NXLoader

NXLoader 从原版Android启动Fusée Gelée payloads。在此获取APK文件 重度基于Fusée Gelée和ShofEL2。fusee.bin作为默认payload打包。 注意：本软件未测试也不支持任何专有payload。 它在你的设备上能用吗？请让我们都知道！ 此应用当前处于ALPHA 状态。感谢您的理解！ 如何使用： 1. 通过USB将Switch连接至RCM模式。 2. payload将立即注入（需要权限来注入payload并与设备交互）。 如果不起作用，等待'Select Payload'按钮出现，然后为你的Switch选择合适的payload。...

CVE-2020-0022

CVE-2020-0022 看起来 Android 9-6 具有相似的蓝牙子系统，Android 5 和 4 则不同。 Android 9.0 BlueFrag 实验 补丁： https://android.googlesource.com/platform/system/bt/+/3cb7149d8fed2d7d77ceaa95bf845224c4db3baf 下面我触发了已修补的条件。好的，我想我搞定了，但不知何故我无法使进程崩溃。 嗯嗯嗯 实际上，成功将带符号的长度值传给了 memcpy 02-16 01:44:49.096 6423 6471 W...

ghostlock-app

GhostLock-App English: README.md 支持的设备 Kernel| Devices ---|--- 6.1.115-android14-11-ga2521ca27699-ab13294383| POCO X6 Pro 6.1.118-android14-11-ga3b9c44908dd-ab13320413| Redmi Note 15 Pro+ 6.1.118-android14-11-gca0ef6d17716-ab13624819| Xiaomi 14 6.1.138-android14-11-g0c3d559bcd85-ab14529422| Xiaom...

CVE-2025-50944

CVE-2025-50944 EagleEyes Lite Android アプリケーションにおける不適切な証明書チェーン検証 1. 概要 名前 : EagleEyesLite バージョン : 2.0.0 ベンダー : AVTECH CWE : CWE-295: 不適切な証明書検証 CVSS : 8.8 高 ベクター文字列 : CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H 2. 要約 EagleEyes Lite バージョン 2.0.0 は、HTTPS通信中にSSL/TLSサーバー証明書を適切に検証できません。...

Olyx

Olyx 複数の脅威検出APIと高度なドメインスプーフィング検出を組み合わせ、悪意のあるWebサイトからユーザーを保護する、最新のAndroid向け包括的URLセキュリティ分析アプリケーションです。 スクリーンショット 機能 マルチAPIセキュリティ分析 AbuseIPDB : 報告された悪意のあるアクティビティについてIPレピュテーションをスキャン VirusTotal : 70以上のアンチウイルスエンジンに対してURLをチェック URLScan.io : 詳細なWebサイト行動分析を実行 リアルタイム結果 : 即時部分結果による段階的読み込み ドメインスプーフィング検出...

AndroidAuto

Open Android Auto Android Autoの電話側 アプリのオープンソース実装です。このアプリは携帯電話上で動作し、USB経由で車のヘッドユニットに投影し、Googleの独自規格であるcom.google.android.projection.gearhead APKを置き換えます。 ⚠️ 作業中 このプロジェクトは初期開発段階にあります。プロトコルハンドシェイクと動画投影は実際のヘッドユニットで動作しています。携帯電話の画面は、切断されるまで数秒間、車のヘッドユニットに正常に表示されます（動画の安定性は改善中です）。 機能 プロトコルと接続 USB...

CVE-2026-22010-Android-Intent-Redirection-to-Exported-Component

CVE-2026-22010 – Android Intent 重定向到已导出组件 程序代码 Java/Android 模拟 root@kitploit: // VulnActivity.java - Exported activity that forwards intents public class VulnActivity extends Activity @Override protected void onCreateBundle b super.onCreateb; Intent incoming = getIntent; // Retrieve target...

PCAPdroid v2.0.1

PCAPdroid PCAPdroid is a privacy-friendly open source app which lets you track, analyze and block the connections made by the other apps in your device. It also allows you to export a PCAP dump of the traffic, inspect HTTP, decrypt TLS traffic and much more! PCAPdroid simulates a VPN in order to...

SpringPeace

SpringPeace SpringPeace là GUI/CLI GPL-3.0-or-later để tạo payload candidate từ Android boot.img cho CVE-2026-43499. Ứng dụng Windows dùng giao diện SpringPeace, tự kiểm tra ADB, đọc boot.img, build các candidate payload.so, rồi thử qua ADB theo thứ tự manifest. SpringPeace is a GPL-3.0-or-later...

CVE-2026-77974 Softish C6 Ear Camera and EarVision Android Application Missing authentication for critical function

After spoofing the device and obtaining one user confirmation, an attacker may be able to cause the application to transmit firmware through an unauthenticated and unsigned update channel...

CVE-2026-81640 Softish C6 Ear Camera and EarVision Android Application Use of Hard-coded Credentials

An attacker could derive the camera's Wi-Fi password and connect to its wireless network. This weakens or eliminates the security value of the access-point password and may expose the live video stream, device services, status interfaces, and firmware-update functionality...

CVE-2026-82563 Softish C6 Ear Camera and EarVision Android Application Authentication bypass by spoofing

An attacker could impersonate the camera and place themselves in a man-in-the-middle or device-emulation position. This permits manipulation of device status responses, observation of application requests, and potential triggering of firmware-update behavior...

EUVD-2026-75051

The C6 ear camera transmits live video to the EarVision Android application over unencrypted UDP streams. The application manifest permits cleartext traffic, and captured network traffic contains reconstructable JPEG or WEBP video frames transmitted over UDP. An attacker within local wireless ran...

CVE-2026-81330

The Softish C6 Ear Camera transmits live video to the companion EarVision Android application over unencrypted UDP streams . The application manifest explicitly permits cleartext traffic, and the video payload consists of reconstructable JPEG or WEBP frames . An attacker within local wireless ran...

droidground v1.0.15

DroidGround Website | Demo In traditional CTF challenges , it's common to hide flags in files on a system, requiring attackers to exploit vulnerabilities to retrieve them. However, in the Android world, this approach doesn't work well. APK files are easily downloadable and reversible, so placing ...

Exploit for CVE-2026-49881

This is a PoC and a writeup for CVE-2026-49881, a logic issue in...

CVE-2026-21108

Improper export of android application components in Bixby Touch prior to version 4.3.01.17 allows local attackers to access sensitive information...

CVE-2026-21113

Improper export of android application components in Visual Voicemail prior to version 20.1.00.05 allows local attackers to initiate call without proper permission...

CVE-2026-21109

Improper access control in Watch Plugin prior to Android Watch 17 allows local attackers to access sensitive information...

CVE-2026-21105

Improper access control in Collection prior to version 1.0.1.14 in Android 15 and 2.0.02.7 in Android 16 allows local attackers to access sensitive information...