woshimaniubi8/CVE-2026-43499-root-KernelSU
Can I trust it?
Worth a closer look before you use it.
Stars from real accounts No data
We haven't checked its stars for fakes yet.
Active Check
Last change 103 days ago.
Licence Check
GPL-3.0: free to use. If you distribute software that includes it, you must publish your code under the same licence.
Quick checks from public data. They help, but they are no guarantee.
What it is
Builds a preload.so that exploits kernel vulnerability CVE-2026-43499 for local privilege escalation on Android devices, with an embedded KernelSU that is started in late-load mode after successful exploitation. Includes tooling to generate a target.h header from boot.img and…
Who it's for
Security researchers analyzing Android kernel exploits and KernelSU on authorized test devices
How to use it
Install
make PROJECT=<target> -j$(nproc)From its README. Check it there before running it.
Ask your AI to set it up
Paste this into Claude, ChatGPT or your coding assistant.
Help me install and set up woshimaniubi8/CVE-2026-43499-root-KernelSU in my project. Follow its README: https://github.com/woshimaniubi8/CVE-2026-43499-root-KernelSU. Explain each step and check it is safe before running anything.
Star curve
Alternatives
Similar projects named in its profile. Each link searches the directory.
Get alerts for repos like this
We'll email you when repos like this start rising. Free, once a week, only what matches.
What arrives: one email on Mondays with the repos that match, never more. See last week's. Privacy
For maintainers
Add this badge to your README. It shows the repo's place on the radar, updates every hour and links back to this page.
[](https://repoalerts.com/repo/woshimaniubi8/CVE-2026-43499-root-KernelSU?ref=badge)Similar repos
- floydcastillo1987/vivo-root-devices
Index of public research on kernel privilege escalation on vivo and iQOO devices. Collects root causes, vendor defenses, detection notes and a device-by-CVE table from static analysis of public reposi
- junaire/CVE-2026-109618-exploit
Proof-of-concept exploit for CVE-2026-109618 and CVE-2026-109619, an unauthenticated remote code execution flaw in PHP's session.upload_progress handling, with a Docker target environment reproducing
- dinosn/php-cve-2026-10961x-lab-poc
Lab reproduction and vulnerability-research package for PHP 8.5.11 CVE-2026-109618 and CVE-2026-109619, a remote code execution chain using memory disclosure via session cookies and a use-after-free.
- JoasASantos/php2shell-exploit
Python exploit framework for CVE-2026-109618 and CVE-2026-109619, a use-after-free in PHP's session.upload_progress handler that is described as enabling pre-auth remote code execution over HTTP. Incl
- code-zm/plex2shell
Proof-of-concept exploit chain for four CVEs in Plex Media Server up to 1.43.3.10828. It combines an unauthenticated SSRF, a loopback pivot and code execution through unsigned codec loading. The vendo
- xwtk/hmg_nemesis
Tool that uses a flaw in the OTA update logic to install root-level software execution on Android-based Gen5W AVNT head units in Hyundai Motor Group vehicles. It includes a CLI, a package manager and