A custom Linux kernel built on the LineageOS android_kernel_xiaomi_msm8937 tree, patched with Kali NetHunter capabilities. It unlocks penetration testing tools that require kernel-level access — things like Wi-Fi monitor mode, raw packet injection, BadUSB (HID) attacks, and deep networking features — all running natively on your Snapdragon 425 / MSM8917 device.
sha256sum Redmi3S-Kernel-v1.zipRelease history for the NetHunter Kernel — newest first.
This kernel extends LineageOS with capabilities that are impossible without kernel-level patches. Each feature requires specific driver support or config flags compiled directly into the kernel image.
Drivers for USB Wi-Fi adapters are compiled with cfg80211 monitor mode and raw packet injection enabled. This lets tools like aircrack-ng, kismet, and reaver capture and inject 802.11 frames — essential for wireless auditing.
Full HCI UART, BCM, Realtek USB BT adapters, RFCOMM, BNEP, BR/EDR and BLE compiled in. Virtual HCI support (HCIVHCI) lets tools like bluez and hcitool run stably alongside the on-board WCNSS chip.
The USB gadget stack includes the HID function, letting the phone present itself to a target computer as a keyboard or mouse. NetHunter uses this to deliver DuckyScript-style payloads at hardware speed — no driver installation needed on the victim machine.
VXLAN overlays, full TUN/TAP, WireGuard VPN, PPP/PPTP/L2TP tunnels, RNDIS/NCM USB tethering, nftables + full iptables, BATMAN-ADV mesh, NFC, CAN bus, and IEEE 802.15.4 (ZigBee) are all compiled in for complex network pivoting scenarios.
These driver modules are compiled into the kernel. Plug in a compatible USB adapter via OTG and it should be recognized automatically. Requires the Wireless Firmware Magisk module to be installed for external adapters to function correctly.
● Injection confirmed ● Driver present, injection may vary
Notable CONFIG_* flags enabled — hover a tag to see what it does.
Follow all four phases in order. Read every step before you start. If anything is unclear, stop and research before proceeding — partial flashes can be harder to recover from than no flash at all.
Your bootloader must already be unlocked. If not, complete Xiaomi's official bootloader unlock process first (requires Mi account + waiting period). You also need a PC with ADB & Fastboot installed and a good USB-A to Micro-USB cable.
lineage-23.2-20260414-nightly-Mi8937-signed.zip — from download.lineageos.org. Verify the SHA256 checksum listed on that page before proceeding.
Data, Cache, System, Vendor. If migrating from another ROM also wipe Internal Storage (this erases all personal files).
The boot partition holds the kernel and ramdisk. If the NetHunter kernel causes a bootloop you can restore only this partition — your LineageOS install stays intact. Without this backup, recovery is significantly harder. Do not skip.
Boot checkbox, then swipe to create the backup. TWRP saves it under /sdcard/TWRP/BACKUPS/<serial>/.
This kernel is untested. If your device bootloops after flashing, follow the recovery steps below immediately — don't panic. The process is reversible as long as you took the boot backup in Phase 2.
1bbeeff49c10d74f00b26ab015991ef76f74aef226d7f5517fba589cab23ae62
Redmi3S-Kernel-v1.zip → swipe to flash. The kernel replaces only the boot partition, not the system.
Root access via Magisk is required for NetHunter to function. The Wireless Firmware Magisk module provides the firmware blobs that external USB Wi-Fi adapters need to operate correctly — without it, many adapters will fail to initialize even though the kernel driver is present.
Wireless Firmware. Install it and reboot. This installs the firmware files needed by USB Wi-Fi adapters for monitor mode and injection to work properly.
Don't panic — almost every situation is recoverable with the steps below.
The author built this kernel without a test device — your real-world feedback is what makes the project better. A high star count also signals stability to the Kali NetHunter team, which could lead to an official listing.
Please star the GitHub repository. Then open an Issue reporting: whether it booted, which USB adapters worked, which NetHunter tools you tested, and any bugs. Every data point helps build a stable v2 release and helps other Redmi 3S / Land users decide whether to flash.