Lucene search
+L

31 matches found

Kitploit
Kitploit
•added 2026/09/15 9:23 a.m.•9 views

awesome-android-security

Awesome-Android-Security 目录 博客 ę“ä½œęŒ‡å— 论文 ä¹¦ē± 培训 å·„å…· é™ę€åˆ†ęžå·„å…· åŠØę€åˆ†ęžå·„å…· 在线APKåˆ†ęžå™Ø 在线APKåē¼–čÆ‘å™Ø å–čÆåˆ†ęžå·„å…· å®žéŖŒå®¤ 演讲 ę‚é”¹ ę¼ę“žčµé‡‘äøŽWriteup é€ŸęŸ„č”Ø ę£€ęŸ„ęø…å• ę¼ę“žčµé‡‘ęŠ„å‘Š 博客 éŸ©å›½ęœ€å¤§ē§»åŠØčŠå¤©åŗ”ē”Øäø­ēš„äø€é”®ę¼ę“ž å°ē±³č®¾å¤‡äø­å‘ēŽ°ēš„20äøŖå®‰å…Øé—®é¢˜ 绕过Android上Instagram和Threadsēš„SSLčÆä¹¦å›ŗå®š 逆向巄程AndroidęøøęˆCoin Hunt WorldåŠå…¶é€šäæ”åč®®ä»„ä½œå¼Š å‘ēŽ°Androidäø­ē‰¹å®šäŗŽåŽ‚å•†ēš„ę¼ę“ž Alien Androidę¶ę„č½Æä»¶ēš„ęŠ€ęœÆåˆ†ęž Androidč®¾å¤‡ēš„é”å±ē»•čæ‡ę¼ę“ž...

6.1AI score
SaveExploits0References76
Kitploit
Kitploit
•added 2026/09/15 7:33 a.m.•5 views

jadx-ai-mcp

JADX-AI-MCP Part of Zin MCP Suite ⚔ Fully automated MCP server + JADX plugin built to communicate with LLM through MCP to analyze Android APKs using LLMs like Claude — uncover vulnerabilities, analyze APK, and reverse engineer effortlessly. ⭐ Contributors Thanks to these wonderful people for thei...

6.2AI score
SaveExploits0References21
Kitploit
Kitploit
•added 2026/09/15 7:29 a.m.•10 views

Android-Disassembler

Android-Disassembler CodeFactor ć‚¹ćƒžćƒ¼ćƒˆćƒ•ć‚©ćƒ³ć§ę‚Ŗę„ć®ć‚ć‚‹ć‚¢ćƒ—ćƒŖć‚’č§£ęž ćƒ”ćƒ³ćƒ†ćƒŠćƒ³ć‚¹ēŠ¶ę³ ćƒ”ćƒ³ćƒ†ćƒŠćƒ³ć‚¹ćÆå†é–‹ć•ć‚Œć¾ć—ćŸćŒć€ćƒ—ćƒ­ć‚øć‚§ć‚ÆćƒˆćÆć¾ć å¾©ę—§ćØčæ‘ä»£åŒ–ć®ę®µéšŽć«ć‚ć‚Šć¾ć™ć€‚ ćƒ™ćƒ¼ć‚¹ćƒ©ć‚¤ćƒ³ć§ćÆć€ćƒ“ćƒ«ćƒ‰å‰ć«ć‚µćƒ–ćƒ¢ć‚øćƒ„ćƒ¼ćƒ«ćŒåˆęœŸåŒ–ć•ć‚Œć¦ć„ć‚‹ć“ćØćŒå‰ęćØćŖć‚Šć¾ć™ć€‚ ćƒ‡ćƒ•ć‚©ćƒ«ćƒˆć®é–‹ć/ć‚¤ćƒ³ćƒćƒ¼ćƒˆ/ć‚Øć‚Æć‚¹ćƒćƒ¼ćƒˆćƒ•ćƒ­ćƒ¼ćÆć€ęœ€ę–°ć®AndroidではSAFćƒ•ć‚”ćƒ¼ć‚¹ćƒˆć®å„‘ē“„ć‚’ä½æē”Øć—ć¾ć™ć€‚ é«˜åŗ¦ćŖć‚¤ćƒ³ćƒćƒ¼ćƒˆćÆć€rootć€ē”Ÿćƒ•ć‚”ć‚¤ćƒ«ć‚·ć‚¹ćƒ†ćƒ ć€ć‚¤ćƒ³ć‚¹ćƒˆćƒ¼ćƒ«ęøˆćæć‚¢ćƒ—ćƒŖć®ćƒ–ćƒ©ć‚¦ć‚øćƒ³ć‚°ć®ćŸć‚ć®åˆ„ć®ćƒ‘ćƒÆćƒ¼ćƒ¦ćƒ¼ć‚¶ćƒ¼å‘ć‘ćƒ‘ć‚¹ć§ć™ć€‚...

5.9AI score
SaveExploits0References25
Kitploit
Kitploit
•added 2026/09/15 5:58 a.m.•9 views

android-security-awesome

android-security-awesome Androidć‚»ć‚­ćƒ„ćƒŖćƒ†ć‚£é–¢é€£ćƒŖć‚½ćƒ¼ć‚¹ć®ć‚³ćƒ¬ć‚Æć‚·ćƒ§ćƒ³ć§ć™ć€‚ 1. ćƒ„ćƒ¼ćƒ« 2. å­¦č”“ćƒ»ē ”ē©¶ćƒ»å‡ŗē‰ˆē‰©ćƒ»ę›øē± 3. ć‚Øć‚Æć‚¹ćƒ—ćƒ­ć‚¤ćƒˆćƒ»č„†å¼±ę€§ćƒ»ćƒć‚° ćƒ„ćƒ¼ćƒ« ć‚Ŗćƒ³ćƒ©ć‚¤ćƒ³ć‚¢ćƒŠćƒ©ć‚¤ć‚¶ćƒ¼ 1. Appknox - ꜉ꖙ 2. Virustotal 3. NowSecure Lab Automated - AndroidćŠć‚ˆć³iOSćƒ¢ćƒć‚¤ćƒ«ć‚¢ćƒ—ćƒŖć®ć‚»ć‚­ćƒ„ćƒŖćƒ†ć‚£ćƒ†ć‚¹ćƒˆć‚’č”Œć†ćŸć‚ć®ć‚Øćƒ³ć‚æćƒ¼ćƒ—ćƒ©ć‚¤ć‚ŗå‘ć‘ćƒ„ćƒ¼ćƒ«ć€‚Lab AutomatedćÆć€ć‚Æćƒ©ć‚¦ćƒ‰äøŠć®å®Ÿę©Ÿć§ć®å‹•ēš„č§£ęžćØé™ēš„č§£ęžć‚’ē‰¹å¾“ćØć—ć€ę•°åˆ†ć§ēµęžœć‚’čæ”ć—ć¾ć™ć€‚ęœ‰ę–™ 4. App Detonator -...

6AI score
SaveExploits0References99
Kitploit
Kitploit
•added 2026/09/15 5:22 a.m.•12 views

BFScan

BFScan ē”ØäŗŽåÆ¹ APK / XAPK / APKM / DEX / JAR / WAR åŗ”ē”Øčæ›č”Œåˆå§‹å¤„ē†ēš„å·„å…·ć€‚ åœØęŗä»£ē å’Œčµ„ęŗäø­ęœē“¢ē±»ä¼¼ URIć€č·Æå¾„ęˆ–åÆ†é’„ēš„å­—ē¬¦äø² ę ¹ę®é…ē½®ę–‡ä»¶ć€ē±»å’Œę–¹ę³•ę³Øč§£ē”ŸęˆåŽŸå§‹ HTTP čÆ·ę±‚å’Œ OpenAPI 规范 ę”ÆęŒēš„å®¢ęˆ·ē«Æåŗ“ Square Retrofit Ktorfit Feign ę”ÆęŒēš„ęœåŠ”ē«Æåŗ“ Spring Web Annotations Spring SimpleUrlHandlerMapping Spring BeanNameUrlHandlerMapping JAX-RS, Jakarta RESTful Web Services JA...

5.8AI score
SaveExploits0References6
Kitploit
Kitploit
•added 2026/09/15 4:27 a.m.•8 views

Andromeda

Andromeda 使得对 Android åŗ”ē”Øēš„åˆå§‹é€†å‘å·„ēØ‹å·„ä½œę›“åæ«ę›“ē®€å•ć€‚äøŽå…¶ä»–ę›æä»£ę–¹ę”ˆē›øęÆ”ļ¼Œå®ƒä½æē”Ø C/C++ ē¼–å†™ļ¼Œå…·ęœ‰ę˜¾č‘—ēš„ę€§čƒ½ä¼˜åŠæć€‚ DEMO čÆ„å·„å…·å¤„äŗŽę—©ęœŸå¼€å‘é˜¶ę®µ ęž„å»ŗ 要걂 clang:apt install clang libzip:apt install libz-dev openssl:apt install libssl-dev make ./bin/andromeda androidapp.apk 命令 ä½œč€… Lasha Khasaia @qazqaz ę³Øę„ ęˆ‘åÆ¹ Android ēš„ē»éŖŒéžåøøęœ‰é™ļ¼Œę‰€ä»„å¦‚ęžœę‚Øęœ‰ę—¶é—“ļ¼ŒčÆ·č“”ēŒ®ć€‚ å¾…åŠžäŗ‹é”¹ 编写巄具文攣...

5.8AI score
SaveExploits0
Kitploit
Kitploit
•added 2026/09/15 12:56 a.m.•891 views

httptoolkit

HTTP Toolkit...

5.4AI score
SaveExploits0References2
Kitploit
Kitploit
•added 2026/09/14 9:57 p.m.•39 views

slicer

Slicer A tool to automate the recon process on an APK file. Slicer accepts a path to an extracted APK file and then returns all the activities, receivers, and services which are exported and have null permissions and can be externally provoked. Note : The APK has to be extracted via jadx or...

5.4AI score
SaveExploits0References2
Kitploit
Kitploit
•added 2026/09/14 9:35 p.m.•9 views

Apkatshu

Apkatshu Apkatshuは、APKćƒ•ć‚”ć‚¤ćƒ«ć‹ć‚‰URLć€ćƒ”ćƒ¼ćƒ«ć‚¢ćƒ‰ćƒ¬ć‚¹ć€IPć‚¢ćƒ‰ćƒ¬ć‚¹ć€ćŠć‚ˆć³čˆˆå‘³ę·±ć„ćƒ‡ćƒ¼ć‚æć‚’ęŠ½å‡ŗć™ć‚‹ćŸć‚ć®ćƒ„ćƒ¼ćƒ«ć§ć™ root@kitploit: Apkatshu : tool written in bash/python for extracting urls, emails, ip addresses, and interesting data from APK files. The user can choose either JADX or APKTOOL for de-compilation. 使用方法 : JADX : root@kitploit:...

6AI score
SaveExploits0
Kitploit
Kitploit
•added 2026/09/14 8:30 p.m.•11 views

MARA_Framework

MARAFramework MARA はM obile A pplication R everse engineering and A nalysis Frameworkļ¼ˆćƒ¢ćƒć‚¤ćƒ«ć‚¢ćƒ—ćƒŖć‚±ćƒ¼ć‚·ćƒ§ćƒ³ćƒŖćƒćƒ¼ć‚¹ć‚Øćƒ³ć‚øćƒ‹ć‚¢ćƒŖćƒ³ć‚°ćŠć‚ˆć³åˆ†ęžćƒ•ćƒ¬ćƒ¼ćƒ ćƒÆćƒ¼ć‚Æļ¼‰ć§ć™ć€‚ć“ć®ćƒ„ćƒ¼ćƒ«ćÆć€äø€čˆ¬ēš„ć«ä½æē”Øć•ć‚Œć‚‹ćƒ¢ćƒć‚¤ćƒ«ć‚¢ćƒ—ćƒŖć‚±ćƒ¼ć‚·ćƒ§ćƒ³ć®ćƒŖćƒćƒ¼ć‚¹ć‚Øćƒ³ć‚øćƒ‹ć‚¢ćƒŖćƒ³ć‚°ćŠć‚ˆć³åˆ†ęžćƒ„ćƒ¼ćƒ«ć‚’ć¾ćØć‚ć€OWASPćƒ¢ćƒć‚¤ćƒ«ć‚»ć‚­ćƒ„ćƒŖćƒ†ć‚£č„…åØć«åÆ¾ć™ć‚‹ćƒ¢ćƒć‚¤ćƒ«ć‚¢ćƒ—ćƒŖć‚±ćƒ¼ć‚·ćƒ§ćƒ³ć®ćƒ†ć‚¹ćƒˆć‚’ę”Æę“ć—ć¾ć™ć€‚ćć®ē›®ēš„ćÆć€ćƒ¢ćƒć‚¤ćƒ«ć‚¢ćƒ—ćƒŖć‚±ćƒ¼ć‚·ćƒ§ćƒ³é–‹ē™ŗč€…ć‚„ć‚»ć‚­ćƒ„ćƒŖćƒ†ć‚£å°‚é–€å®¶ć«ćØć£ć¦ć€ć“ć®ć‚æć‚¹ć‚Æć‚’ć‚ˆć‚Šē°”å˜ć§č¦Ŗć—ćæć‚„ć™ć„ć‚‚ć®ć«ć™ć‚‹ć“ćØć§ć™ć€‚ MARA...

5.9AI score
SaveExploits0References14
Kitploit
Kitploit
•added 2026/09/14 5:03 p.m.•12 views

Artemis

Artemis ꦂ要 APKć‚¤ćƒ³ćƒ•ćƒ©ć‚¹ćƒˆćƒ©ć‚Æćƒćƒ£ć‚’ę¤œē“¢ć™ć‚‹ćŸć‚ć®ćƒ„ćƒ¼ćƒ«ć€‚ ęä¾›: HADESSćÆć€č„†å¼±ę€§åˆ†ęžć€ć‚·ćƒŠćƒŖć‚Ŗę”»ę’ƒčØˆē”»ć€ć‚«ć‚¹ć‚æćƒ ēµ±åˆäŗˆé˜²ćƒ—ćƒ­ć‚øć‚§ć‚Æćƒˆć®å®Ÿč£…ć‚’å«ć‚€ć‚¤ćƒ³ćƒ•ćƒ©ć‚¹ćƒˆćƒ©ć‚Æćƒćƒ£ćØć‚½ćƒ•ćƒˆć‚¦ć‚§ć‚¢ć‚’é€šć˜ć¦ć€ę”»ę’ƒēš„ć‚µć‚¤ćƒćƒ¼ć‚»ć‚­ćƒ„ćƒŖćƒ†ć‚£ć‚µćƒ¼ćƒ“ć‚¹ć‚’ęä¾›ć—ć¦ć„ć¾ć™ć€‚ä¼ę„­ć€ē”£ę„­ć€ē ”ē©¶ę‰€ć®ć‚µć‚¤ćƒćƒ¼č„…åØć®é˜²ę­¢ć‚’äø­åæƒć«ę“»å‹•ć‚’ēµ„ē¹”ć—ć¦ć„ć¾ć™ć€‚ ć‚¤ćƒ³ć‚¹ćƒˆćƒ¼ćƒ« root@kitploit: pip install -r requirements.txt python main.py ć‚³ćƒžćƒ³ćƒ‰ćƒ©ć‚¤ćƒ³ć‚Ŗćƒ—ć‚·ćƒ§ćƒ³ root@kitploit: --help Display help --path Requir...

5.9AI score
SaveExploits0
Kitploit
Kitploit
•added 2026/09/14 3:45 p.m.•8 views

AndroPyTool

AndroPyTool 曓新!DroidBoxć®ć‚¤ćƒ”ćƒ¼ć‚øćŒäæ®ę­£ć•ć‚Œć¾ć—ćŸć€‚å‹•ēš„č§£ęžćŒå‹•ä½œć™ć‚‹ć‚ˆć†ć«ćŖć‚Šć¾ć—ćŸć€‚ ć“ć‚ŒćÆć€Android...

6AI score
SaveExploits0References1
Kitploit
Kitploit
•added 2026/09/14 3:27 p.m.•7 views

qark

ć‚Æć‚¤ćƒƒć‚ÆAndroidćƒ¬ćƒ“ćƒ„ćƒ¼ć‚­ćƒƒćƒˆ ć“ć®ćƒ„ćƒ¼ćƒ«ćÆć€ć‚½ćƒ¼ć‚¹ć‚³ćƒ¼ćƒ‰ć¾ćŸćÆćƒ‘ćƒƒć‚±ćƒ¼ć‚øåŒ–ć•ć‚ŒćŸAPKć®ć„ćšć‚Œć‹ć«ćŠć„ć¦ć€ć„ćć¤ć‹ć®ć‚»ć‚­ćƒ„ćƒŖćƒ†ć‚£é–¢é€£ć®Androidć‚¢ćƒ—ćƒŖć‚±ćƒ¼ć‚·ćƒ§ćƒ³č„†å¼±ę€§ć‚’ęŽ¢ć™ćŸć‚ć«čØ­čØˆć•ć‚Œć¦ć„ć¾ć™ć€‚ć¾ćŸć€ē™ŗč¦‹ć—ćŸč„†å¼±ę€§ć®å¤šćć‚’ę‚Ŗē”ØåÆčƒ½ćŖć€ŒProof-of-Conceptć€ćƒ‡ćƒ—ćƒ­ć‚¤åÆčƒ½ćŖAPK悄ADBć‚³ćƒžćƒ³ćƒ‰ć‚’ä½œęˆć™ć‚‹ć“ćØć‚‚ć§ćć¾ć™ć€‚ć“ć®ćƒ„ćƒ¼ćƒ«ćÆć€ćć‚Œä»„å¤–ćÆå®‰å…ØćŖę”ä»¶äø‹ć§ę‚Ŗē”ØåÆčƒ½ćŖč„†å¼±ę€§ć«ē„¦ē‚¹ć‚’å½“ć¦ć¦ć„ć‚‹ćŸć‚ć€ćƒ†ć‚¹ćƒˆćƒ‡ćƒć‚¤ć‚¹ć‚’rootåŒ–ć™ć‚‹åæ…č¦ćÆć‚ć‚Šć¾ć›ć‚“ć€‚ åæ…č¦ę”ä»¶ Python 2.7.13 ćŠć‚ˆć³ 3.6 ć§ćƒ†ć‚¹ćƒˆęøˆćæ OSX态Linux态Windows ć§ćƒ†ć‚¹ćƒˆęøˆćæ 使用...

5.9AI score
SaveExploits0References1
Kitploit
Kitploit
•added 2026/09/14 2:12 p.m.•10 views

YAASA

YAASA YAASA(Yet Another APK Static Analyzer)は、APKć®č§£ęžć‚’ę„½ć—ć‚€ćŸć‚ć®ćƒ•ćƒ¬ćƒ¼ćƒ ćƒÆćƒ¼ć‚Æć§ć™ć€‚ ć“ć®ćƒ—ćƒ­ć‚øć‚§ć‚ÆćƒˆćÆä»„äø‹ć®ćƒ„ćƒ¼ćƒ«ć‚’ä½æē”Øć—ć€Djangoćƒ•ćƒ¬ćƒ¼ćƒ ćƒÆćƒ¼ć‚ÆäøŠć«ę§‹ēÆ‰ć•ć‚Œć¦ć„ć¾ć™ć€‚ APKTool: Android apkćƒ•ć‚”ć‚¤ćƒ«ć‚’ćƒŖćƒćƒ¼ć‚¹ć‚Øćƒ³ć‚øćƒ‹ć‚¢ćƒŖćƒ³ć‚°ć™ć‚‹ćŸć‚ć®ćƒ„ćƒ¼ćƒ« AxmlParserPY: Python用AxmlParser PlagueScanner: ć‚Ŗćƒ¼ćƒ—ćƒ³ć‚½ćƒ¼ć‚¹ć®ćƒžćƒ«ćƒAVć‚¹ć‚­ćƒ£ćƒŠćƒ¼ćƒ•ćƒ¬ćƒ¼ćƒ ćƒÆćƒ¼ć‚Æ ę–°ć—ć„ę©Ÿčƒ½ćÆ analyze/libs/threads.py ć«čæ½åŠ ć§ćć¾ć™ć€‚ 使い方...

6AI score
SaveExploits0References3
Github Security Blog
Github Security Blog
•added 2026/08/18 6:01 p.m.•16 views

MobSF has SSRF port restriction bypass in assetlinks_check

Summary MobSF's Android App Link assetlinks checker validates only the manifest android:host value with validhost, but then appends the separate android:port value into the URL used for the server-side request. This bypasses the current port restriction in validhost and lets a crafted APK cause...

3CVSS5.7AI score0.00262EPSS
SaveExploits0References5Affected Software1
OSV
OSV
•added 2026/07/07 4:02 p.m.•17 views

PYSEC-2026-1675 Mobile Security Framework (MobSF) Allows Stored Cross Site Scripting (XSS) via malicious SVG Icon Upload

Vulnerable MobSF Versions: .svg This file becomes publicly accessible via the web interface at: http://127.0.0.1:8081/download/filename.svg If the SVG contains embedded JavaScript e.g., an XSS payload, accessing this URL via a browser leads to the execution of the script in the context of the Mob...

6.9CVSS5.9AI score0.00305EPSS
SaveExploits1References6
GithubExploit
GithubExploit
•added 2026/03/16 5:11 p.m.•308 views

Exploit for Race Condition in Canonical Ubuntu_Linux

Dillu-Analyzer šŸ›”ļø Dillu Analyzer — A web-based universal malwa...

9.3CVSS5.8AI score0.99945EPSS
SaveExploits142
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•15 views

EUVD-2025-13371

Malicious code in bioql PyPI...

8.6CVSS6.3AI score0.00305EPSS
SaveExploits1References4
Veracode
Veracode
•added 2025/05/12 8:21 a.m.•19 views

Cross-site Scripting (XSS)

mobsf is vulnerable to Stored Cross-Site Scripting XSS. The vulnerability is due to improper input sanitization during SVG file handling in the Android APK analysis workflow, which allows malicious scripts to be embedded in the SVG files...

8.6CVSS5.9AI score0.00305EPSS
SaveExploits1References4Affected Software1
RedhatCVE
RedhatCVE
•added 2025/05/07 6:25 p.m.•17 views

CVE-2025-46335

Mobile Security Framework MobSF is a security research platform for mobile applications in Android, iOS and Windows Mobile. A Stored Cross-Site Scripting XSS vulnerability has been identified in MobSF versions up to and including 4.3.2. The vulnerability arises from improper sanitization of...

8.6CVSS5.5AI score0.00305EPSS
SaveExploits1References1
Rows per page
Query Builder