Lucene search
+L

31 matches found

Kitploit
Kitploit
•added 2026/09/15 9:23 a.m.•9 views

awesome-android-security

Awesome-Android-Security ėŖ©ģ°Ø ėø”ė”œź·ø 방법 논문 ė„ģ„œ 교윔 ė„źµ¬ 정적 ė¶„ģ„ ė„źµ¬ ė™ģ  ė¶„ģ„ ė„źµ¬ ģ˜Øė¼ģø APK ė¶„ģ„źø° ģ˜Øė¼ģø APK ė””ģ»“ķŒŒģ¼ėŸ¬ ķ¬ė Œģ‹ ė¶„ģ„ ė„źµ¬ ģ‹¤ģŠµ ķ™˜ź²½ ė°œķ‘œ źø°ķƒ€ 버그 ė°”ģš“ķ‹° ė° ė¶„ģ„źø€ 치트 ģ‹œķŠø 점검 ėŖ©ė” 버그 ė°”ģš“ķ‹° ė³“ź³ ģ„œ ėø”ė”œź·ø ķ•œźµ­ ģµœėŒ€ ėŖØė°”ģ¼ ģ±„ķŒ… ģ•±ģ˜ 1-큓릭 ģµģŠ¤ķ”Œė”œģž‡ Xiaomi źø°źø°ģ—ģ„œ 발견된 20가지 ė³“ģ•ˆ 문제 Androidģ—ģ„œ Instagram ė° Threads SSL Pinning 우회 Android ź²Œģž„ Coin Hunt World와 ź·ø 통신 ķ”„ė”œķ† ģ½œģ„ ė¦¬ė²„ģŠ¤...

7CVSS6.1AI score0.00132EPSS
SaveExploits0References75
Kitploit
Kitploit
•added 2026/09/15 7:33 a.m.•6 views

jadx-ai-mcp

JADX-AI-MCP Part of Zin MCP Suite ⚔ Fully automated MCP server + JADX plugin built to communicate with LLM through MCP to analyze Android APKs using LLMs like Claude — uncover vulnerabilities, analyze APK, and reverse engineer effortlessly. ⭐ Contributors Thanks to these wonderful people for thei...

6.2AI score
SaveExploits0References21
Kitploit
Kitploit
•added 2026/09/15 7:29 a.m.•10 views

Android-Disassembler

Android-Disassembler CodeFactor ķœ“ėŒ€ķ°ģ—ģ„œ 악성 앱 ė¶„ģ„ ģœ ģ§€ ꓀리 상태 ģœ ģ§€ ź“€ė¦¬ėŠ” ģž¬ź°œė˜ģ—ˆģ§€ė§Œ, ķ”„ė”œģ ķŠøėŠ” ģ—¬ģ „ķžˆ 복구 ė° ķ˜„ėŒ€ķ™” 단계에 ģžˆģŠµė‹ˆė‹¤. ģ“ģ œ źø°ė³øź°’ģ€ ė¹Œė“œ 전에 ģ“ˆźø°ķ™”ėœ git ģ„œėøŒėŖØė“ˆģ„ ķ•„ģš”ė”œ ķ•©ė‹ˆė‹¤. źø°ė³ø ģ—“źø°/ź°€ģ øģ˜¤źø°/낓볓낓기 ķė¦„ģ€ ģµœģ‹  Androidģ—ģ„œ SAF ģš°ģ„  ź³„ģ•½ģ„ ģ‚¬ģš©ķ•©ė‹ˆė‹¤. ź³ źø‰ ź°€ģ øģ˜¤źø°ėŠ” 루트, ģ›ģ‹œ ķŒŒģ¼ ģ‹œģŠ¤ķ…œ ė° ģ„¤ģ¹˜ėœ 앱 ķƒģƒ‰ģ„ ģœ„ķ•œ ė³„ė„ģ˜ ź³ źø‰ ģ‚¬ģš©ģž ź²½ė”œģž…ė‹ˆė‹¤. QUERYALLPACKAGESėŠ” źø°ė³ø SAF ķė¦„ģ“ ģ•„ė‹Œ ź³ źø‰ ģ‚¬ģš©ģžģš© ģ„¤ģ¹˜ 앱 ģ†ŒģŠ¤ģ— ģœ ģ§€ė©ė‹ˆ...

5.9AI score
SaveExploits0References25
Kitploit
Kitploit
•added 2026/09/15 5:58 a.m.•9 views

android-security-awesome

android-security-awesome Android ė³“ģ•ˆ ꓀련 ė¦¬ģ†ŒģŠ¤ ėŖØģŒģž…ė‹ˆė‹¤. 1. ė„źµ¬ 2. ķ•™ģˆ /연구/간행물/ė„ģ„œ 3. ģµģŠ¤ķ”Œė”œģž‡/취약점/버그 ė„źµ¬ ģ˜Øė¼ģø ė¶„ģ„źø° 1. Appknox - 유료 2. Virustotal 3. NowSecure Lab Automated - Android ė° iOS ėŖØė°”ģ¼ 앱 ė³“ģ•ˆ ķ…ŒģŠ¤ķŠøė„¼ ģœ„ķ•œ ģ—”ķ„°ķ”„ė¼ģ“ģ¦ˆ ė„źµ¬ģž…ė‹ˆė‹¤. Lab Automatedģ€ ķ“ė¼ģš°ė“œģ˜ ģ‹¤ģ œ źø°źø°ģ—ģ„œ ė™ģ  ė° 정적 ė¶„ģ„ģ„ ģˆ˜ķ–‰ķ•˜ģ—¬ ėŖ‡ ė¶„ ģ•ˆģ— 결과넼 ė°˜ķ™˜ķ•©ė‹ˆė‹¤. 유료 4. App Detonator - APK...

6AI score
SaveExploits0References99
Kitploit
Kitploit
•added 2026/09/15 5:22 a.m.•12 views

BFScan

BFScan ē”ØäŗŽåÆ¹ APK / XAPK / APKM / DEX / JAR / WAR åŗ”ē”Øčæ›č”Œåˆå§‹å¤„ē†ēš„å·„å…·ć€‚ åœØęŗä»£ē å’Œčµ„ęŗäø­ęœē“¢ē±»ä¼¼ URIć€č·Æå¾„ęˆ–åÆ†é’„ēš„å­—ē¬¦äø² ę ¹ę®é…ē½®ę–‡ä»¶ć€ē±»å’Œę–¹ę³•ę³Øč§£ē”ŸęˆåŽŸå§‹ HTTP čÆ·ę±‚å’Œ OpenAPI 规范 ę”ÆęŒēš„å®¢ęˆ·ē«Æåŗ“ Square Retrofit Ktorfit Feign ę”ÆęŒēš„ęœåŠ”ē«Æåŗ“ Spring Web Annotations Spring SimpleUrlHandlerMapping Spring BeanNameUrlHandlerMapping JAX-RS, Jakarta RESTful Web Services JA...

5.8AI score
SaveExploits0References6
Kitploit
Kitploit
•added 2026/09/15 4:27 a.m.•8 views

Andromeda

AndromedaėŠ” Android ģ• ķ”Œė¦¬ģ¼€ģ“ģ…˜ģ˜ 쓈기 ė¦¬ė²„ģŠ¤ ģ—”ģ§€ė‹ˆģ–“ė§ ģž‘ģ—…ģ„ 씰금 ė” ė¹ ė„“ź³  ģ‰½ź²Œ ė§Œė“­ė‹ˆė‹¤. 다넸 ėŒ€ģ•ˆė“¤ź³¼ ė¹„źµķ•˜ģ—¬ C/C++딜 ģž‘ģ„±ė˜ģ–“ ėˆˆģ— ė„ėŠ” ģ„±ėŠ„ ģ“ģ ģ“ ģžˆģŠµė‹ˆė‹¤. ė°ėŖØ ģ“ ė„źµ¬ėŠ” 쓈기 개발 단계에 ģžˆģŠµė‹ˆė‹¤ ė¹Œė“œ ģš”źµ¬ 사항 clang: apt install clang libzip: apt install libz-dev openssl: apt install libssl-dev make ./bin/andromeda androidapp.apk 명령얓 ģ €ģž Lasha Khasaia @qazqaz ģ°øź³ ...

5.8AI score
SaveExploits0
Kitploit
Kitploit
•added 2026/09/15 12:56 a.m.•891 views

httptoolkit

HTTP Toolkit...

5.4AI score
SaveExploits0References2
Kitploit
Kitploit
•added 2026/09/14 9:57 p.m.•39 views

slicer

Slicer A tool to automate the recon process on an APK file. Slicer accepts a path to an extracted APK file and then returns all the activities, receivers, and services which are exported and have null permissions and can be externally provoked. Note : The APK has to be extracted via jadx or...

5.4AI score
SaveExploits0References2
Kitploit
Kitploit
•added 2026/09/14 9:35 p.m.•9 views

Apkatshu

Apkatshu ApkatshuėŠ” APK ķŒŒģ¼ģ—ģ„œ URL, ģ“ė©”ģ¼, IP ģ£¼ģ†Œ ė° ķ„ėÆøė”œģš“ ė°ģ“ķ„°ė„¼ ģ¶”ģ¶œķ•˜ėŠ” ė„źµ¬ģž…ė‹ˆė‹¤. root@kitploit: Apkatshu : tool written in bash/python for extracting urls, emails, ip addresses, and interesting data from APK files. The user can choose either JADX or APKTOOL for de-compilation. ģ‚¬ģš©ė²• : JADX : root@kitploit:...

6AI score
SaveExploits0
Kitploit
Kitploit
•added 2026/09/14 8:30 p.m.•12 views

MARA_Framework

MARAFramework MARA ėŠ” M obile A pplication R everse engineering ė° A nalysis Frameworkģž…ė‹ˆė‹¤. ģ¼ė°˜ģ ģœ¼ė”œ ģ‚¬ģš©ė˜ėŠ” ėŖØė°”ģ¼ ģ• ķ”Œė¦¬ģ¼€ģ“ģ…˜ 역공학 ė° ė¶„ģ„ ė„źµ¬ė“¤ģ„ ķ†µķ•©ķ•˜ģ—¬ OWASP ėŖØė°”ģ¼ ė³“ģ•ˆ ģœ„ķ˜‘ģ— ėŒ€ķ•œ ėŖØė°”ģ¼ ģ• ķ”Œė¦¬ģ¼€ģ“ģ…˜ ķ…ŒģŠ¤ķŠøė„¼ ģ§€ģ›ķ•©ė‹ˆė‹¤. ėŖ©ķ‘œėŠ” ėŖØė°”ģ¼ ģ• ķ”Œė¦¬ģ¼€ģ“ģ…˜ ź°œė°œģžģ™€ ė³“ģ•ˆ 전문가가 ģ“ ģž‘ģ—…ģ„ ė” 쉽고 ģ¹œģˆ™ķ•˜ź²Œ ģˆ˜ķ–‰ķ•  수 ģžˆė„ė” ķ•˜ėŠ” ź²ƒģž…ė‹ˆė‹¤. MARA ėŠ” @xtiankisutsa와 @iamckn에 ģ˜ķ•“ 개발 ė° ģœ ģ§€ź“€ė¦¬ė˜ź³  ģžˆģŠµė‹ˆė‹¤. 아직 개발 쓈기...

5.9AI score
SaveExploits0References14
Kitploit
Kitploit
•added 2026/09/14 5:03 p.m.•12 views

Artemis

Artemis ź°œģš” APK ģøķ”„ė¼ė„¼ 찾기 ģœ„ķ•œ ė„źµ¬ģž…ė‹ˆė‹¤. 제공: HADESSėŠ” 취약점 ė¶„ģ„, ģ‹œė‚˜ė¦¬ģ˜¤ 공격 ź³„ķš ė° ė§žģ¶¤ķ˜• 통합 예방 ķ”„ė”œģ ķŠø źµ¬ķ˜„ģ„ ķ¬ķ•Øķ•˜ėŠ” ģøķ”„ė¼ģ™€ ģ†Œķ”„ķŠøģ›Øģ–“ė„¼ 통핓 공격적 ģ‚¬ģ“ė²„ ė³“ģ•ˆ ģ„œė¹„ģŠ¤ė„¼ ģˆ˜ķ–‰ķ•©ė‹ˆė‹¤. ģš°ė¦¬ėŠ” źø°ģ—…, ģ‚°ģ—… ė° ģ—°źµ¬ģ†Œģ˜ ģ‚¬ģ“ė²„ ģœ„ķ˜‘ ģ˜ˆė°©ģ„ ģ¤‘ģ‹¬ģœ¼ė”œ ķ™œė™ģ„ źµ¬ģ„±ķ•©ė‹ˆė‹¤. ģ„¤ģ¹˜ root@kitploit: pip install -r requirements.txt python main.py 명령줄 ģ˜µģ…˜ root@kitploit: --help Display help --path Required...

5.9AI score
SaveExploits0
Kitploit
Kitploit
•added 2026/09/14 3:45 p.m.•8 views

AndroPyTool

AndroPyTool ģ—…ė°ģ“ķŠø! DroidBox ģ“ėÆøģ§€ź°€ ģˆ˜ģ •ė˜ģ—ˆģŠµė‹ˆė‹¤. ė™ģ  ė¶„ģ„ģ“ ģ“ģ œ ģž‘ė™ķ•©ė‹ˆė‹¤. Android APKģ—ģ„œ 정적 ė° ė™ģ  ķŠ¹ģ§•ģ„ ģ¶”ģ¶œķ•˜źø° ģœ„ķ•œ ė„źµ¬ģž…ė‹ˆė‹¤. DroidBox, FlowDroid, Strace, AndroGuard ė˜ėŠ” VirusTotal ė¶„ģ„ź³¼ ź°™ģ€ ģž˜ ģ•Œė ¤ģ§„ Android 앱 ė¶„ģ„ ė„źµ¬ė“¤ģ„ ź²°ķ•©ķ•©ė‹ˆė‹¤. APK ķŒŒģ¼ģ“ ķ¬ķ•Øėœ ģ†ŒģŠ¤ 디렉토리넼 ģ œź³µķ•˜ė©“ AndroPyToolģ“ ģ“ėŸ¬ķ•œ ėŖØė“  ė„źµ¬ė„¼ ģ ģš©ķ•˜ģ—¬ 사전 정적, 정적 ė° ė™ģ  ė¶„ģ„ģ„ ģˆ˜ķ–‰ķ•˜ź³  JSON ė° CSV ķ˜•ģ‹ģ˜ ķŠ¹ģ§• ķŒŒģ¼ģ„ ģƒģ„±ķ•˜ė©° ...

6AI score
SaveExploits0References1
Kitploit
Kitploit
•added 2026/09/14 3:27 p.m.•7 views

qark

Quick Android Review Kit ģ“ ė„źµ¬ėŠ” ģ†ŒģŠ¤ ģ½”ė“œ ė˜ėŠ” ķŒØķ‚¤ģ§€ėœ APKģ—ģ„œ ģ—¬ėŸ¬ ė³“ģ•ˆ ꓀련 Android ģ• ķ”Œė¦¬ģ¼€ģ“ģ…˜ ģ·Øģ•½ģ ģ„ ģ°¾ė„ė” ģ„¤ź³„ė˜ģ—ˆģŠµė‹ˆė‹¤. ė˜ķ•œ 발견된 ė§Žģ€ ģ·Øģ•½ģ ģ„ ģ•…ģš©ķ•  수 ģžˆėŠ” "Proof-of-Concept" ė°°ķ¬ ź°€ėŠ„ APK ė°/ė˜ėŠ” ADB ėŖ…ė ¹ģ„ ģƒģ„±ķ•  수 ģžˆģŠµė‹ˆė‹¤. ķ…ŒģŠ¤ķŠø ģž„ģ¹˜ė„¼ ė£ØķŒ…ķ•  ķ•„ģš”ź°€ ģ—†ģœ¼ė©°, ģ“ ė„źµ¬ėŠ” 그렇지 ģ•Šģœ¼ė©“ ģ•ˆģ „ķ•œ ģ”°ź±“ģ—ģ„œ ģ•…ģš©ė  수 ģžˆėŠ” 취약점에 ģ¤‘ģ ģ„ ė‘”ė‹ˆė‹¤. Requirements Python 2.7.13 ė° 3.6ģ—ģ„œ ķ…ŒģŠ¤ķŠøėØ OSX, Linux ė°...

5.9AI score
SaveExploits0References1
Kitploit
Kitploit
•added 2026/09/14 2:12 p.m.•10 views

YAASA

YAASA YAASA Yet Another APK Static AnalyzerėŠ” APK넼 ė¶„ģ„ķ•˜ė©° ģ¦ź±°ģ›€ģ„ 얻기 ģœ„ķ•œ ķ”„ė ˆģž„ģ›Œķ¬ģž…ė‹ˆė‹¤. ģ“ ķ”„ė”œģ ķŠøėŠ” ģ•„ėž˜ ė„źµ¬ė“¤ģ„ ģ‚¬ģš©ķ•˜ė©° Django ķ”„ė ˆģž„ģ›Œķ¬ė„¼ 기반으딜 źµ¬ģ¶•ė˜ģ—ˆģŠµė‹ˆė‹¤: APKTool: Android apk ķŒŒģ¼ ė¦¬ė²„ģŠ¤ ģ—”ģ§€ė‹ˆģ–“ė§ ė„źµ¬ AxmlParserPY: Python AxmlParser PlagueScanner: ģ˜¤ķ”ˆ ģ†ŒģŠ¤ 다중 AV ģŠ¤ģŗė„ˆ ķ”„ė ˆģž„ģ›Œķ¬ analyze/libs/threads.pyģ—ģ„œ 새딜욓 ķ•Øģˆ˜ė„¼ 추가할 수 ģžˆģŠµė‹ˆė‹¤. ģ‚¬ģš© 방법 앱 ģ‚¬ģš©ė²•ģ€ 매우 ź°„ė‹Øķ•©ė‹ˆ...

6AI score
SaveExploits0References3
Github Security Blog
Github Security Blog
•added 2026/08/18 6:01 p.m.•16 views

MobSF has SSRF port restriction bypass in assetlinks_check

Summary MobSF's Android App Link assetlinks checker validates only the manifest android:host value with validhost, but then appends the separate android:port value into the URL used for the server-side request. This bypasses the current port restriction in validhost and lets a crafted APK cause...

3CVSS5.7AI score0.00262EPSS
SaveExploits0References5Affected Software1
OSV
OSV
•added 2026/07/07 4:02 p.m.•17 views

PYSEC-2026-1675 Mobile Security Framework (MobSF) Allows Stored Cross Site Scripting (XSS) via malicious SVG Icon Upload

Vulnerable MobSF Versions: .svg This file becomes publicly accessible via the web interface at: http://127.0.0.1:8081/download/filename.svg If the SVG contains embedded JavaScript e.g., an XSS payload, accessing this URL via a browser leads to the execution of the script in the context of the Mob...

6.9CVSS5.9AI score0.00305EPSS
SaveExploits1References6
GithubExploit
GithubExploit
•added 2026/03/16 5:11 p.m.•308 views

Exploit for Race Condition in Canonical Ubuntu_Linux

Dillu-Analyzer šŸ›”ļø Dillu Analyzer — A web-based universal malwa...

9.3CVSS5.8AI score0.99945EPSS
SaveExploits142
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•15 views

EUVD-2025-13371

Malicious code in bioql PyPI...

8.6CVSS6.3AI score0.00305EPSS
SaveExploits1References4
Veracode
Veracode
•added 2025/05/12 8:21 a.m.•20 views

Cross-site Scripting (XSS)

mobsf is vulnerable to Stored Cross-Site Scripting XSS. The vulnerability is due to improper input sanitization during SVG file handling in the Android APK analysis workflow, which allows malicious scripts to be embedded in the SVG files...

8.6CVSS5.9AI score0.00305EPSS
SaveExploits1References4Affected Software1
RedhatCVE
RedhatCVE
•added 2025/05/07 6:25 p.m.•17 views

CVE-2025-46335

Mobile Security Framework MobSF is a security research platform for mobile applications in Android, iOS and Windows Mobile. A Stored Cross-Site Scripting XSS vulnerability has been identified in MobSF versions up to and including 4.3.2. The vulnerability arises from improper sanitization of...

8.6CVSS5.5AI score0.00305EPSS
SaveExploits1References1
Rows per page
Query Builder