Root My Pixel is an Android application designed to automate root access on Google Pixel devices leveraging the NebuSec IonStack exploit (CVE-2026-43499) and integrating ReSukiSU / KernelSU.
Root My Pixel lets you temporarily gain root access with ReSukiSU in just one tap.
-
Device Detection & Profiling
- At startup, the app uses native JNI (
NativeProbe),/proc/versionqueries, and system properties to detect the device codename, kernel version, CPU ABI, memory page size, and build display ID. - Via
ResolveTargetUseCase, it matches the device details against supported target profiles defined inassets/profiles.json.
- At startup, the app uses native JNI (
-
Shizuku Integration
- The app uses Shizuku (UID 2000) to acquire ADB shell privileges without needing initial root access, which is required to stage and execute payload binaries in
/data/local/tmp. - A managed
ExploitServiceis bound via Binder IPC to stream exploit execution logs to the UI in real time.
- The app uses Shizuku (UID 2000) to acquire ADB shell privileges without needing initial root access, which is required to stage and execute payload binaries in
-
Exploit Payload Extraction & Execution
- Precompiled binary payloads (
.so) corresponding to each supported build and the native helper tool (libcve43499root.so) are extracted from APK assets to/data/local/tmp. - The IonStack exploit (CVE-2026-43499) is executed to establish a local root daemon socket (
temp_su.sock), acquiring fullrootprivileges.
- Precompiled binary payloads (
-
KernelSU / ReSukiSU Integration
- Staging of the
ksudbinary matching the device's Kernel Module Interface (KMI, e.g.,android15-6.6). - The app triggers the KernelSU late-load mechanism (
ksud late-load --kmi <kmi>). - Verifies KernelSU through its UAPI, with
ksud debug infoand/proc/modulesas compatibility fallbacks. - Registers the installed ReSukiSU Manager only after validating its production APK signature.
- Staging of the
-
User Interface & Management Tools
- Real-time live log progress monitoring.
- Handy actions for Soft Reboot (restarting
system_server) and Log Exporting for debugging purposes.
| Device | Codename | Supported Builds |
|---|