Projects sharing features with Badspin

art-kernel-toolkit is a kernel module that can be used to perform actions requiring kernel privileges from userspace. It supports x86_64 and arm64 Android Common Kernels and Linux kernels.

Kernel SLUB memory visualization

This project is a technical repository of kernel exploit guides, memory corruption analyses, and archived methods for gaining root access. It serves as a centralized library of security flaws and reproduction steps used for testing system protections and verification. The documentation focuses on the Linux kernel, providing technical breakdowns of how memory management errors and multi-page write techniques allow for the modification of read-only files. It details the use of race conditions to achieve administrative privilege escalation. The repository covers a broad surface of security rese

KASLD derandomises the Linux kernel's virtual and physical memory layout as an unprivileged local user.

Detect Linux rootkits which use signals to elevate process privileges.

CVE-2023-0386 analysis and Exp

angrop

Blog Post: https://blog.doyensec.com/2025/10/08/ksmbd-3.html

Transform vmlinuz into a fully debuggable vmlinux that can be used with /proc/kcore

Check linux sources dump for known CVEs.

Android kernel exploit for CVE-2025-38352, previously exploited in-the-wild. Targets vulnerable x86_64 Linux kernels v5.10.x.

Exploit for CVE-2025-39946, a bug in the Linux kernel's net/tls subsystem.

FirmWire is a full-system baseband firmware emulation platform for fuzzing, debugging, and root-cause analysis of smartphone baseband firmwares

This repository contains useful tools for Linux kernel security research, called the kernelXDK:

Everything you need to build and run Linux and Android kernels for exploit development

A tool for checking the security hardening options of the Linux kernel