Tools

tc3650/cve-2026-43499-armv7

ARM32 Linux kernel privilege escalation exploit for CVE-2026-43499 (GhostLock futex UAF) targeting Huawei Watch 4 Pro with multiple exploitation…

h3xdum/xiaomi-c200-firmware-analysis

Hardware hacking guide demonstrating UART access, U-Boot exploitation, and firmware extraction on the Xiaomi C200 IoT camera, achieving root shell…

zgsnj123/cve-2025-45466

Disclosure of CVE-2025-45466 detailing hardcoded plaintext SSH credentials in Unitree Go1 robotic dog firmware, enabling remote code execution,…

ps5dev/byepervisor

A PS5 hypervisor exploit for 1.xx-2xx firmwares.

leoservalli/privilege-escalation-mitrastar

Exploit for privilege escalation on MitraStar GPT-2541GNAC-N1 routers using command injection in deviceinfo show file command to spawn a root shell…

cryptogenic/ps4-5.05-kernel-exploit

A fully implemented kernel exploit for the PS4 on 5.05FW

theofficialflow/h-encore

Fully chained kernel exploit for the PS Vita on firmwares 3.65-3.68

cryptogenic/ps5-ipv6-kernel-exploit

An experimental webkit-based kernel exploit (Arb. R/W) for the PS5 on <= 4.51FW

tomking062/cve-2022-38694_unlock_bootloader

Exploit for CVE-2022-38694 that bypasses signature verification to unlock bootloader on Unisoc/Spreadtrum devices, executing code with BootROM…

theofficialflow/henlo

WebKit+Kernel exploit chain for all PS Vita firmwares

marginresearch/foisted

Remote exploit for MikroTik RouterOS v6 that abuses IPC vulnerabilities and a ROP chain to escalate privileges, execute code, and spawn a reverse…

laginimaineb/cve-2015-6639

Proof-of-concept exploit for CVE-2015-6639, demonstrating privilege escalation in Qualcomm's QSEE TrustZone via PRDiag commands on Android devices.

davidbuchanan314/wampage

Local privilege escalation exploit chain for LG WebOS TVs (CVE-2022-23731) targeting 32-bit SoCs via V8 engine exploitation and shellcode injection.

kpwn/ps4-5.05-kernel-exploit

A fully implemented kernel exploit for the PS4 on 5.05FW

wack0/batondrop_armv7

An implementation of baton drop (CVE-2022-21894) for armv7 (MSM8960)

code-byter/cve-2020-29669

Automated exploit for Macally WIFISD2 travel router (CVE-2020-29669) enabling guest-to-root privilege escalation via password reset manipulation and…

ivanglinkin/cve-2024-36821

Proof-of-concept exploit for CVE-2024-36821 demonstrating local privilege escalation on a router via writable cron scripts and UART access, enabling…