A Kernel based root solution for Android

Sign (and root) Android A/B OTAs with custom keys while preserving Android Verified Boot

Script to disassemble bytes as ARM / ARM64, based on Capstone

Binder Trace is a tool for intercepting and parsing Android Binder messages. Think of it as "Wireshark for Binder".

Inject into zygote process

The Magic Mask for Android

Android VM injection and BinderJacking sample code, and some ramblings about root