# NullKia — Mobile Security Framework

 ╚═╝  ╚═══╝ ╚═════╝ ╚══════╝╚══════╝╚═╝  ╚═╝╚═╝╚═╝  ╚═╝
      [ MOBILE SECURITY FRAMEWORK v3.0 | bad-antics ]

🆕 What's New in v3.0

• 8 New Manufacturers — Nothing, OPPO, Vivo, Realme, ASUS, ZTE, Fairphone, TCL
• Baseband Exploitation — Shannon/Exynos/Qualcomm modem tools
• eSIM Tools — eUICC provisioning and extraction
• 5G/LTE Security — Band locking, IMSI analysis, carrier unlock
• iOS 17/18 Support — Updated checkm8 toolchain
• Android 14/15 Support — New bypass techniques
• GUI Mode — Optional graphical interface
• Plugin System — Extend with custom modules

⚡ Quick Install

Linux / macOS

curl -sL https://raw.githubusercontent.com/bad-antics/nullkia/main/get-nullkia.sh | bash

Windows (PowerShell as Admin)

iwr -useb https://raw.githubusercontent.com/bad-antics/nullkia/main/install.ps1 | iex

Android (Termux)

pkg install git && git clone https://github.com/bad-antics/nullkia && cd nullkia && make termux

Docker

docker run -it --privileged -v /dev/bus/usb:/dev/bus/usb ghcr.io/bad-antics/nullkia:3.0

GUI Mode

nullkia --gui    # Launches graphical interface

📖 Full Installation Guide

🎯 Features

🚀 Usage

# Show help
nullkia help

# Launch GUI mode
nullkia --gui

# Scan for connected devices
nullkia device scan
nullkia device info          # Detailed device information

# Samsung tools
nullkia samsung knox-bypass
nullkia samsung odin
nullkia samsung frp-bypass
nullkia samsung dump-efs     # NEW: Dump EFS partition

# Apple tools (checkm8 devices)
nullkia apple checkm8
nullkia apple dfu
nullkia apple activation     # NEW: Activation bypass
nullkia apple icloud         # NEW: iCloud tools

# Google Pixel
nullkia google titan-dump    # NEW: Titan M research
nullkia google avb-bypass    # NEW: AVB bypass

# Baseband/Modem (NEW)
nullkia baseband dump        # Dump modem firmware
nullkia baseband shannon     # Samsung Shannon exploits
nullkia baseband qualcomm    # Qualcomm modem tools
nullkia baseband analyze     # Analyze baseband binary

# Cellular/Network (NEW)
nullkia cellular unlock      # Carrier unlock
nullkia cellular bands       # Band manipulation
nullkia cellular esim        # eSIM extraction/provisioning
nullkia cellular imsi        # IMSI/IMEI analysis

# Firmware operations
nullkia firmware dump
nullkia firmware flash
nullkia firmware decrypt     # NEW: Decrypt firmware
nullkia firmware analyze
nullkia firmware diff        # NEW: Compare firmware versions

# Security research
nullkia trustzone dump       # NEW: TEE extraction
nullkia bootrom dump         # NEW: BootROM extraction
nullkia secure-element       # NEW: SE research

# Plugin system (NEW)
nullkia plugin list
nullkia plugin install <name>
nullkia plugin create <name>

# Reboot device
nullkia device reboot fastboot
nullkia device reboot recovery
nullkia device reboot edl
nullkia device reboot brom   # NEW: MediaTek BROM mode

📱 Supported Manufacturers (18)

Tier 1 — Full Support

Tier 2 — Extended Support

Tier 3 — Basic Support

📡 Baseband Security (NEW in v3.0)

Supported Modems

Baseband Operations

# Dump modem firmware
nullkia baseband dump --output modem.bin

# Samsung Shannon specific
nullkia baseband shannon --extract-nv
nullkia baseband shannon --patch-imei

# Qualcomm diag mode
nullkia baseband qualcomm --diag-enable
nullkia baseband qualcomm --read-efs

# Band manipulation
nullkia cellular bands --lock "1,3,7,20,28"
nullkia cellular bands --unlock-all

# eSIM operations
nullkia cellular esim --dump-euicc
nullkia cellular esim --list-profiles

🔐 Security Research Tools (NEW)

TEE/TrustZone

# Dump TrustZone components
nullkia trustzone dump --output tz_dump/

# Extract secure world binaries
nullkia trustzone extract-ta    # Trusted Applications

# Analyze TEE
nullkia trustzone analyze

BootROM

# Dump BootROM (where supported)
nullkia bootrom dump --chipset exynos9825

# Exploit known vulnerabilities
nullkia bootrom exploit --checkm8    # Apple
nullkia bootrom exploit --mtk-brom   # MediaTek

Secure Element

# SE research (Titan M, Knox, etc.)
nullkia secure-element info
nullkia secure-element dump-attestation

📂 Project Structure

nullkia/
├── install.sh          # Linux/macOS installer
├── install.ps1         # Windows installer
├── get-nullkia.sh      # One-line curl installer
├── Dockerfile          # Docker support
├── Makefile            # Build system
├── INSTALL.md          # Installation guide
│
├── samsung/            # Samsung/Knox tools
├── apple/              # iOS/checkm8 tools
├── google/             # Pixel/Titan M tools
├── oneplus/            # OnePlus tools
├── xiaomi/             # Xiaomi/MIUI tools
├── huawei/             # Huawei/EMUI tools
├── oppo/               # OPPO/ColorOS tools (NEW)
├── vivo/               # Vivo/Funtouch tools (NEW)
├── realme/             # Realme tools (NEW)
├── motorola/           # Motorola tools
├── nothing/            # Nothing Phone tools (NEW)
├── asus/               # ASUS ROG tools (NEW)
├── lg/                 # LG tools
├── sony/               # Sony tools
├── nokia/              # Nokia tools
├── zte/                # ZTE tools (NEW)
├── fairphone/          # Fairphone tools (NEW)
├── tcl/                # TCL tools (NEW)
│
├── baseband/           # Modem/baseband tools (NEW)
├── cellular/           # 5G/LTE tools (NEW)
├── trustzone/          # TEE research tools (NEW)
├── bootrom/            # BootROM tools (NEW)
├── secure-element/     # SE research (NEW)
│
├── firmware/           # Firmware utilities
├── installer/          # Platform installers
├── plugins/            # Plugin system (NEW)
├── gui/                # GUI components (NEW)
└── tools/              # Common utilities

🔌 Plugin System (NEW)

Extend NullKia with custom modules:

# List available plugins
nullkia plugin list

# Install community plugin
nullkia plugin install samsung-advanced
nullkia plugin install mtk-bypass

# Create your own plugin
nullkia plugin create my-plugin

Plugin Structure

plugins/my-plugin/
├── manifest.json       # Plugin metadata
├── main.py             # Entry point
├── commands/           # CLI commands
└── lib/                # Supporting code

🖥️ GUI Mode (NEW)

Launch the graphical interface:

nullkia --gui

Features:

• Device detection dashboard
• One-click operations
• Firmware browser
• Log viewer
• Theme support (dark/light)

🔐 Encryption Keys

Some features require encryption keys. Request via GitHub Issues:

🔑 Request Keys via Issues

• Knox bypass keys
• Firmware decryption keys
• EDL firehose loaders
• Bootloader unlock tokens
• Baseband research tools
• eSIM provisioning keys

🛠️ Requirements

📋 Changelog

v3.0.0 (January 2026)

• Added 8 new manufacturers (Nothing, OPPO, Vivo, Realme, ASUS, ZTE, Fairphone, TCL)
• Baseband exploitation tools (Shannon, Qualcomm, MediaTek)
• eSIM/eUICC tools
• 5G/LTE security analysis
• TrustZone/TEE research tools
• BootROM extraction (where supported)
• Secure Element research
• GUI mode
• Plugin system
• iOS 17/18 support
• Android 14/15 support

v2.0.0 (2025)

• Multi-manufacturer support
• Docker support
• Cross-platform installers

v1.0.0 (2024)

• Initial release
• Samsung, Apple, Google support

⚠️ Disclaimer

This tool is for security research and educational purposes only. Use responsibly and only on devices you own or have explicit permission to test. The authors are not responsible for any misuse or damage.

📜 License

MIT License - @bad-antics

📱 Supported Devices

Samsung Galaxy

• S24 Ultra, S24+, S24
• S23 Ultra, S23+, S23
• Z Fold 5, Z Flip 5
• A54 5G, A34 5G

Apple iPhone

• iPhone 15 Pro Max, 15 Pro, 15
• iPhone 14 Pro Max, 14 Pro, 14
• iPhone SE (3rd gen)

Google Pixel

• Pixel 8 Pro, Pixel 8
• Pixel 7 Pro, Pixel 7, Pixel 7a
• Pixel 6 Pro, Pixel 6

🔬 Baseband Research