laginimaineb

ExtractKeyMaster. Exploit that extracts Qualcomm's KeyMaster keys using CVE-2015-6639 and CVE-2016-2431

android_fde_bruteforce. Scripts to bruteforce Android's Full Disk Encryption off the device

MSM8974_exploit. Full TrustZone exploit for MSM8974

cve-2015-6639. QSEE Privilege Escalation Exploit using PRDiag* commands (CVE-2015-6639)

Alohamora. Bootloader unlocking code for Motorola devices

unify_trustlet. Unifies ".mdt" and ".bXX" files into a complete Trustlet

cve-2014-7920-7921. Exploit code for CVE-2014-7920 and CVE-2014-7921 - code-exec in mediaserver up to Android 5.1

cve-2016-2431. Qualcomm TrustZone kernel privilege escalation

fuzz_zone. Fuzzing utility which enables sending arbitrary SCMs to TrustZone

WarOfTheWorlds. QSEE Shellcode to directly hijack the "Normal World" Linux Kernel

static_kallsyms. Rebuilds kallsyms statically from a kernel binary

unpack_bootloader_image. Small script to unpack the bootloader image format present in Nexus 5 devices

standalone_msm8974. Standalone C version of the MSM8974 TrustZone exploit

qseecom_modifications. Modifications in the qseecom driver which enable FuzzZone to operate

cve-2014-4322. CVE-2014-4322 Exploit

unpack_motoboot. Unpacks the Motorola motoboot.img binary

CrashAndBurn. Small injectable stub which causes Android processes to become dumpable