o0sayed0o-code/solow-weaponized-kernel — explained in plain English
Analysis updated 2026-05-18
Turn a Samsung Galaxy Z Fold 3 into a portable wireless security testing device.
Capture and analyze wifi packets using an external USB adapter in monitor mode.
Study how Android kernel level protections like Knox and TrustZone can be bypassed.
| o0sayed0o-code/solow-weaponized-kernel | 0-bingwu-0/live-interpreter | 0cm-labs/tokenizer-benchmark | |
|---|---|---|---|
| Stars | 2 | 2 | 2 |
| Language | — | Python | Python |
| Setup difficulty | hard | moderate | moderate |
| Complexity | 5/5 | 2/5 | 2/5 |
| Audience | researcher | general | researcher |
Figures from each repo's GitHub metadata at analysis time.
Only works on one exact phone model (SM-F926B) and requires flashing a custom kernel plus root tools via Termux.
This project is a custom-built version of the Android kernel for one specific phone, the Samsung Galaxy Z Fold 3. It is aimed at people doing security research and wireless network testing, not at everyday phone users. Instead of the kernel Samsung ships, this one is recompiled with extra drivers and patches so the phone can do things its stock software normally blocks. The main capability the project adds is monitor mode and packet injection for wireless network cards. Monitor mode lets a device watch all wifi traffic in the air rather than just the traffic meant for it, which is a standard technique in wireless security testing. The kernel supports two specific USB wifi chipsets for this, the Atheros AR9271 and the Realtek RTL8192EU, with one built directly into the kernel and the other provided as a separate driver file. To make these deeper hardware features available, the kernel also bypasses several of the phone's built in protections, including Samsung Knox hardware checks, the DEFEX security module, and TrustZone based memory protections. The release includes a ready made boot image that already has root access enabled, plus the driver and firmware files needed for the two wifi chipsets. Installing it means flashing this boot image onto the phone with the Odin tool, then using the Termux terminal app on the device to load firmware, load the driver module, and switch a USB wifi adapter into monitor mode for use with tools like tcpdump. The README is direct about the risk involved: flashing this kernel voids the phone's warranty, permanently changes its security state, and the author takes no responsibility for a bricked device or any other consequences. It is licensed under GPL-2.0, and the author only supports the Z Fold 3 model SM-F926B with the Snapdragon 888 chip. There is no mention of support for any other phone model.
A custom Android kernel for the Samsung Galaxy Z Fold 3 that adds wifi monitor mode and packet injection for security research.
GPL-2.0: you can use, modify, and share the code, but any modified versions you distribute must also be shared under the same license.
Setup difficulty is rated hard, with roughly 1h+ to a first successful run.
Mainly researcher.
This repo across BitVibe Labs
Don't trust strangers blindly. Verify against the repo.