79229 matches found
Exploit for Use After Free in Linux Linux_Kernel
ghost-hoock A minimal fork of GhostLockhttps://github.co...
system_bt_AOSP10_r33_CVE-2021-0435
Fluoride Bluetooth stack Building and running on AOSP Just build AOSP - Fluoride is there by default. Building and running on Linux Instructions for Ubuntu, tested on 14.04 with Clang 3.5.0 and 16.10 with Clang 3.8.0 Download source root@kitploit: mkdir /fluoride cd /fluoride git clone...
androguard
Androguard ¿Crees que tu teléfono ha sido pwned ? Por favor, revisa IsMyPhonePwned Nueva herramienta: Goauld Herramienta de inyección dinámica para Linux/Android Vea la nueva versión de Androguard: https://github.com/androguard/androguard/tree/ng Instalación Instalación rápida: root@kitploit: pip...
androguard
Androguard Do you think your phone has been pwned ? please check IsMyPhonePwned New tool: Goauld Dynamic injection tool for Linux/Android See the new version of Androguard: https://github.com/androguard/androguard/tree/ng Installation Quick installation: root@kitploit: pip install androguard...
Aegis
Aegis Authenticator Aegis Authenticator is a free, secure and open source 2FA app for Android. It aims to provide a secure authenticator for your online services, while also including some features missing in existing authenticator apps, like proper encryption and backups. Aegis supports HOTP and...
CVE-2016-2067
ADRENO GPU IOMMU DMA EXPLOIT Tested under Nexus 6p google/angler/angler:6.0.1/MMB29M/2431559:user/release-keys About the bug Discussed in 2016 via Blackhat EU About the exploit With iommu dma writes, vdso.so is overwritten with shellcode. So after /init executes kernelclockgettime, the shellcode...
Metaphor
Metaphor Metaphor - Stagefright with ASLR bypass By Hanan Be'er from NorthBit Ltd. Link to whitepaper: https://raw.githubusercontent.com/NorthBit/Public/master/NorthBit-Metaphor.pdf Twitter: https://twitter.com/HighByte Metaphor's source code is now released! The source include a PoC that generat...
hacktronian
Pentesing Tools That All Hacker Needs. HACKTRONIAN Menu : Information Gathering Password Attacks Wireless Testing Exploitation Tools Sniffing & Spoofing Web Hacking Private Web Hacking Post Exploitation Install The HACKTRONIAN Information Gathering: Nmap Setoolkit Port Scanning Host To IP wordpre...
apk-mitm
apk-mitm Una aplicación CLI que prepara automáticamente archivos APK de Android para inspección HTTPS Inspeccionar el tráfico HTTPS de una aplicación móvil usando un proxy es probablemente la forma más fácil de descubrir cómo funciona. Sin embargo, con la Network Security Configuration introducid...
CVE-2017-0785
CVE-2017-0785 PoC This is just a personal study based on the Android information leak vulnerability released by Armis. Further reading: https://www.facebook.com/khelfatni To run, be sure to have pybluez and pwntools installed. root@kitploit: sudo apt-get install bluetooth libbluetooth-dev sudo pi...
metasploit_in_termux
Metasploit Framework 6 in Termux How to Install Before In order to have updated Termux: Purge all data of Termux in Android Settings Uninstall and reinstall latest Termux version from F-Droid Version on Play Store is outdated Then launch Termux to initialization, close it force stop, not swap...
shadow
shadow :: De Mysteriis Dom jemalloc shadow is a jemalloc heap exploitation framework. It has been designed to be agnostic of the target application that uses jemalloc as its heap allocator be it Android's libc, Firefox, FreeBSD's libc, standalone jemalloc, or whatever else. The current version 2....
truegaze
truegaze A static analysis tool for Android and iOS applications focusing on security issues outside the source code such as resource strings, third party libraries and configuration files. Requirements Python 3 is required and you can find all required modules in the requirements.txt file. Only...
truegaze
truegaze Una herramienta de análisis estático para aplicaciones Android e iOS que se centra en problemas de seguridad fuera del código fuente, como cadenas de recursos, bibliotecas de terceros y archivos de configuración. Requisitos Se requiere Python 3 y todos los módulos necesarios se encuentra...
CVE-2023-20938
CVE-2023-20938 Vulnerability Analysis 1. Client A and Client B establish a Binder connection via the ServiceManager context manager. 2. A creates node 0xbeef node = bindernewnodeproc, fp;. B references node 0xbeef via ref-targetnode. 3. B correctly processes targetnode 0xbeef, enqueuing the...
skylift
SkyLift SkyLift is an experimental Wi-Fi/BT geolocation spoofing device that uses the ESP8266 or ESP32 boards to broadcast Wi-Fi beacon frames or BT advertisements that emulate the wireless infrastructure from a remote/target location. The above example shows a successful georelocation to Peter...
allsafe-android
Allsafe - Android An Intentionally Vulnerable Android Application for Security Education Features • Screenshots • Installation • Challenges • Contributing • Support 📱 About Allsafe is an intentionally vulnerable Android application designed for security enthusiasts, pentesters, and developers to...
packages_apps_settings_AOSP10_r33_CVE-2020-0394
This repository does not have a README...
droidlysis
DroidLysis DroidLysis es una herramienta de preanálisis para aplicaciones Android : realiza tareas repetitivas y aburridas que normalmente haríamos al comienzo de cualquier ingeniería inversa. Desensambla la muestra de Android, organiza la salida en directorios y busca puntos sospechosos en el...