PAPIMonitor

PAPIMonitor P ython API Monitor for Android apps는 Frida를 기반으로 한 Python 도구로, 앱 실행 중 사용자가 선택한 API를 모니터링합니다. 앱은 이미 ADB를 통해 PC 호스트에 연결된 에뮬레이터 내에 설치되어 있어야 합니다. 사용자는 여러 카테고리예: Device Data, Device Info, SMS로 나뉜 미리 정의된 API 목록을 모니터링하거나 명령줄을 통해 스크립트에 전달된 사용자 정의 API 목록을 모니터링할 수 있습니다. 이 도구는 호출된 API, 매개변수, 반환...

hooker

Hooker: Androidアプリケーションの自動動的解析 Hookerについて 機能説明 Hookerは、Androidアプリケーションの動的解析のためのオープンソースプロジェクトです。このプロジェクトは、対象のアプリケーションによって行われたAPI呼び出しを自動的に傍受および変更するために使用できるさまざまなツールとアプリケーションを提供します。 このプロジェクトは、Android...

EUVD-2026-23151

Luanti 5 before 5.15.2 sometimes allows unintended access to an insecure environment. If at least one mod is listed as secure.trustedmods or secure.httpmods, then a crafted mod can intercept the request for the insecure environment or HTTP API, and also receive access to it...

CVE-2025-42603

This vulnerability exists in the Meon KYC solutions due to transmission of sensitive data in plain text within the response payloads of certain API endpoints. An authenticated remote attacker could exploit this vulnerability by intercepting API response that contains unencrypted sensitive...

Shopify: Customer's full name disclosure via Shopify Chat (by email lookup)

By making use of the Shopify Chat Application, it is possible to retrieve a customer First Name and Last Name by providing its email. Steps to reproduce 1. Having a shop with Shopify Chat installed, open up https://shop.myshopify.com/?chat in Incognito mode 1. Click on I need an update on my orde...

Zomato: [www.zomato.com] Availing Zomato Gold membership for free by tampering plan id(s)

Summary: Get free zomato gold membership using zomato iOS app. Description: add more details about this vulnerability 1 Login to the zomato iOS application. 2 Select zomato gold from the home screen. 3 Depending on your location, you will see different gold pack options. 4 Select any gold pack. 5...