Tools

nationalsecurityagency/ghidra

Ghidra is a software reverse engineering (SRE) framework

sensepost/objection

Frida-powered runtime mobile exploration toolkit for assessing iOS and Android app security. Bypass SSL pinning, dump keychains, manipulate heap…

yukonga/ghostlock-app

GhostLock One-Tap Execution App (CVE-2026-43499)

huaguiqi/asus-i005-cve-2026-43499

CVE-2026-43499 (GhostLock) adaptation for ASUS ROG Phone 5S — UAF trigger + pselect stack reclaim, KASLR leak blocked

hackyangwen-lgtm/rmg-s9180-fzg1

Root My Galaxy SM-S9180 (dm3q) S9180ZHS8FZG1 payload port - CVE-2026-43499 + KernelSU LKM

xjoker/lenovo_y700_tb320fc_on_cve-2025-21479

In-memory kernel privilege escalation for Lenovo Legion Y700 2023 (TB320FC) exploiting CVE-2025-21479, a Qualcomm Adreno GPU SMMU flaw, with ReSukiSU…

deaurity/ghost-hoock

GhostLock stripped to one primitive: SELinux off on Galaxy A17 (BZA5) via futex PI UAF (CVE-2026-43499). No root, no cred patch, no rwforge.

kurtulusakyuz/ionstack_s21

Exploit chain research targeting CVE-2026-43499 on Samsung Galaxy S21

mouseos/aquos-r6-ghostlock

Temporary root exploit for Sharp AQUOS R6 A101SH S0029 using GhostLock CVE-2026-43499

k-o-n-t-o-r/ghostlock-sabrina

CVE-2026-43499 GhostLock root exploit for Chromecast with Google TV (sabrina)

ymh001/meizu21-ghostlock-root

MEIZU 21 locked-bootloader runtime root via CVE-2026-43499 and KernelSU late-load

newazbenalam/root-my-galaxy-payloads

Device-specific CVE-2026-43499 root payloads and KernelSU artifacts for Samsung Galaxy models, with firmware profiles, exploit source, and a support…

genksome/ghost-hoock

GhostLock stripped to one primitive: SELinux off on Galaxy A17 (BZA5) via futex PI UAF (CVE-2026-43499). No root, no cred patch, no rwforge.

accessmodifier364/cve-2026-43499-firetv-sheldonp-writeup

Security research write-up on exploiting CVE-2026-43499 on the Amazon Fire TV Stick 3rd Gen (sheldonp), from temporary root to bootloader unlock.

ccp-p/ghostlock-cve-2026-43499-4.19-k40

Android kernel LPE PoC for CVE-2026-43499, an rtmutex use-after-free in 4.19 Qualcomm kernels, adapted for Redmi K40 with LD_PRELOAD root payload.

zenyxx-xd/rootmyvivo

One-click root for vivo/iQOO devices on locked bootloader | CVE-2026-43499 + KernelSU

zhubaohe123/ghostlock-kit

One-click root kit for vivo iQOO Neo9S Pro (MT6989) exploiting CVE-2026-43499 futex PI UAF via MCAST transport, with scripts and analysis docs.