bytecode-viewer

Bytecode Viewer Bytecode Viewer - a lightweight user-friendly Java/Android Bytecode Viewer, Decompiler & More. New Features Jump to Declaration Draggable tabs Patched CVE-2022-21675 Make sure to upgrade to v2.11.X Dark mode by default with multiple themes Translated into over 30 languages...

RMS-Runtime-Mobile-Security

Runtime Mobile Security RMS 📱🔥 by @mobilesecurity Runtime Mobile Security RMS , powered by FRIDA, is a powerful web interface that helps you to manipulate Android and iOS Apps at Runtime. With RMS you can easily dump all loaded classes and relative methods, hook everything on the fly, trace metho...

tcpflow

TCPFLOW 1.5.0 Downloads directory: http://digitalcorpora.org/downloads/tcpflow/ Installation Most common GNU/Linux distributions ship tcpflow in their repositories. So on Debian/Ubuntu/etc you can say sudo apt-get install tcpflow and on Fedora/RedHat/CentOS/etc you can say sudo dnf install tcpflo...

XSpider PRO MaxPatrol VM Mobile Resource Consumption DoS

The vulnerability of XSpider PRO and the vulnerability management system MaxPatrol VM Mobile are related to uncontrolled resource consumption. Exploiting these vulnerabilities can allow remote attackers to cause service failures...

Elph Mobile Improper Certificate Validation

The vulnerability in the Elph Mobile unified communications platform is related to improper validation of certificate authenticity. Exploitation of this vulnerability enables a remote attacker to compromise the confidentiality and integrity of protected information...

Elph Mobile Data Compromise

The vulnerability in the Elph Mobile unified communications platform is related to improper export of application components. Exploitation of this vulnerability may allow an attacker to compromise the integrity of protected information...

Elph Mobile Unverified Code Upload

The vulnerability in the Elph Mobile unified communications platform is related to code loading without proper integrity checks. Exploitation of this vulnerability could allow a remote attacker to compromise the confidentiality and integrity of protected information...

Elph Mobile Hard-coded Key Unauthorized Access

The vulnerability in the Elph Mobile unified communications platform is related to the use of a hard-coded cryptographic key. Exploitation of this vulnerability could allow an attacker to gain unauthorized access to sensitive information...

Elph Mobile Unencrypted Data Transmission

The vulnerability in the Elph Mobile unified communications platform is related to the transmission of data in an open format. Exploitation of this vulnerability could allow a remote attacker to compromise the confidentiality and integrity of protected information...

droidground

DroidGround Website | Demo In traditional CTF challenges , it's common to hide flags in files on a system, requiring attackers to exploit vulnerabilities to retrieve them. However, in the Android world, this approach doesn't work well. APK files are easily downloadable and reversible, so placing ...

simvyn

simvyn Universal mobile devtool — control iOS Simulators, Android Emulators, and real devices from a single dashboard and CLI Table of Contents Quick Start Installation AI Coding Agents Features Module Showcases Collections Guide CLI Reference How It Works Supported Platforms Contributing Securit...

Awesome-MoAI-Security

Awesome Mobile On-Device AI Security SoK: Attack and Defense Landscape of Mobile On-device AI Systems Mobile on-device AI systems execute AI models locally through ML frameworks such as LiteRT/TFLite , Core ML , ExecuTorch , ONNX , and hardware-backed accelerators. This repo tracks the security...

cuckoo-droid

CuckooDroid - Automated Android Malware Analysis. Contributed By Check Point Software Technologies LTD. CuckooDroid is an extension of Cuckoo Sandbox the Open Source software for automating analysis of suspicious files, CuckooDroid brigs to cuckoo the capabilities of execution and analysis of...

awesome-mobile-security

awesome-mobile-security Maintained by @vaib25vicky with contributions from the security and developer communities. Android General - Blogs, Papers, How To's Android: Gaining access to arbitrary Content Providers Evernote: Universal-XSS, theft of all cookies from all sites, and more Interception o...

HosTaGe

HosTaGe - Honeypot-To-Go Copyright C 2013-2021, Aalborg University Denmark and Technische Universität Darmstadt Germany HosTaGe is a lightweight, low-interaction, portable, and generic honeypot for mobile devices that aims on the detection of malicious, wireless network environments. As most...

finalrun-agent

finalrun.app • Docs • Blog • Cloud Device Waitlist • Join Slack Community Follow us on finalrun-agent is an AI-driven CLI that tests your Android and iOS apps using natural language. You write a plain-English test in YAML, FinalRun launches your app on an emulator or simulator, uses an AI model...

Vulnerabilities fixed in Google Android and Samsung Mobile

Google has patched vulnerabilities in Android. Samsung has also addressed the vulnerabilities relevant to Samsung Mobile devices. The critical vulnerabilities include remote code execution capabilities and privilege escalation. This allows attackers to gain unauthorized access to system component...

blutter

Blutter Flutter Mobile Application Reverse Engineering Tool by Compiling Dart AOT Runtime Currently the application supports only Android libapp.so arm64 only. Also the application is currently work only against recent Dart versions. For high priority missing features, see TODO Environment Setup...

Brida

Brida Brida is a Burp Suite Extension that, working as a bridge between Burp Suite and Frida, lets you use and manipulate applications’ own methods while tampering the traffic exchanged between the applications and their back-end services/servers. It supports all platforms supported by Frida...

objection

📱objection - Runtime Mobile Exploration objection is a runtime mobile exploration toolkit, powered by Frida, built to help you assess the security posture of your mobile applications, without needing a jailbreak. Supports both iOS and Android. Inspect and interact with container file systems...