Methods and tools to root your Android phone.
Disclaimer: This repository is for educational and research purposes only.
Curious about what our research group is doing behind closed doors? Get the latest updates and exclusive previews directly on Bluesky: @nikoverflow.com
- Public Exploits Only: This repository exclusively contains rooting exploits that are already publicly disclosed.
- No Unpatched Threats: We do not publish unpatched 0-days or active security threats that could harm users.
Our research group actively uncovers, analyzes, and withholds security vulnerabilities across the entire past and current device lineups. We know significantly more than what is listed here.
- Why we don't report to corporations: Since our private rooting exploits pose no critical risk to everyday users, we see no reason to report them to corporations. We simply keep them to ourselves.
- Why we don't publish everything: Since corporate security teams love playing cat and mouse games with us, we are only dropping already publicly disclosed exploits.
Consider this repository a gentle reminder that your restrictions are temporary and your code is never as locked down as you think it is.
| Brand | Android Version | What? | Patched? | Private? |
|---|---|---|---|---|
| Samsung | * | Knox Bypass | no | yes |
| Samsung, Google, Xiaomi and Huawei | * | Root Exploit | no | yes |
Note: This list is currently incomplete.
Q: What happens if your research group discovers a critical vulnerability that could actually harm everyday users?
A: We take user safety seriously. If we uncover a critical, high-impact vulnerability, we will follow responsible disclosure guidelines. We will report it to the vendor to ensure everyday users are protected. Our fight is against artificial corporate restrictions, not the security of innocent people.
A: Because those exploits only bypass the artificial limitations imposed by the manufacturers themselves. Rooting allows users to truly own their hardware. Reporting these flaws would only help corporations strip users of their freedom faster and we are not interested in doing free quality assurance work for multi-billion dollar companies.
A: No. Our private research remains strictly confidential within our group. Do not contact us asking for unreleased 0-days or private bypasses. They will be integrated into this tool if, and only if, they become publicly disclosed by someone else.