• Diff for "Exploits"

This is a list of exploits or tools that can help you jail break your device so you can install Debian, or replace proprietary firmware with free firmware:

• backdoor for Allwinner-based devices running the vendor's Linux 3.4 kernel

• Vulnerabilities on Snapdragon-powered Android devices

• SamsungCID: Samsung eMMC exploit allowing bootloader unlock

• Attacking the Samsung Galaxy A* Boot Chain

• routersploit: Router Exploitation Framework

• Vulnerabilities in Quanta LTE routers

• WarOfTheWorlds: shellcode to hack Linux from a vulnerable TrustZone QSEE

• Breaking Android full-disk encryption

• Tools for various mobile devices

• Replicant guide to rooting Android devices

• Microsoft Secure Boot debug-mode: allows breaking Secure Boot on Windows RT devices

• Quadrooter: four local-root vulnerabilities in Qualcomm-based Android devices

• Qualcomm Emergency Download Mode based bootrom exploits: parts 1 2 3

• dirtyc0w: root exploit for Linux bug that was open for 10 years (Android rooting tool)

• Drammer: tool for exploiting Android phones via Rowhammer issues in RAM modules

• optus-sagemcom-fast-3864-hacks: enable telnet and run arbitrary code on the Optus Sagemcom F@ST 3864 broadband modem

• BitUnmap: vulnerability in Android ashmem

• Bypassing Samsung’s Real-Time Kernel Protection

• DCCP vuln: ancient Linux DCCP local root exploit

• PegaSwitch: exploit toolkit for the Nintendo Switch

• Bypass downgrade FUSEs on Nintendo Switch

• Adieu: PS4 kernel exploit

• sighax: BootROM exploit for the Nintendo 3DS/2DS/New3DS

• iPhone exploits

• wInd3x: BootROM exploit for iPod Classic and Nano 3/4/5G

• Kindle jailbreaks

• Dishwasher dir traversal

• Samba remote code execution: useful for NAS/router systems running samba, use metasploit to get in

• initroot: Bypassing Nexus 6 Secure Boot through Kernel Command-line Injection

• NXP i.MX53 HABv4 bypass

• CLKSCREW: ARM ?TrustZone exploit via power management

• Behind the Masq: dnsmasq code execution vulnerabilities

• Cracking the RPi 4 hmac

• Traitor: Automatic Linux privesc via exploitation of low-hanging fruit

• RootMy.TV: rooting LG TVs via a web interface

• Dirty Pipe: write access to read-only files with Linux >= 5.8

• WiFi vulns: Linux 5.1+ RCEs for any device that does WiFi, including scanning

• bootloader-unlock-wall-of-shame includes info about how to unlock mobile phones, including via exploits

• AMD Zen Microcode signature verification bypass

• 0-Click RCE in the SuperNote Nomad E-ink Tablet

• Sotera SecurePhone RCEs

Many more can be found on firmwaresecurity.com.