deep-C

Deep-C Deep-C is an Android Deep Link Exploitation Framework that automatically decompiles APKs, identifies exposed and insecure deep link entry points, validates exploitability using static analysis and optional AI verification , and generates executable adb Proof-of-Concepts PoCs. Deep-C is...

PhoneSploit-Pro

PhoneSploit Pro The Swiss Army knife for Android. An all-in-one hacking tool written in Python to remotely take over Android devices using ADB, scrcpy, Nmap, and Metasploit-Framework. Table of contents Overview Screenshots Features Requirements Installing dependencies Getting started Device setup...

Log4j-Vulnerability

Log4j Vulnerability Tutorial: https://youtu.be/PNDBjoT83zA Tutorial: https://cryptodeeptech.ru/log4j-vulnerability Background on Log4j Alibaba Cloud Security Team publicly disclosed a critical vulnerability CVE-2021-44228 enabling unauthenticated remote code execution against multiple versions of...

CVE-2026-43499-S25U

CVE-2026-43499 PoC for Galaxy S25 Ultra Device-specific proof of concept for CVE-2026-43499 on the Korean Samsung Galaxy S25 Ultra. Supported target root@kitploit: Model: SM-S938N Codename: pa3q Android: 16 / API 36 Build: S938NKSUACZF1 Display ID: BP4A.251205.006.S938NKSUACZF1 Fingerprint:...

Umbrella_android

Umbrella Umbrella is an Android mobile app developed by Security First that provides human rights defenders with the information on what to do in any given security situation and the tools to do it. It allows the user to choose what they want to do, such as: protect data; securely make a...

GDA-android-reversing-Tool

ˇ GDAGJoy Dex Analyzer GDA, an powerful Dalvik bytecode decompiler implemented in C++, which has the advantages of fast analysis and low memory&disk consumption and an stronger ability to decompiling the apk, dex, odex, oat, jar, class, aar files. GDA is completely native software and works witho...

CVE-2017-13286

CVE-2017-13286 CVE-2017-13286 Poccannot use All resources are sourced from this article https://bbs.kanxue.com/thread-268506.htm The main cause of this vulnerability is the inconsistency between reading and writing of Parcel objects. It can be traced back to the following code root@kitploit: publ...

CVE-2019-2215

CVE-2019-2215 Andriod binder bug record.Just only test on emulator : ubuntu 22.04 | 4G | 4 cpus andriod studio Pixel2 | Andriod 10.0Q--Google Play Intel x86 Atom 64 System Image | API-29 ndk 21.0.6113669 origin/android-goldfish-4.14-dev | kernel version is 4.14.175 some important config options...

TrustTunnel

Clients · App store · Play store Table of Contents Introduction Server Features Client Features Quick start Endpoint setup Install the endpoint Updating the endpoint Endpoint configuration wizard Let's Encrypt certificate lifecycle Running endpoint Export client configuration Client setup Install...

brash

Brash Chromium Browser DoS Attack via document.title Exploitation Brash is a critical vulnerability in Blink , the rendering engine that powers Google's Chromium-based browsers. It allows any Chromium browser to collapse in 15-60 seconds by exploiting an architectural flaw in how certain DOM...

objection

📱objection - Runtime Mobile Exploration objection is a runtime mobile exploration toolkit, powered by Frida, built to help you assess the security posture of your mobile applications, without needing a jailbreak. Supports both iOS and Android. Inspect and interact with container file systems...

initroot

initroot: Motorola Bootloader Kernel Cmdline Injection Secure Boot & Device Locking Bypass CVE-2016-10277 By Roee Hay / Aleph Research, HCL Technologies First stage exploit: Tethered jailbreak This exploit gains an ephemeral unrestricted root access on the device. For example, on cedric some...

friman

friman Do you ever feel that finding the right Frida version for the job is like threading a needle? With different projects, devices, and debugging scenarios all requiring specific builds, keeping track of Frida versions can quickly become a tedious balancing act. friman pronounced "free man " i...

RedGridLink

Red Grid Link Offline MGRS navigation and proximity team coordination for small teams 2-8 people. No cell service needed. Built on the MGRS engine from Red Grid MGRS. Field Link adds zero-config proximity sync over Bluetooth, with Apple Multipeer Connectivity iOS and Google Play Services Nearby...

apk-medit

apk-medit Apk-medit is a memory search and patch tool for debuggable apk without root & ndk. It was created for mobile game security testing. Many mobile games have rooting detection, but apk-medit does not require root privileges, so memory modification can be done without bypassing the rooting...

APKDeepLens

APKDeepLens Android security insights in full spectrum. Features • Detection • Installation • Usage • Reports Featured atBlack Hat MEA 2023 and Black Hat ASIA 2024 What is APKDeepLens? APKDeepLens is a Python-based static analysis tool for Android APK files. It decompiles APKs using JADX and runs...

trueseeing

README trueseeing is a fast, accurate and resillient vulnerability scanner for iOS/Android apps. We operate on the Dalvik VM level for Android -- i.e. we don't care if the target app is obfuscated or not. Capability Currently we can: Automatically scan app for vulnerabilities, reporting in...

Exploit for Stack-based Buffer Overflow in Microsoft

🛡️ AI Security Tool Module CVE-2026-4...

easysploit

EasySploit EasySploit v4.2 Linux - Metasploit automation EASIER and FASTER than EVER Disclaimer: Usage of EASYSPLOIT for attacking targets without prior mutual consent is ILLEGAL. Developers are not responsible for any damage caused by this script. EASYSPLOIT is intented ONLY FOR EDUCATIONAL...

Qu1cksc0pe

Qu1cksc0pe All-in-One malware analysis tool for analyze many file types, from Windows binaries to E-Mail files. You can get : What DLL files are used. Functions and APIs. Sections and segments. URLs, IP addresses and emails. Android permissions Dangerous/Special/Info. MITRE ATT&CK mappings Window...