cve-2015-3839_PoC

cve-2015-3839PoC PoC de cve-2015-3839 que puede causar un cierre forzado DoS de la aplicación de SMS de Android Funcionó correctamente en mis dispositivos de prueba Nexus 5 Android 4.4.4 y Nexus 5 Android 5.0.1...

system_media_AOSP10_r33_CVE-2020-0458

This repository does not have a README...

CVE-2022-0847

Información root@kitploit: Exploit Title: Local Privilege Escalation in Linux kernel CVE-2022-0847 Tested on: ubuntu 20.04.1 LTS Affect product:Linux kernel 5.8 or later Fixed Product:Linux kernel 5.16.11, 5.15.25, 5.10.102 CVE ID: CVE-2022-0847 Cómo explotar Escalada de privilegios local...

CVE-2021-28664-PoC

CVE-2021-28664-PoC Mali kbase GPU 驱动 UAFCVE-2021-28664→ 内核任意物理内存 读/写原语 的 PoC 骨架。面向通用 ARM64 Android 平台,与任何具体厂商、机型无关。 研究范围 仅到"内核任意物理内存读/写原语"为止 :如何把一个 GPU 驱动的 use-after-free 变成稳定、可控、可安全失败的内核内存读写能力。 本仓库不提供任何攻击。 不含成品 exploit、不含可直接运行的代码、 不含任何设备的偏移量/序列号/固件;禁止将任何内容用于攻击行为见下。 免责声明 / Disclaimer必读 1. 本仓库不提供攻...

system_bt_AOSP10_r33_CVE-2020-0463

Fluoride Bluetooth stack Building and running on AOSP Just build AOSP - Fluoride is there by default. Building and running on Linux Instructions for Ubuntu, tested on 14.04 with Clang 3.5.0 and 16.10 with Clang 3.8.0 Download source root@kitploit: mkdir /fluoride cd /fluoride git clone...

CVE-2021-521-Exploit

CVE-2021-521-Exploit Lab Exploit CVE-2021-521: App uses Java reflection to access Android system components, retrieving a list of all installed apps. Reflection accesses ApplicationPackageManager and PackageManagerService, exploiting vulnerability...

sh53d-temp-root

SH-53D temporary root This is a build-specific proof of conce...

Exploiting-Stagefright-Vulnerability-CVE-2015-3864

Exploiting-Stagefright-Vulnerability-CVE-2015-3864 Stagefright se refiere a un conjunto de fallos de software en las versiones de Android 2.2 "Froyo" hasta 5.1.1 "Lollipop", que afectaban al 95% de todos los teléfonos Android aún. Si la vulnerabilidad es explotada, un atacante puede usar ejecució...

cve-2014-7912

cve-2014-7911 Exp for cve-2014-7911，可以获得系统权限，基于他人的大部分代码，但使用不同的gadget 1. 安装APK并点击按钮 2. 系统服务器将重启 3. 将把系统ID100写入 /data/1.txt...

CVE-2026-0075

CVE-2026-0075 ContactsProvider 研究 PoC 一个受控实验室环境下的 Android 研究原型，用于评估 ContactsProvider2 中与 CVE-2026-0075 相关的可观察行为。 概述 CVE-2026-0075 是 ContactsProvider2 中的一个 Android 本地权限提升问题。公开公告描述了一条无需用户交互、即可通过 SQL 注入访问联系人数据库的可能路径。Android 将该问题列为高 危，并指出受影响的 AOSP 版本为 Android 14、15、16 和 16-qpr2。安全补丁级别为 2026-06-05...

CVE-2017-13156

Check-CVE-2017-13156.py root@kitploit: root@ubuntu:/CVE-2017-13156$ pip install androguard root@ubuntu:/CVE-2017-13156$ python Check-CVE-2017-13156.py InsecureBankv2.apk Checking if InsecureBankv2.apk is vulnerable to CVE-2017-13156 vulnerability InsecureBankv2.apk md5:...

MobileApp-Pentest-Cheatsheet

Mobile Application Penetration Testing Cheat Sheet The Mobile App Pentest cheat sheet was created to provide concise collection of high value information on specific mobile application penetration testing topics and checklist, which is mapped OWASP Mobile Risk Top 10 for conducting pentest. Mobil...

kavanoz

🫙 kavanoz 🫙 Kavanoz jar in turkish is a tool to statically unpack common android banker malware. Do you ever wanted to get payload from packed malware without running android emulator ? Me neither : But here is a tool anyway. 👀 Installation root@kitploit: pip install kavanoz To install from sourc...

CVE-2015-1474_poc

This code is ment to be a tentative of a poc for CVE-2015-1474. The code is based on the code of the screencap comand, but generates a rogue parcel that crashes the surfaceflinger when it is deserialized. See more at...

Chrome-Forensic_CVE-2024-0044

🔍 Chrome Forensic - CVE-2024-0044 A robust digital forensics tool for extracting and analyzing Google Chrome artifacts from Android devices Features • Installation • Usage • Documentation 👤 Author Information Author: JackTekno GitHub: github.com/JackTekno 📋 Overview This tool utilizes the...

AOSP-DownloadProviderHijacker

AOSP-DownloadProviderHijacker PoC Exploiting Permission Bypass in Android's Download Provider CVE-2018-9468 Security Advisory https://ioactive.com/wp-content/uploads/2019/04/IOActive-Security-Advisory-Androids-Download-Provider-Permission-Bypass-CVE-2018-9468.pdf More Information...

CVE-2025-50110

CVE-2025-50110 Cleartext Transmission of Sensitive Information in EagleEyes Lite Android Application 1. Overview Name : EagleEyesLite Version : 2.0.0 Vendor : AVTECH CWE : CWE-319: Cleartext Transmission of Sensitive Information, CWE-598: Use of GET Request Method With Sensitive Query Strings CVS...

BLACKHAT_Asia2023

BLACKHATAsia2023 Just About BLACKHAT USA2022 PDF Public File List, Search what your intersting. root@kitploit: BLACKHATAsia2023 ├── AS-23-Babkin-firmWar-An-Imminent-Threat-to-the-Foundation-of-Computing.pdf ├── AS-23-Bai-Stealthy-Sensitive-Information-Collection-from-Android-Apps.pdf ├──...

permhash

Permhash is an extensible framework to hash the declared permissions applied to Chromium-based browser extensions and APKs allowing for clustering, hunting, and pivoting similar to import hashing and rich header hashing. Permhash is currently capable of running on four types of files, but is...

CVE-2026-43499-S26

CVE-2026-43499 — Android GKI 6.12 pselect / configfs kernel exploit A Linux kernel exploit for the Android GKI 6.12 line Samsung and Pixel devices targeting CVE-2026-43499 : a buggy removewaiter rollback in rtmutexstartproxylock that uses current instead of waiter::task, leaving a waiter's...