gitwtfhub

wtf is solow-weaponized-kernel?

o0sayed0o-code/solow-weaponized-kernel — explained in plain English

Analysis updated 2026-05-18

2Audience · researcherComplexity · 5/5LicenseSetup · hard

TL;DR

A custom Android kernel for the Samsung Galaxy Z Fold 3 that adds wifi monitor mode and packet injection for security research.

Mindmap

mindmap
  root((SOLOW Kernel))
    What it does
      Custom Z Fold 3 kernel
      Monitor mode wifi
      Bypasses phone protections
    Tech stack
      Linux kernel
      Android GKI
      Termux
      Magisk
    Use cases
      Wireless security testing
      Packet capture
      Kernel research
    Audience
      Security researchers
      Advanced Android users

Code map

Detail Auto

An interactive map of this repo's files and how they connect — its source is parsed live in your browser. Click Visualize to build it.

filefunction / class

Why would anyone build with this?

REASON 1

Turn a Samsung Galaxy Z Fold 3 into a portable wireless security testing device.

REASON 2

Capture and analyze wifi packets using an external USB adapter in monitor mode.

REASON 3

Study how Android kernel level protections like Knox and TrustZone can be bypassed.

What's in the stack?

Linux KernelAndroid GKITermuxMagisk

How it stacks up

o0sayed0o-code/solow-weaponized-kernel0-bingwu-0/live-interpreter0cm-labs/tokenizer-benchmark
Stars222
LanguagePythonPython
Setup difficultyhardmoderatemoderate
Complexity5/52/52/5
Audienceresearchergeneralresearcher

Figures from each repo's GitHub metadata at analysis time.

How do you spin it up?

Difficulty · hard Time to first run · 1h+

Only works on one exact phone model (SM-F926B) and requires flashing a custom kernel plus root tools via Termux.

GPL-2.0: you can use, modify, and share the code, but any modified versions you distribute must also be shared under the same license.

Wtf does this do

This project is a custom-built version of the Android kernel for one specific phone, the Samsung Galaxy Z Fold 3. It is aimed at people doing security research and wireless network testing, not at everyday phone users. Instead of the kernel Samsung ships, this one is recompiled with extra drivers and patches so the phone can do things its stock software normally blocks. The main capability the project adds is monitor mode and packet injection for wireless network cards. Monitor mode lets a device watch all wifi traffic in the air rather than just the traffic meant for it, which is a standard technique in wireless security testing. The kernel supports two specific USB wifi chipsets for this, the Atheros AR9271 and the Realtek RTL8192EU, with one built directly into the kernel and the other provided as a separate driver file. To make these deeper hardware features available, the kernel also bypasses several of the phone's built in protections, including Samsung Knox hardware checks, the DEFEX security module, and TrustZone based memory protections. The release includes a ready made boot image that already has root access enabled, plus the driver and firmware files needed for the two wifi chipsets. Installing it means flashing this boot image onto the phone with the Odin tool, then using the Termux terminal app on the device to load firmware, load the driver module, and switch a USB wifi adapter into monitor mode for use with tools like tcpdump. The README is direct about the risk involved: flashing this kernel voids the phone's warranty, permanently changes its security state, and the author takes no responsibility for a bricked device or any other consequences. It is licensed under GPL-2.0, and the author only supports the Z Fold 3 model SM-F926B with the Snapdragon 888 chip. There is no mention of support for any other phone model.

Yoink these prompts

Prompt 1
Walk me through what Knox, DEFEX, and TrustZone RKP each protect against, and why this kernel needs to bypass all three.
Prompt 2
Explain the difference between the built-in Atheros AR9271 support and the separate Realtek RTL8192EU driver in this kernel.
Prompt 3
Help me understand the Magisk systemless module steps in this README so I can adapt them for a different firmware file.
Prompt 4
What are the real risks of flashing a modified boot image like this one onto a phone I actually use daily?

Frequently asked questions

wtf is solow-weaponized-kernel?

A custom Android kernel for the Samsung Galaxy Z Fold 3 that adds wifi monitor mode and packet injection for security research.

What license does solow-weaponized-kernel use?

GPL-2.0: you can use, modify, and share the code, but any modified versions you distribute must also be shared under the same license.

How hard is solow-weaponized-kernel to set up?

Setup difficulty is rated hard, with roughly 1h+ to a first successful run.

Who is solow-weaponized-kernel for?

Mainly researcher.

View the repo → Decode another repo

This repo across BitVibe Labs

Don't trust strangers blindly. Verify against the repo.