Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories
Elysium-Vanguard-Sentinel-Audit — The official Sentinel Edition v7.11 - Hypervisor Detection & Kernel Memory Audit Suite for Honor Magic V2. Investigating CVE-2025-38352 and EL2 RKP defenses. | Kitploit
Tools/GitHubGitHub/jordelmir/elysium-vanguard-sentinel-audit
Android SecurityEmbedded Systems SecurityMemory ForensicsVulnerability AnalysisExploitationForensicsCTFMobile SecurityHardware Security

Most Popular

View all →

Discover the most used tools by our community.

Explore all tools

Browse our collection of tools

View all tools →
Share
Learning & Education
Binary Exploitation
GitHubjordelmir/elysium-vanguard-sentinel-audit

Elysium-Vanguard-Sentinel-Audit

The official Sentinel Edition v7.11 - Hypervisor Detection & Kernel Memory Audit Suite for Honor Magic V2. Investigating CVE-2025-38352 and EL2 RKP defenses.

View Repository
2136 months agoNot yet reviewed

SENTINEL-ROOT-AUDIT: Honor Magic V2 Hypervisor Detection Suite

Status Platform Security

➲ Project Overview

SENTINEL-ROOT-AUDIT is a professional-grade security suite designed to audit kernel integrity and detect hypervisor-level interventions on the Honor Magic V2 (SM8550).

While the core vulnerability (CVE-2025-38352) allows for OOB Read/Write primitives in the kernel, this suite focuses on the "Defense-in-Depth" aspect—demonstrating how modern hardware-level protections (EL2 RKP) successfully nullify exploit attempts.

⚡ Key Features

  • Exploit Logic (Stage 4): Functional standalone PoC to demonstrate kernel memory reading.
  • KASLR Bypass: Real-time offset calculation via driver info-leaks.
  • Stealth Monitor: Background thread detection of hypervisor intervention.
  • Forensic Logs: Detailed audit trails showing "Blinded Pointers" (0x1) when EL2 is triggered.

📂 Repository Structure

root@kitploit:~
/src       # Standalone C PoC (kread_dump)
/bin       # Pre-compiled aarch64 binaries & APK (Sentinel_Audit_Toolkit_v7.11.apk)
/docs      # Full Technical Whitepaper (planned)
/logs      # Representative Sovereign Guard audit logs
POC_EXPLOIT.py  # Automation script for reproduction
BOUNTY_REPORT.md # Ready-to-use bug bounty template

🛠️ Reproduction

Option A: Mobile App (GUI Dashboard)

  1. Download bin/Sentinel_Audit_Toolkit_v7.11.apk.
  2. Install on Honor Magic V2.
  3. Launch the app and trigger "RUN AUDIT PIPELINE".

Option B: ADB Automation (CLI)

  1. Connect device via ADB.
  2. Run python3 POC_EXPLOIT.py.
  3. Observe the kread_dump output for kernel memory validation.

⊛ The "Honor-Gate" Analysis

Our research confirms that Honor has implemented a robust EL2 Hypervisor protection layer (likely RKP or MagicGuard). When the OOB_WRITE primitive is used to target the task_struct, the hypervisor intercepts the write and nullifies the target pointers. This project documents this defensive behavior as a benchmark for future security research.

Disclaimer: This project is for educational and security auditing purposes only. Use it responsibly within the scope of authorized bug bounty programs.

Download Tool