androwarn

Androwarn Yet another static code analyzer for malicious Android applications Description Androwarn is a tool whose main aim is to detect and warn the user about potential malicious behaviours developped by an Android application. The detection is performed with the static analysis of the...

CVE-2026-73296

🚨 CVE-2026-73296 - UFO-Vuln 💥 El acceso no autenticado a Mobile MCP puede exponer los datos de la pantalla de Android y proporcionar capacidades de control remoto de la interfaz de usuario a través de ADB. ⚠️ Aviso de seguridad Este repositorio está destinado únicamente a investigación de segurida...

Smartphone-Pentest-Framework

Smartphone-Pentest-Framework The Smartphone Pentest-Framework has been deprecated by the Dagah Mobile Penetration Testing Software available at: https://www.shevirah.com/dagah. For those simply looking to follow the exercises in my book, download the Kali image on my book site at:...

cuckoo-droid

CuckooDroid - Automated Android Malware Analysis. Contributed By Check Point Software Technologies LTD. CuckooDroid is an extension of Cuckoo Sandbox the Open Source software for automating analysis of suspicious files, CuckooDroid brigs to cuckoo the capabilities of execution and analysis of...

CVE-2025-56224

CVE-2025-56224 OTP Bypass de verificación Descripción un atacante puede suplantar el número de móvil de otro usuario y utilizar esta vulnerabilidad para verificar el número sin conocer el código OTP. Puntuación CVSS: 8.1 Alta Tipo de ataque Remoto Autenticado Versiones afectadas Versiones...

Santoku-Linux

Mobile Forensics, Malware Analysis, and App Security Testing SLICE AND DICE Boot into Santoku and get to work, with the latest security tools and utilities focused on mobile platforms such as Android and iOS. Santoku Linux is a bootable Linux ISO which you can run as Live CD or install on a PC/VM...

apkx

apkx - Android APK Decompilation for the Lazy A Python wrapper to popular free dex converters and Java decompilers. Extracts Java source code directly from the APK. Useful for experimenting with different converters/decompilers without having to worry about classpath settings and command line arg...

mas-crackmes

OWASP MAS Crackmes This repo contains the source code for the OWASP MAS Crackmes. Welcome to the MAS Crackmes aka. UnCrackable Apps, a collection of mobile reverse engineering challenges. These challenges are used as examples throughout the OWASP MASTG. Of course, you can also solve them for fun...

DVHMA

DVHMA Damn Vulnerable Hybrid Mobile App DVHMA is an hybrid mobile app for Android that intentionally contains vulnerabilities. Its purpose is to enable security professionals to test their tools and techniques legally, help developers better understand the common pitfalls in developing hybrid...

rainmap-lite

rainmap-lite Rainmap Lite - Responsive web application that allows users to launch Nmap scans from their mobiles/tablets/web browsers! Unlike it's predecessor 1, Rainmap-lite does not require special services RabbitMQ, PostgreSQL, Celery, supervisor, etc to make it easy to install on any server...

CVE-2019-6447-in-Mobile-Application

CVE-2019-6447-in-Mobile-Application In this research report you can get completly idea about the CVE 2019-6447 in the real world application and explotations with example. If you want to created video for the exploitation please use below mentions link...

CVE-2024-24919-CHECKPOINT

CVE-2024-24919 Potentially allowing an attacker to read certain information on Check Point Security Gateways once connected to the internet and enabled with remote Access VPN or Mobile Access Software Blades. A Security fix that mitigates this vulnerability is available. FIRST: I AM NOT RESPONSIB...

CVE-2024-24919---Poc

CVE-2024-24919 PoC a Proof of Concept of CVE-2024-24919 Read about it - https://nvd.nist.gov/vuln/detail/CVE-2024-24919 The vulnerability allows an unauthenticated remote attacker to read the contents of an arbitrary file located on the affected appliance. Description Potentially allowing an...

Event-ID-263-Arbitrary-File-Read-on-Checkpoint-Security-Gateway-CVE-2024-24919-

SOC Alert Analysis: Arbitrary File Read on Checkpoint Security Gateway CVE-2024-24919 Introduction CVE-2024-24919 is a critical zero-day vulnerability in Check Point Security Gateways that allows unauthenticated remote attackers to read arbitrary files from affected systems. Discovered in May 202...

CVE-2023-31902

CVE-2023-31902 — Mobile Mouse 3.6.0.4 Remote Code Execution Summary: Mobile Mouse is a Windows application that turns your phone into a mouse/keyboard over the network. It listens on port 9099 TCP and 35913 WebSocket with no authentication by default. The vulnerability allows an unauthenticated...

cve-2023-2523-and-cve-2023-2648

cve-2023-2523 Note: The script uploads a phpinfo file Usage: Results are automatically saved to result.txt Image Manual POC: POST /E-mobile/App/Ajax/ajax.php?action=mobileuploadsave HTTP/1.1 Host: your-ip Content-Length: 352 Cache-Control: max-age=0 Upgrade-Insecure-Requests: 1 Origin: null...

MEAT

M.E.A.T. - Mobile Evidence Acquisition Toolkit Meet M.E.A.T! From Jack Farley - BlackStone Discovery This toolkit aims to help forensicators perform different kinds of acquisitions on iOS devices and Android in the future. Requirements to run from source Windows or Linux Python 3.7.4 or 3.7.2 Pip...

ez-iRZ

ez-iRZ Exploit for CVE-2022-27226 Cross Site Request Forgery to Remote Code Execution in iRZ Mobile Routers Credits John Jackson Chris Mack --- https://github.com/0xHalcyon Stephen Chavez --- https://github.com/redragonx/ Robert Willis Description A CSRF issue on iRZ Mobile Routers through...

CyberPup

CyberPup A free, open-source cybersecurity app for everyday people. CyberPup helps non-technical users lock down their digital lives through guided checklists, bite-sized lessons, and tools like breach checking. All guidance is grounded in well-known frameworks from ACSC, CISA, and NIST -...

MobSF_AI

MobSF AI Sidecar This project adds an AI-powered chat assistant to the Mobile Security Framework MobSF. It allows security analysts to ask questions about the analysis report generated by MobSF directly within the interface, leveraging OpenAI's model. Features Seamless Integration : Injects a...