Ephemeral root via the CVE-2026-43284 page-cache exploit

android linux-kernel root samsung android-security privilege-escalation kernel-exploit android-root oneui kernelsu dirtyfrag cve-2026-43284

• Updated Nov 8, 2026
• Java

a series tutorial for linux exploit development to newbie.

linux tutorials kernel-exploit

• Updated Apr 12, 2024
• C

KASLD defeats Linux kernel KASLR from a local process — recovering the virtual and physical memory layout where a leak or side channel allows, and narrowing it to the smallest set of placements the evidence supports otherwise.

linux security kernel linux-kernel pentesting kernel-exploitation aslr ctf-tools side-channel-attacks exploit-development kernel-exploit aslr-bypass kaslr linux-kaslr kernel-security kaslr-bypass microarchitectural-attacks linux-aslr kernel-aslr

• Updated Oct 11, 2026
• C

Cross-platform C port of the Copy Fail Linux LPE (CVE-2026-31431). Disclosed 2026-04-29 by Theori / Xint.

proof-of-concept exploit linux-kernel privilege-escalation af-alg local-privilege-escalation security-research kernel-exploit portable-c nolibc cve-2026-31431 copy-fail

• Updated Jul 17, 2026
• C

x64 Windows kernel code execution via user-mode, arbitrary syscall, vulnerable IOCTLs demonstration

windows cli kernel driver windows-10 memory-hacking device-driver drivers kernel-exploitation code-execution kernel-exploit kernel-exploits smep smep-bypass

• Updated Jul 6, 2022
• C++

A PoC for Mhyprot2.sys vulnerable driver that allowing read/write memory in kernel/user via unprivileged user process.

windows kernel exploit driver kernel-exploit kernel-exploits mhyprot2 mhyprot

• Updated Jul 3, 2021
• C++

Hells Hollow Windows 11 Rootkit technique to Hook the SSDT via Alt Syscalls

kernel exploit rootkit malware syscalls ssdt kernel-exploit ssdt-hook windows-11 windows11 ssdt-plug ssdt-hooking alt-syscalls alternative-syscalls

• Updated Jul 13, 2026
• Rust

macOS Kernel Exploit for CVE-2019-8781.

macos exploit kernel-exploit

• Updated Oct 15, 2019
• C

Linux Kernel exploitation Tutorial.

linux-kernel tutorials kernel-exploitation tutorial-exercises linux-kernel-hacking kernel-exploit

• Updated Jun 30, 2020
• C

Tutorial for writing kernel exploits

tutorial linux-kernel kernel-exploit

• Updated Aug 10, 2025
• C

x64 Windows kernel driver mapper, inject unsigned driver using anycall

windows kernel windows-10 injector code-injection code-execution kernel-exploit kernel-exploits

• Updated Feb 14, 2024
• C++

Userland -> Kernel11 -> Arm9 otherapp for 3DS system versions 1.0 to <= 11.15

exploit nintendo-3ds 3ds kernel-exploit

• Updated Jan 7, 2023
• C

Exploit MsIo vulnerable driver

windows kernel kernel-exploit kernel-exploits cve-2019-18845

• Updated Aug 12, 2021
• C++

A local privilege escalation chain from user to kernel for MacOS < 10.15.5. CVE-2020–9854

macos exploit kernel-exploit

• Updated Oct 15, 2020
• Objective-C

Executing Kernel Routines via Syscall Table Hijack (Kernel Code Execution)

kernel reverse-engineering kernel-exploitation kernel-exploit windows-11

• Updated Jun 7, 2026
• C++

OPPO Find N2 GhostLock (CVE-2026-43499) exploit adaptation

exploit linux-kernel arm64 android-security privilege-escalation futex kernel-exploit heap-spray use-after-free kaslr cve-2026-43499 oppo-find-n2

• Updated Oct 30, 2026
• C

Best Wii U TCP Gecko Homebrew Modding Engine Guide 2026

homebrew nintendo tcp exploit assembly wiiu hacking ppc trainer homebrew-launcher cheat-codes game-modding kernel-exploit cafe-codes wiiu-game-mod sd-cheat-codes cafe-codehandler jgecko-u

• Updated Nov 12, 2026
• HTML

The Nintendo Wii U TCP Gecko Installer engine homebrew application for game modding and research

homebrew nintendo tcp exploit assembly wiiu hacking ppc trainer homebrew-launcher cheat-codes game-modding kernel-exploit cafe-codes wiiu-game-mod sd-cheat-codes cafe-codehandler jgecko-u

• Updated Mar 27, 2024
• C

Glass Cage is a zero-click PNG-based RCE chain in iOS 18.2.1, bypassing LockDown mode protection by exploiting ImageIO (CVE-2025-43300), then WebKit(CVE-2025-24201) and Core Media(CVE-2025-24085) to achieve sandbox escape, kernel-level access, and device bricking. Triggered via iMessage, it enables full compromise with no user interaction.

ios rce imessage privilege-escalation zeroday kernel-exploit sandbox-escape zero-click cve-2025-24085 cve-2025-24201

• Updated Jan 11, 2026

Temporary root on a locked Android bootloader - curated loaders, devices, and modules for DirtyFrag and GhostLock

android security root awesome-list bootloader cve kernel-exploit android-root kernelsu dirtyfrag ghostlock temporary-root

• Updated Nov 12, 2026
• Astro