𝙿ʀɪᴍᴇ 𝚇 𝙲ʜᴇᴀᴛs

■ How to use? ━━━━━━━━━━━━━━ 1. Target device: Developer options → Enable USB debugging. 2. Connect the two phones via an OTG cable (the "helper" phone acts as the host). 3. Helper phone app: ① Connect → ② Prime/Load → ③ Fire. —— "Lazy mode": Simply tap ④ Auto-fire, go make a cup of tea, and upon your return, the device may already be rooted. Success indicators: The log shows "child is root" or "KernelSU loaded," and the su command instantly returns uid=0. ━━━━━━━━━━━━━━ ■ Underlying Mechanism ━━━━━━━━━━━━━━ It exploits a race condition in the Linux kernel's futex priority inheritance chain (CVE-2026-43499): A single kernel write → Disable SELinux Enforcing mode → Overwrite process credentials → Late-load KernelSU. The entire process takes place in memory—after a reboot, the system remains pristine, leaving no trace that you were ever there.