTANT 🚨 Disclaimer This exploit is...

SUSE CVE-2026-63964

In the Linux kernel, the following vulnerability has been resolved: usb: typec: ucsi: ccg: reject firmware images without a ':' record header doflash locates the first .cyacd record with p = strnchrfw-data, fw-size, ':'; while p eof s = strnchrp + 1, eof - p - 1, ':'; ... If the firmware image...