A comprehensive hands-on roadmap for learning binary exploitation, Android native app and kernel exploitation, and Linux kernel vulnerability research. This repo contains structured notes, curated resources, labs, and a suggested timeline.
- 📘 Prerequisites
- 🔍 Binary Exploitation Fundamentals
- 🧠 Advanced Binary Exploitation
- 📱 Android Exploitation
- 🐧 Linux Kernel Exploitation
- 🛠️ Tools
- 📅 Learning Timeline
- 🛠️ Labs
binary-kernel-android-exploitation-roadmap/
│
├── prerequisites/
├── binary-basics/
├── binary-advanced/
├── android/
├── linux-kernel/
├── tools/
├── timeline/
├── labs/
│ ├── linux-kernel-writewhatwhere/
│ │ ├── README.md
│ │ ├── vuln_driver.c
│ │ ├── exploit.c
│ │ ├── build.sh
│ │ ├── run.sh
│ │
│ └── android_kernel_cve_lab/
│ ├── CVE-2020-0041/
│ │ ├── README.md
│ │ ├── fetch_and_build.sh
│ │ ├── boot_qemu.sh
│ │ ├── patches/
│ │ │ └── cve-2020-0041.patch
│ │ └── poc/
│ │ └── exploit_template.c
│ │
│ ├── CVE-2019-2215/
│ ├── README.md
│ ├── fetch_and_build.sh
│ ├── boot_qemu.sh
│ ├── patches/
│ │ └── cve-2019-2215.patch
│ └── poc/
│ └── exploit_template.c
│
├── LICENSE
└── README.md
- Follow the
timeline/to plan your study. - Explore
binary-basics/andbinary-advanced/for hands-on challenges. - Dive into
android/for reversing, Frida, SELinux & Binder. - Master kernel bugs in
linux-kernel/. - All notes can be imported into Obsidian or Notion for personal tracking.
| Lab | Description | Level |
|---|---|---|
| Linux Kernel Write-What-Where | Exploit a custom kernel module vulnerability to gain root. | Intermediate |
| Android Binder UAF - CVE-2020-0041 | Recreate and analyze a real-world Android Binder kernel vulnerability (UAF). | CVE-2020-0041 |
| Android Binder UAF - CVE-2019-2215 | Exploit a Binder UAF vulnerability from CVE-2019-2215. | CVE-2019-2215 |
⚠️ Work in Progress: Contributions, improvements & PRs are welcome!