828 matches found
Downloads Resources over HTTP
Overview apk-parser is a tool to extract Android Manifest info from an APK file. apk-parser versions below 0.1.6 download binary resources over HTTP, which leaves it vulnerable to MITM attacks. It may be possible to cause remote code execution RCE by swapping out the requested binary with an...
Fuzzing Android: tap the Android system components components of vulnerability-vulnerability warning-the black bar safety net
Full-text overview This article focuses on one can be used to find Android system components in the different types of vulnerability fuzzing method. This article describes a General purpose vulnerability discovery method, and he is how applications on Android platform. The following is a has been...
Spade - Android APK Backdoor Embedder
Quick and handy APK backdoor embedder with metasploit android payloads. Requirements metasploit Installation and execution Then you can download smap by cloning the Git repository: git clone https://github.com/suraj-root/spade.git cd spade/ ./spade.py Demo video Video YouTube: Download Spade...
New Trojan SpyNote Installs Backdoor on Android Devices
A new Android Trojan called SpyNote has been identified by researchers who warn that attacks are forthcoming. The Trojan, found by Palo Alto Networks’ Unit 42 team, has not been spotted in any active campaigns, but it is now widely available on the Dark Web and that it will soon be used in a wave...
Malicious Pokémon Go Features Backdoor, RAT
Researchers are warning would-be Pokémon Trainers that a malicious, backdoored version of the massively popular game Pokémon Go could be making the rounds soon. An APK Android application package file of the game has been rigged with a remote access tool RAT called Droidjack that if installed,...
MARA Framework - Mobile Application Reverse engineering and Analysis Framework
MARA is a M obile A pplication R everse engineering and A nalysis Framework. It is a tool that puts together commonly used mobile application reverse engineering tools, in order to make the task or reverse engineering and analysis easier and friendly to mobile application developers and security...
Pornhub: (Pornhub & Youporn & Brazzers ANDROID APP) : Upload Malicious APK / Overrite Existing APK / Android BackOffice Access
The researcher discovered weak credentials protecting an Android APK admin page...
Backdoor Android APK: backdoor-apk
backdoor-apk is a shell script that simplifies the process of adding a backdoor to any Android APK file. Users of this shell script should have working knowledge of Linux, Bash, Metasploit, Apktool, the Android SDK, smali, etc. This shell script is provided as-is without warranty of any kind and ...
Apk Extractor - MIT license, WebView code execution vulnerabilities
HackApp vulnerability scanner discovered that application Apk Extractor published at the 'play' market has multiple vulnerabilities...
Bluetooth App Sender APK - Dangerous filesystem permissions, WebView code execution vulnerabilities
HackApp vulnerability scanner discovered that application Bluetooth App Sender APK published at the 'play' market has multiple vulnerabilities...
APK Installer - External URLs, SD-card access, Unsafe deleting vulnerabilities
HackApp vulnerability scanner discovered that application APK Installer published at the 'play' market has multiple vulnerabilities...
Installer - Install APK - Customized SSL, WebView SSL handling enabled, WebView code execution vulnerabilities
HackApp vulnerability scanner discovered that application Installer - Install APK published at the 'play' market has multiple vulnerabilities...
APK Linux - Possible privilege escalation, Suspicious files vulnerabilities
HackApp vulnerability scanner discovered that application APK Linux published at the 'play' market has multiple vulnerabilities...
Apk Installer - External URLs, Unsafe deleting, WebView JavaScript enabled vulnerabilities
HackApp vulnerability scanner discovered that application Apk Installer published at the 'play' market has multiple vulnerabilities...
SmartWatchBT4.0.apk - Exported ContentProvider, Exported components, External URLs vulnerabilities
HackApp vulnerability scanner discovered that application SmartWatchBT4.0.apk published at the 'play' market has multiple vulnerabilities...
Apk Extractor - Dangerous filesystem permissions, WebView code execution vulnerabilities
HackApp vulnerability scanner discovered that application Apk Extractor published at the 'play' market has multiple vulnerabilities...
Lobotomy - Android Reverse Engineering Framework & Toolkit
Lobotomy is an Android security toolkit that will automate different Android assessments and reverse engineering tasks. The goal of the Lobotomy toolkit is to provide a console environment, which would allow a user to load their target Android APK once, then have all the necessary tools without...
The IOT era rights abuse of the vulnerability of attack and Defense-bug warning-the black bar safety net
Permissions for the abuse of Vulnerability in addition to on android Real machine debugging scenario other than there are many other scenarios. In the field of Internet of things applications is particularly extensive. For example: a smart TV can be allowed remotely through the network debugging,...
3 6 0 Cheap Shot: a wormhole vulnerability“DimensionDoor”exposure-vulnerability warning-the black bar safety net
3 6 0 mobile assistant security team about this response: 1, The paper analysis the 3. 1. 5 5 3 6 0 mobile assistant 2 0 1 4 year-old version, the current official version and the beta version are not present the remote port is a security risk. 2, the 3 6 0 mobile assistant APK download will pop-...
MobSF (Mobile Security Framework) - Mobile (Android/iOS) Automated Pen-Testing Framework
Mobile Security Framework MobSF is an intelligent, all-in-one open source mobile application Android/iOS automated pen-testing framework capable of performing static and dynamic analysis. We've been depending on multiple tools to carry out reversing, decoding, debugging, code review, and pen-test...