MalEval

MalEval Article: Is “Knowing It’s Malicious” Enough? Evaluating LLMs for Fine-Grained Malware Behavior Auditing Article DOI: 10.1145/3832187 MalEval is a framework for evaluating Android malware behavior reports generated by large language models. The code in this repository implements two...

CVE-2026-91717

A flaw was found in Google Chrome on Android. This missing authorization vulnerability allows a local attacker, through a co-installed application, to obtain sensitive information. This could lead to unauthorized access to user data...

scrcpy

This GitHub repo https://github.com/Genymobile/scrcpy is the only official source for the project. Do not download releases from random websites, even if their name contains scrcpy. scrcpy v4.0 pronounced "scr een c opy " This application mirrors Android devices video and audio connected via USB ...

CVE-2026-0073-Android-ADBD-bypass-POC_zh_CN

CVE-2026-0073 — Android ADBD TLS Authentication Bypass EVPPKEYcmp Type Confusion → Unauthorized ADB Shell 🔥 Overview A critical authentication bypass vulnerability exists in Android's ADB daemon adbd that allows any attacker on the local network to obtain full shell access on a target device...

KoodousFinder

KoodousFinder A simple tool to allows users to search for and analyze android apps for potential security threats and vulnerabilities Account and API Key Create a Koodous account and get your api key https://koodous.com/settings/developers Install $ pip install koodousfinder Arguments Param|...

BadParcel

BadParcel See Bundle Fengshui for a deep dive on this bug class. This repository contains PoC for CVE-2023-20963, which is mismatch in the Android WorkSource parcel/unparcel logic. The vulnerability is patched on Android's Security Bulletin of March 2023. The exploit should work on devices on AOS...

CVE-2017-13286

CVE-2017-13286 CVE-2017-13286 Poccannot use All resources are sourced from this article https://bbs.kanxue.com/thread-268506.htm The main cause of this vulnerability is the inconsistency between reading and writing of Parcel objects. It can be traced back to the following code root@kitploit: publ...

DocViewerExploitApp

DocViewerExploit App - CVE-2021-40724 This is the source code to exploiting the Document Viewer by MobileHackingLab. About the Vulnerable App This is an exploit app for the MobileHackingLab DocumentViewer Abdroid App Dynamic Code Loading RCE challenge. This challenge emulates CVE-2021-40724...

apkinspector

AndroidAnalysisGUI This is a guide to get the alpha release of Android Analysis GUI. It has only been tested on Linux. 1. Install Qt SDK. 1Download the QtSDK QtSDKLin32offlinev111en.run from "http://qt.nokia.com/downloads/sdk-linux-x11-32bit-cpp-offline" and install it using root permission...

FMD Android

FMD Android Find your device via SMS, instant messengers, or a web interface FMD Server. FMD allows you to locate, ring, wipe and issue other commands to your device when it's lost. It aims to be a secure open source alternative to Google's Find My Device. Why? I lost my brand new phone last week...

NinjaDroid

NinjaDroid NinjaDroid is a simple tool to reverse engineering Android APK packages. Published at: https://snapcraft.io/ninjadroid root@kitploit: $ snap install ninjadroid --channel=beta Overview NinjaDroid uses AXMLParser together with a series of Python scripts based on aapt, keytool, string and...

GeckoDroid

GeckoDroid Mobile client for Adaptix C2 Framework. Full operator access from your Android device. What it does GeckoDroid gives you control over your Adaptix C2 server from anywhere. Instead of sitting at your desktop client, you can manage operations on the go. Agents - See all connected agents...

frameworks_base_AOSP10_r33_CVE-2020-0401

This repository does not have a README...

android-app

ProtonVPN for Android Copyright c 2019 Proton AG Download !Get it on GitHubhttps://assets.kitploit.com/production/public/readmes/50914/e73aa9f910b0d8c3484bda6ecf61bb21d05d928d646a676...

Android-Imgui-Template

Android ImGui Template Android menu template using Zygisk + ImGui. https://github.com/user-attachments/assets/816113d9-611d-4909-a08e-0f4e8ab6d03b Requirements Android NDK r27 ndk;27.0.12077973 Build Locally root@kitploit: export ANDROIDNDKHOME=/path/to/ndk/27.0.12077973 $ANDROIDNDKHOME/ndk-build...

Hooketh

Hooketh A set of scripts that ease working with Frida, tailored to help finding the correct function to hook to and then modify it. Usage For both of the scripts, I assume you have a device connected via USB or have an emulator running on the same machine. Install frida on your machine and ensure...

assethook

AAssetHook AAssetHook is an LDPRELOAD-based hooking library that allows for replacing APK asset files dynamically without modifying an APK. It's also written in rust. It redirects asset file loads to a filepath on an Android device under /data/local/tmp/assethook/com.pkg.name. Needless to say, du...

CVE-2014-7911_poc

CVE-2014-7911poc Local root exploit for Nexus5 Android 4.4.4KTU8P author: retme [email protected] @returnsme on twitter & @retme on weibo website: retme.net how to build Import the project into eclipse,and build. ./cve20147911/assets/msmattack is the binary file of CVE-2014-4322 exploit.You...

awesome-android-security

Awesome-Android-Security Table of Contents Blog How To's Papers Books Trainings Tools Static Analysis Tools Dynamic Analysis Tools Online APK Analyzers Online APK Decompiler Forensic Analysis Tools Labs Talks Misc Bug Bounty & Writeups Cheat Sheet Checklist Bug Bounty Report Blogs 1-click Exploit...

CVE-2014-4322_poc

CVE-2014-4322poc poc code works on Nexus Android 4.4/5.0 Gain privileges:system - root,as a part of https://github.com/retme7/CVE-2014-7911poc author: retme [email protected] @returnsme on twitter & @retme on weibo website: retme.net The exploit must be excuted as system privilege and severa...