Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories
Tools/GitHubGitHub/everyoneexe/root-s24-e1s
Android SecurityPrivilege EscalationExploit FrameworksExploitationMobile SecurityPayload Development
GitHubeveryoneexe/root-s24-e1s

root-s24-e1s

Galaxy S24 SM-S921B S921BXXSDCZB2 RAM-only KernelSU Next + Root S24 app

View Repository
81 day agoNot yet reviewed

Most Popular

View all →

Discover the most used tools by our community.

Explore all tools

Browse our collection of tools

View all tools →
Share

Root S24 (e1s / S921BXXSDCZB2)

Per-boot local root on Galaxy S24 SM-S921B firmware S921BXXSDCZB2 (kernel 6.1.138-android14-11), then late-load KernelSU Next so com.rifsxd.ksunext reports Working LKM.

Not affiliated with Root My Galaxy. No GitHub payload feed, no multi-device catalog. One firmware, bundled payload. Use a device you own.

Download

Install the APK from Releases.

KernelSU Next manager (required): v3.3.0

Device

ModelSM-S921B
Codenamee1s
FirmwareS921BXXSDCZB2
Kernel6.1.138-android14-11
BugCVE-2026-43499 (futex PI UAF)
RootRAM-only; reboot drops it
ManagerKernelSU Next v3.3.0

Layout

root@kitploit:~
src/                 exploit + UMH helper (this target only)
src/targets/e1s-S921BXXSDCZB2/
docs/                this firmware + Next LKM notes
kernelsu/            Next-compat .ko + ksud, GPL module source
app/                 Root S24 (Kotlin), bundled DCZB2 payload

App

Settings matches Root My Galaxy (theme, language menu, Shizuku). Shizuku is the reliable transport on this phone (uid 2000). Without it, app UID can SIGKILL the helper (exit 137).

Keep the screen on during install. Do not kill leftover cve-2026-43499-root keepers after a write.

Build from source

root@kitploit:~
export ANDROID_NDK_HOME=/path/to/android-ndk
make

cd app
./gradlew :app:assembleDebug

KernelSU rebuild: DDK ghcr.io/ylarod/ddk-min:android14-6.1-20260313, vermagic 6.1.138-android14-11. See docs/kernelsu-next.md.

adb (clean boot), same payload the app bundles:

root@kitploit:~
export EXPLOIT_ATTEMPTS=1 P0_ATTEMPT_TIMEOUT_SEC=300 EXPLOIT_ATTEMPT_TIMEOUT_SEC=420
/data/local/tmp/cve-2026-43499-root --run-payload \
  /data/local/tmp/cve-2026-43499-app.so \
  /data/local/tmp/cve-2026-43499-root \
  /data/local/tmp/dczb2.log

License

Exploit/helper: Apache-2.0 (see LICENSE and NOTICE). kernelsu/kernel: GPL-2.0.

Download Tool