This is a write up of the exploit I developed for the Pwn2Own Automotive 2026 competition.
一加 15T(PLZ110)临时 root + KernelSU per-boot 接管:CVE-2026-64560 移植,不写分区、重启即失效。内核 6.12.69-android16-6-g242e1a07f878。
UNIX-like reverse engineering framework and command-line toolset.
ExploitGym is a large-scale, realistic benchmark built from real-world vulnerabilities designed to evaluate AI agents' ability to develop exploits.
Anything about kernel security. CTF kernel pwn, kernel exploit, kernel fuzz and kernel defense paper, kernel debugging technique, kernel CVE debug.
Awesome CSIRT is an curated list of links and resources in security and CSIRT daily activities.
CTF kernel exploitation notes, PoCs, exploits, and writeups.
Stuxnet - a super-factory virus discovered in 2010, exploited multiple vulnerabilities and modules. Here reproduced by me. Set work on Windows 7 and Windows XP.
KASLD defeats Linux kernel KASLR from a local process — recovering the virtual and physical memory layout where a leak or side channel allows, and narrowing it to the smallest set of placements the evidence supports otherwise.
Android complete exploit chain that enables privilege escalation from a local untrusted app to root/kernel, combination of CVE-2026-49881 and CVE-2026-43284
CVE-2026-43499 full exploit chain for Samsung Galaxy S22 Ultra (Android 5.10 kernel)
CVE research and exploits to help gaining roots for Pixel devices
Samsung temp root tool (until reboot) — Ghostlock / dirtyfrag exploit chains + manager app.
One-touch, universal root for Samsung devices as u:r:init:s0
Exploit payloads for Root My Pixel
Kernel root exploit (CVE-2026-43499) for some Amazon devices
An A12/A13 SecureROM exploit
The complete hacking & penetration testing roadmap. From beginner to elite. 44,982 lines, 150+ Diagram across the roadmap: OPSEC, web security, Active Directory, binary exploitation, EDR evasion, and 0-day research. 300+ tools, 200+ MITRE techniques, C & Rust payloads, lab guides, books, courses, blogs, practice platforms, and AI security resources
Preloader exploit for some MediaTek based Amazon devices
RingKiller — BYOD PoC for vulnerable driver DCRCVDrv.sys. Abuses IOCTL 0x2205C0 to kill arbitrary processes from ring 0 via ZwTerminateProcess. EDR/AV termination primitive. Lab only.