Skip to content
o_owenSECURITY NOTES
WriteupsArchiveAbout
← All writeups
EXPLORING A TOPIC

Kernel.

2 notes from the notebook.

01
Android research·03 Sept 2026·15 min read

Rooting a locked Google Pixel: porting a kernel exploit

Porting CVE-2026-43499 to a bootloader-locked Pixel 7: kernel reconnaissance without root, device-specific offsets, race-condition debugging, and the limits of temporary root.

AndroidKernelExploit development
ANDROID RESEARCH
0xfield notes
QUESTION → SOLUTION
02
Android research·28 Jun 2025·7 min read

From an Android OTA package to kernel symbols and root

Recovering a legacy Android kernel's symbol table from an OTA image, restoring symbols in IDA, and adapting three privilege-escalation exploits.

AndroidKernelReverse engineering
SYSTEM / ANDROID
OTA PACKAGEboot.imgvmlinux → ELF
UNPACK. RECONSTRUCT.
owen_A notebook for curious minds.
RSS feedGitHub Back to top ↑