TickTock

TickTock This repository demonstrates a PoC memory scanner for enumerating timer-queue timers as used in Ekko Sleep Obfuscation: https://github.com/Cracked5pider/Ekko. For a full technical walkthrough please see the accompanying blog post here:...

chronomaly

Chronomaly Chronomaly is a kernel exploit for the Android / Linux kernel using CVE-2025-38352. The exploit was written specifically for Linux kernel v5.10.157, but should work against all vulnerable v5.10.x kernels, as it does not require any specific kernel text offsets to work. I covered the...

CVE-2026-98260-vivo-s60-poc

CVE-2026-98260 vivo S60 PD2571 PoC POSIX CPU timer UAF → uid-0 shell + KernelSU late-load 仅用于对自己拥有或已获授权的设备进行安全研究。利用代码刻意不做持久化、不写分区、不留下后门；使用风险自负。 背景 因为更新了谷歌安全更新10月补丁，导致无法使用 ghostlock 临时root 目标设备 项目| 值 ---|--- 设备| vivo PD2571 / V2571A vivo S60 内核| 6.1.145-android14-11-maybe-dirty 系统版本| 16.0.11.15.W1...

CVE-2026-98260

CVE-2026-98260 Timer LPE CVE-2026-98260 POSIX CPU timer UAF 移植，支持情况见「内核支持」 两条链： timer：真实 cred 零写 → uid=0、u:r:shell:s0（shell 域 root，bset caps） timer fake：fake cred（full caps）→ 安装版 KernelSU libksud.so late-load 状态 路径| 结果 ---|--- real cred 零写 + setuid0 + exec sh| uid=0、u:r:shell:s0、ROOTSHELLOK fake...

Remote-DLL-Injection-with-Timer-based-Shellcode-Execution

Remote DLL Injection with Timer-based Shellcode Execution Documentation updated from previous mistake proces injection title! ⚠ Educational Research Only This repository contains security research for educational purposes and authorized use only. Use responsibly and in accordance with all...

GhostLock-CVE-2026-98260

CVE-2026-98260 for iQOO Neo11 V2520A A local privilege escalation payload based on a POSIX CPU Timer UAF, adapted for kernel 6.6.89-android15-8. ⚠️ Notes This vulnerability is a kernel-mode memory corruption UAF; the first run will most likely cause the phone to go black or a kernel Panic crash an...

cve-2026-98260-vivo-gki-research

CVE-2026-98260 on vivo/iQOO 6.6.127 GKI — 研究笔记 本仓库公开我们对 CVE-2026-98260 （Linux 内核 exec / POSIX CPU timer UAF）在 iQOO Z10 Turbo Pro（PD2453 / SM8735 / Android 16 / GKI 6.6.127） 上移植过程的研究笔记、实测结论与卡点 ， 目的是让同机型/同内核、以及做内核漏洞研究的朋友一起讨论，少走弯路。 ⚠️ 本仓库不包含 可运行的 exploit 源码或二进制，也不提供一键复现步骤。 我们选择"公开研究、暂不公开武器化代码"的方式，详见...

InfinityCore-Android-CVE-2026-98260

InfinityCore Android — CVE-2026-98260 Timer Chinese Overview ARM64 implementation of the Infinity Core series Timer subsystem vulnerability, with the target kernel form being the 7.0 series same source code structure as Ubuntu 26.04 7.0.0-30-generic. This repository implements the complete trigge...

CallStackMasker

CallStackMasker This repository demonstrates a PoC technique for dynamically spoofing call stacks using timers. Prior to our implant sleeping, we can queue up timers to overwrite its call stack with a fake one and then restore the original before resuming execution. Hence, in the same way we can...

Ciphey

Ciphey Paste in text that's been encoded or encrypted. Ciphey works out how and hands you the plaintext. No key, no cipher name, no hints. Base64, hex, Caesar/ROT13, Vigenère, Morse code and 19 more, several layers deep. Install · Quick start · Features · Library · MCP · Docs · Discord ▶ Watch th...

CVE-2026-98260-for-OPD2501

CVE-2026-98260 Timer LPE — OPPO Pad Air 5 OPD2501 / MT6878 Port Use only on your own device. This is a kernel exploit; failure may cause a panic/reboot; do not run it on a device with unsaved data. Temporary root, disappears after a hard reboot. The original branch of this repository,...

CVE-2026-98260

CVE-2026-98260 Timer LPE CVE-2026-98260 POSIX CPU timer UAF port for 6.6.118-android15-8-g9bc34d5b0c79-abogki537459655-4k OnePlus PKX110, SM8650/sun Two chains: timer：真实 cred 零写 → uid=0、u:r:shell:s0（shell 域 root，bset caps） timer fake：fake cred（full caps）→ 安装版 KernelSU libksud.so late-load Status...

Microsoft Windows Cloud Files Mini Filter Driver CldiStreamCompleteRequest use-after-free vulnerability

Summary A use-after-free vulnerability exists in the CldiStreamCompleteRequest functionality of Windows Cloud Files Mini Filter Driver versions: 10.0.26100.8457 WinBuild.160101.0800. A specially crafted sequence of Cloud Filter API calls can lead to privilege escalation. An attacker can execute a...

o365spray

o365spray o365spray is a username enumeration and password spraying tool aimed at Microsoft Office 365 O365. This tool reimplements a collection of enumeration and spray techniques researched and identified by those mentioned in Acknowledgments. For educational, authorized and/or research purpose...

opace6-cve-2026-64560

OnePlus Ace 6 Temporary Root Tool Obtain temporary root privileges for the current boot session on OnePlus Ace 6 via CVE-2026-64560 Linux kernel POSIX CPU timer UAF vulnerability. Invalidated after reboot, does not modify system partitions. !WARNING May cause device reboot or data loss. Use only ...

CVE-2026-26221-Hyland-OnBase-Timer-Service-Unauthenticated-RCE

📡 Hyland OnBase Timer Service Unauthenticated RCE Mohammed Idrees Banyamer Security Researcher Jordan 🇯🇴 🧨 Overview This repository contains a Proof‑of‑Concept exploit for Hyland OnBase Timer Service unauthenticated remote code execution vulnerability via insecure .NET Remoting BinaryFormatter...

DeadManSwitch

Dead Man Switch Overview Dead Man Switch is a cross-platform security application written in Rust that automatically protects sensitive data in emergency situations. The application monitors multiple trigger mechanisms and executes immediate system lockdown procedures when activated, including...

CVE-2026-26399-Disclosure

CVE-2026-26399: Stack-based Use-After-Return in ArduinoCoreSTM32 Legacy Versions Summary A stack-based use-after-return vulnerability exists in legacy versions of ArduinoCoreSTM32 prior to version 1.7.0. The issue is located in the pwmstart implementation, where a TIMHandleTypeDef object is...

2022-LPE-UAF

2022-LPE-UAF Untested POC code Security researchers discovered 3 vulnerabilities in the Linux kernel that could allow a local attacker to elevate privileges and potentially execute malicious code. The proof-of-concept code is publicly available increasing the likelihood of exploitation in the wil...

2022-LPE-UAF

2022-LPE-UAF Untested POC code Security researchers discovered 3 vulnerabilities in the Linux kernel that could allow a local attacker to elevate privileges and potentially execute malicious code. The proof-of-concept code is publicly available increasing the likelihood of exploitation in the wil...