System_bt_AOSP10_r33_CVE-2021-0589

Fluoride Bluetooth stack Building and running on AOSP Just build AOSP - Fluoride is there by default. Building and running on Linux Instructions for Ubuntu, tested on 14.04 with Clang 3.5.0 and 16.10 with Clang 3.8.0 Download source mkdir /fluoride cd /fluoride git clone...

CVE-2017-0564-ION-PoC

CVE-2017-0564-ION-PoC ION universal privilege escalation vulnerability PoC and analysis LINK: https://android.googlesource.com/platform/cts/+/master/hostsidetests/security/securityPatch/CVE-2017-0564/ Vulnerability reporter: guoygang...

moukthar

Moukthar Remote adminitration tool for android Demo Features Permissions bypass android 12 below Keylogger Notifications listener SMS listener Phone call recording Image capturing and screenshots Video recording Persistence Read & write contacts List installed applications Download & upload files...

AndroPyTool

AndroPyTool Update! DroidBox images were fixed. Dynamic analysis is working now. This is a tool for extracting static and dynamic features from Android APKs. It combines different well-known Android apps analysis tools such as DroidBox, FlowDroid, Strace, AndroGuard or VirusTotal analysis. Provid...

DexLoader

⚡Dex Loader Android This project demonstrates different methods of loading and executing DEX files in Android, with a focus on dynamic loading techniques such as DexClassLoader, PathClassLoader, and in-memory execution. 📦 Project Structure Dex Loader : Loads and executes contacts.dex, which...

bomber

bomber is an application that scans SBOMs for security vulnerabilities. Overview So you've asked a vendor for an Software Bill of Materials SBOM for one of their closed source products, and they provided one to you in a JSON file... now what? The first thing you're going to want to do is see if a...

FTC-Skystone-Dark-Angels-Romania-2020

NOTICE This repository contains the public FTC SDK for the SKYSTONE 2019-2020 competition season. Formerly this software project was hosted here. Teams who are competing in the SKYSTONE Challenge should use this new SKYSTONE repository instead of the older and no longer updated ftcapp repository...

mobileAudit

Mobile Audit Security analysis for Android APKs, from upload to actionable findings. Mobile Audit is a Django application for static application security testing and malware inspection. It extracts APK metadata, detects risky implementation patterns, organizes findings by severity, and provides a...

AndroTickler

AndroTickler A java tool that helps to pentest Android apps faster, more easily and more efficiently. AndroTickler offers many features of information gathering, static and dynamic checks that cover most of the aspects of Android apps pentesting. It also offers several features that pentesters ne...

Tyr

Tyr Peer-to-peer email on the Yggdrasil network. English | Русский Screenshots | | | ---|---|---|--- | | | What is Tyr? Tyr runs a complete mail server o...

MADLIRA

MADLIRA Malware detection using learning and information retrieval for Android Overview MADLIRA is a tool for Android malware detection. It consists in two components: TFIDF component and SVM learning component. In gerneral, it takes an input a set of malwares and benwares and then extracts the...

EUVD-2026-92973

Memory corruption when processing command buffer requests with invalid length parameters in the Android Camera driver...

Qu1cksc0pe

Qu1cksc0pe All-in-One malware analysis tool for analyze many file types, from Windows binaries to E-Mail files. You can get : What DLL files are used. Functions and APIs. Sections and segments. URLs, IP addresses and emails. Android permissions Dangerous/Special/Info. MITRE ATT&CK mappings Window...

CVE-2020-0014-Toast

CVE-2020-0014 Toast Reproduction This vulnerability allows a malicious app to intercept user operations on the screen by constructing a clickable Toast view, thereby achieving the purpose of collecting sensitive information such as user passwords. Affected versions: Android 8.0, 8.1, 9, 10 Only...

dexcalibur

WiP : Moving to dexcalibur 2.0 | codename : Reversense Dexcalibur Dexcalibur is an Android reverse engineering platform focus on instrumentation automation. Its particularity is to use dynamic analysis to improve static analysis heuristics. It aims automate boring tasks related to dynamic...

qark

Quick Android Review Kit This tool is designed to look for several security related Android application vulnerabilities, either in source code or packaged APKs. The tool is also capable of creating "Proof-of-Concept" deployable APKs and/or ADB commands, capable of exploiting many of the...

Glass

Glass as in transparent and smooth A fast, native, mobile-app first interactive disassembler. Spiritual successor to IDA Pro for the Android / iOS reverse engineering workflow, built around: smali for APK / DEX / smali handling armv8-encode for AArch64 and ARMv7 A32 / Thumb — native .so, iOS Mach...

android-reverse-engineering-skill

Android Reverse Engineering & API Extraction — Claude Code skill A Claude Code skill that decompiles Android APK/XAPK/JAR/AAR files and extracts the HTTP APIs used by the app — Retrofit endpoints, OkHttp calls, hardcoded URLs, authentication patterns — so you can document and reproduce them witho...

DirtyPipe-Android

DirtyPipe for Android Dirty Pipe CVE-2022-0847 temporary root PoC for Android. Targets Currently only run on Pixel 6 with security patch level from 2022-02-05 to 2022-04-05. Don't use on other devices or other versions. It must crash reboot. Dirty Pipe is finally patched on 2022 May security upda...

LeakValue

Android 13 introduces many enhancements in order to harden Parcel serialization mechanism Here's presentation from Android Security and Privacy team on enhancements made That is great, definitely eliminates or makes unexploitable many vulnerabilities. Also they describe breaking my previous...