What is this?
UniRoot is a one-tap rooting app for Samsung Galaxy devices. It ships a new unprivileged kernel exploit (DirtyFrag, CVE-2026-43284) that roots the phone with a single button press, plus an older CVE-2026-43499-based exploit with per-device profiles, and it automatically re-roots the device on every boot.
UniRoot is a one-tap rooting app for Samsung Galaxy devices. It ships a new unprivileged kernel exploit (DirtyFrag, CVE-2026-43284) that roots the phone with a single button press, plus an older CVE-2026-43499-based exploit with per-device profiles, and it automatically re-roots the device on every boot.How do I root my device with it?For the new exploit, just open the app and tap Root; the DirtyFrag engine runs automatically with no profile setup needed. For the old exploit, you pick or edit a per-device profile first and then trigger instant root through the Root My Galaxy integration.
For the new exploit, just open the app and tap Root; the DirtyFrag engine runs automatically with no profile setup needed. For the old exploit, you pick or edit a per-device profile first and then trigger instant root through the Root My Galaxy integration.Do I need Shizuku or anything else set up first?The new exploit needs nothing extra - no Shizuku, no profile. The old exploit's CVE-2026-43499 payloads can run locally or through Shizuku, and the app can also download and patch the official ksud (KernelSU or KernelSU Next) for you.
The new exploit needs nothing extra - no Shizuku, no profile. The old exploit's CVE-2026-43499 payloads can run locally or through Shizuku, and the app can also download and patch the official ksud (KernelSU or KernelSU Next) for you.Will this work on any Samsung Galaxy, or only specific models?The old exploit's validated profiles only cover specific listed models (plus some Oppo devices), and the author explicitly warns rooting with this app can brick the phone.
The old exploit's validated profiles only cover specific listed models (plus some Oppo devices), and the author explicitly warns rooting with this app can brick the phone.What devices does it actually run on?It only runs on Android, specifically targeting Samsung Galaxy phones, with a few Oppo profiles also listed for the old exploit.
It only runs on Android, specifically targeting Samsung Galaxy phones, with a few Oppo profiles also listed for the old exploit.What makes the new DirtyFrag exploit different from the old one?DirtyFrag (CVE-2026-43284) is an unprivileged kernel exploit where IpSecManager allocates the SA and a native engine corrupts the kernel page cache to load ksud from memory - no profile selection or Shizuku needed, unlike the older CVE-2026-43499 profile-based exploit.
DirtyFrag (CVE-2026-43284) is an unprivileged kernel exploit where IpSecManager allocates the SA and a native engine corrupts the kernel page cache to load ksud from memory - no profile selection or Shizuku needed, unlike the older CVE-2026-43499 profile-based exploit.What happens when my phone reboots?A foreground boot service waits for the first unlock and automatically re-runs the whole exploit chain up to 6 times, holding a partial WakeLock so the phone can't sleep until it's rooted again.
A foreground boot service waits for the first unlock and automatically re-runs the whole exploit chain up to 6 times, holding a partial WakeLock so the phone can't sleep until it's rooted again.Can I update the KernelSU binary from inside the app?Yes - the ksud updater button downloads the latest official ksud (KernelSU Next or classic) and patches it with the bundled Samsung KDP+DEFEX kos file directly on the device.
Yes - the ksud updater button downloads the latest official ksud (KernelSU Next or classic) and patches it with the bundled Samsung KDP+DEFEX kos file directly on the device.What are similar projects?ghostlock-app, dirtyfrag, skitter-creek-bath-salts, FilzaSlop, mastg, exploitarium, copy-fail-CVE-2026-31431, Relapse-Exploit
ghostlock-app, dirtyfrag, skitter-creek-bath-salts, FilzaSlop, mastg, exploitarium, copy-fail-CVE-2026-31431, Relapse-ExploitWhich topics is it in?exploitation, mobile-security, cve, exploit-development, privilege-escalation, root, vulnerability, kernel, hacking-tool, offensive-security, pentesting, hacking
exploitation, mobile-security, cve, exploit-development, privilege-escalation, root, vulnerability, kernel, hacking-tool, offensive-security, pentesting, hacking