GhostLock-OPPO-PCKM00

GhostLock — OPPO PCKM00 4.14.180 PoC CVE-2026-43499 GhostLock — Linux kernel futex priority-inheritance use-after-free local privilege escalation PoC, ported to the OPPO PCKM00 OP4A57, SM6150, Android 11, kernel 4.14.180-perf+. DISCLAIMER / 免责声明 This project is for authorized security research an...

mobsfscan

mobsfscan mobsfscan es una herramienta de análisis estático que puede encontrar patrones de código inseguros en tu código fuente de Android e iOS. Es compatible con Java, Kotlin, Android XML, iOS Info.plist, Swift y código Objective C. mobsfscan utiliza las reglas de análisis estático de MobSF y...

andriller

Andriller CE Community Edition Andriller - is software utility with a collection of forensic tools for smartphones. It performs read-only, forensically sound, non-destructive acquisition from Android devices. It has features, such as powerful Lockscreen cracking for Pattern, PIN code, or Password...

andriller

Andriller CE Community Edition Andrillerは、スマートフォン向けのフォレンジックツールを集めたソフトウェアユーティリティです。Androidデバイスから読み取り専用で、フォレンジック的に健全で、非破壊的な取得を実行します。パターン、PINコード、またはパスワードの強力なロック画面クラッキング、Android（一部のApple iOSおよびWindows）データベースからのアプリデータのカスタムデコーダー（通信のデコード用）などの機能があります。抽出とデコーダーはHTMLおよびExcel形式でレポートを生成します。 機能 自動データ抽出とデコード...

ACF

Android Connections Forensics This software enables a forensic investigator to map each connection to its originating process. It doesn't require root privliges on the system, but do require adb & USB debugging. Supported OS ACF works currently only on Linux Ubuntu 14.04 Installation root@kitploi...

scripts-nse

What is it? Some NSE scripts to search information from routers. The author of this scripts are VicenDominguez. He found the 0-Day on Huawei I only modified for two others. The author of this script is not responsible for its use. Huawei HG253s v2 Vodafone-Spain is starting to rent a new Huawei...

the-book-of-secret-knowledge

"El conocimiento es poderoso, ¡ten cuidado cómo lo usas! " Una colección de listas inspiradoras, manuales, chuletas, blogs, trucos, one-liners, herramientas CLI/web y más. 📔 ¿Qué es? Este repositorio es una colección de diversos materiales y herramientas que uso a diario en mi trabajo. Contiene...

CVE-2017-0785

CVE-2017-0785 PoC This is just a personal study based on the Android information leak vulnerability released by Armis. Further reading: https://www.facebook.com/khelfatni To run, be sure to have pybluez and pwntools installed. root@kitploit: sudo apt-get install bluetooth libbluetooth-dev sudo pi...

StaCoAn

StaCoAn Not maintained anymore! Will be archived soon. StaCoAn is a crossplatform tool which aids developers, bugbounty hunters and ethical hackers performing static code analysis on mobile applications. This tool will look for interesting lines in the code which can contain: Hardcoded credential...

qiling

El caso de uso de Qiling, blog y trabajo relacionado Qiling es un framework avanzado de emulación binaria, con las siguientes características: Emula múltiples plataformas: Windows, macOS, Linux, Android, BSD, UEFI, DOS, MBR. Emula múltiples arquitecturas: 8086, X86, X8664, ARM, ARM64, MIPS, RISC-...

qiling

Qiling's use case, blog and related work Qiling is an advanced binary emulation framework, with the following features: Emulate multi-platforms: Windows, macOS, Linux, Android, BSD, UEFI, DOS, MBR. Emulate multi-architectures: 8086, X86, X8664, ARM, ARM64, MIPS, RISC-V, PowerPC. Support multiple...

XploitSPY

Una herramienta de monitoreo de Android basada en la nube, impulsada por NodeJS Características Registro de GPS Grabación de micrófono Ver contactos Registros de SMS Enviar SMS Registros de llamadas Ver aplicaciones instaladas Ver permisos del stub Registro del portapapeles en vivo Registro de...

obike

oBike Protocol Description BLE/HTTP This document provides an analysis of the oBike communication protocols as of January 2018. Results have been presented at the insomni'hack security conference 2019: slides recording as well as at the AREA41 security conference 2018: slides recording General...

Exploit for Use After Free in Linux Linux_Kernel

CVE-2026-43499 · Honor WIN RT AAK-AN00 Temporary Root Resear...

android-reverse-engineering-skill

Android Reverse Engineering & API Extraction — Claude Code skill A Claude Code skill that decompiles Android APK/XAPK/JAR/AAR files and extracts the HTTP APIs used by the app — Retrofit endpoints, OkHttp calls, hardcoded URLs, authentication patterns — so you can document and reproduce them witho...

COPG

🎮 COPG The most advanced device & CPU spoofer for Android — bypass restrictions and unlock premium graphics, higher FPS and exclusive features on most games and apps. ✨ Why COPG? COPG is a Zygisk module that makes most games and apps believe they are running on a different, fully‑featured flagshi...

frida-interception-and-unpinning

Frida 移动端拦截脚本 !Funded by NLnet - NGI Zero...

CVE-2022-22057_SM-F926U

Fork My adaptation for the SM-F926U from the original exploit here HUGE thanks to m-y-mo for discovering the exploit and his extreme patience with all my questions to port this to SM-F926U and make it useable I've added a startup daemon libtimeline.so based on code from Shizuku Added a dirty tric...

android_kernel_oneplus_avicii

OnePlus Nord avicii NeverSettle Kernel Source OnePlus Nord codename:- avicii is the first upper mid-range non-flagship smartphone from OnePlus Technology Co., Ltd. released in the year 2020. The phone is available in 2 variants based on region: AC2001 India & AC2003 Europe & Global Features|...

dirtypipez-exploit

CVE-2022-0847 DirtyPipe Exploit. Credit: Max Kellermann [email protected] A new Linux vulnerability known as 'Dirty Pipe' allows local users to gain root privileges through publicly available exploits. Today, security researcher Max Kellermann responsibly disclosed the 'Dirty Pipe'...