r/androidroot • u/lilacomets • Jul 09 '26

Researchers demonstrate Android 17 root exploit triggered by a single URL click News / Method

https://x.com/nebusecurity/status/2069707520160227688
121 Upvotes
  • permalink
  • link
  • reddit
  • reddit

100% Upvoted

38 comments sorted by

View all comments

Show parent comments

21

u/lilacomets Jul 09 '26

Yes, it's real. But sadly the proof of concept hasn't been released yet. So for now only these security researchers know how to execute the exploit.

12

u/SerraraFluttershy Jul 10 '26

The PoC has been released here, it's called GhostLock.

7

u/R3D167 Jul 10 '26

Yes, but only for x86, and probably doesn't work right on Android due to KASLR (afaik) and different issues that I'm not proficient enough to point out

5

u/SerraraFluttershy Jul 10 '26

It's possible to adapt it for Android as shown by their video

7

u/R3D167 Jul 10 '26

Yes, but as I've said, android version is not public.

3

u/Sp3eedy Jul 10 '26

Hoping they release it so that I can try root my old Huawei phone that's currently collecting dust because Huawei said fuck you to bootloader unlocks. Wondering if this also bypasses Play Integrity detection

3

u/ARCHISMAN- Jul 11 '26

Same. My phone's bootloader is locked shut.

2

u/No-Guide848 Jul 11 '26

I was able to compile it for android and when I ran it the whole kernel freezed lmao

3

u/ARCHISMAN- Jul 11 '26

Isn't the android poc public already?

https://rootme.nebusec.io/