72 matches found
YAASA
YAASA YAASA Yet Another APK Static Analyzer è un framework per divertirsi analizzando APK. Il progetto utilizza i seguenti strumenti ed è basato sul framework Django: APKTool: Uno strumento per il reverse engineering dei file apk Android AxmlParserPY: AxmlParser in Python PlagueScanner: Framework...
CVE-2024-21633
MobSF Remote-Codeausführung via CVE-2024-21633 Ich habe einen beliebigen Dateischreibvorgang in apktool gefunden und über GitHub Security Advisory gemeldet. Mir war bewusst, dass viele Projekte auf apktool angewiesen oder davon abhängig waren, aber nach der Veröffentlichung des Advisories und dem...
Diggy
Diggy Diggy può estrarre endpoint/URL da file apk. Salva il risultato in un file txt per ulteriori elaborazioni. Dipendenze apktool Utilizzo root@kitploit: ./diggy.sh /path/to/apk/file.apk Puoi anche installarlo per un accesso più facile eseguendo install.sh Dopodiché, sarai in grado di eseguire...
PulseAPK
PulseAPK 🌍 Lingue English | Deutsch | Español | Français | עברית | 한국어 | Беларуская | Suomi | Latviešu | Eesti | Lietuvių | Čeština | Slovenčina | Magyar | العربية | Português | Русский | Українська | 中文 💡 Cerchi un'alternativa multipiattaforma? Scarica PulseAPK Core qui:...
Apkatshu
Apkatshu Apkatshu è uno strumento per estrarre URL, email, indirizzi IP e dati interessanti da file APK root@kitploit: Apkatshu : tool written in bash/python for extracting urls, emails, ip addresses, and interesting data from APK files. The user can choose either JADX or APKTOOL for...
NinjaDroid
NinjaDroid NinjaDroid è un semplice strumento per il reverse engineering di pacchetti APK Android. Pubblicato su: https://snapcraft.io/ninjadroidshell $ snap install ninjadroid --channel=beta root@kitploit: Panoramica NinjaDroid utilizza AXMLParser insieme a una serie di script Python basati su...
Apktool
Apktool Dies ist das Repository für Apktool. Die Website befindet sich im Repositoryapktool.org. Apktool ist ein Tool zum Reverse Engineering von Drittanbieter-, geschlossenen, binären Android-Apps. Es kann Ressourcen nahezu in die ursprüngliche Form dekodieren und nach einigen Änderungen...
apk.sh
🕹️ apk.sh apk.sh è uno script Bash che semplifica il reverse engineering delle app Android, automatizzando alcune operazioni ripetitive come l'estrazione, la decodifica, la ricostruzione e l'applicazione di patch a un APK. Caratteristiche apk.sh utilizza fondamentalmente apktool per disassemblare,...
backdoor-apk
backdoor-apk backdoor-apk is a shell script that simplifies the process of adding a backdoor to any Android APK file. Users of this shell script should have working knowledge of Linux, Bash, Metasploit, Apktool, the Android SDK, smali, etc. This shell script is provided as-is without warranty of...
mhf
Mobile Helper Framework is a tool that automates the process of identifying the framework/technology used to create a mobile application. Additionally, it assists in finding sensitive information or provides suggestions for working with the identified platform. How work? The tool searches for fil...
kwetza
Introduction By Chris Le Roy @brompwnie [email protected] Kwetza is a tool that allows you to infect an existing Android application with a Meterpreter payload. What does it do? Kwetza infects an existing Android application with either custom or default payload templates to avoid detection ...
bytecode-viewer
Bytecode Viewer Bytecode Viewer - a lightweight user-friendly Java/Android Bytecode Viewer, Decompiler & More. New Features Jump to Declaration Draggable tabs Patched CVE-2022-21675 Make sure to upgrade to v2.11.X Dark mode by default with multiple themes Translated into over 30 languages...
droidlysis
DroidLysis DroidLysis is a pre-analysis tool for Android apps : it performs repetitive and boring tasks we'd typically do at the beginning of any reverse engineering. It disassembles the Android sample, organizes output in directories, and searches for suspicious spots in the code to look at. The...
apk.sh
🕹️ apk.sh apk.sh is a Bash script that makes reverse engineering Android apps easier, automating some repetitive tasks like pulling, decoding, rebuilding and patching an APK. Features apk.sh basically uses apktool to disassemble, decode and rebuild resources and some bash to automate the frida...
Obfuscapk
!WICHTIG Dieses Projekt ist archiviert und wird nicht mehr weiterentwickelt. Einige der häufigsten Fragen werden in der FAQ und Fehlerbehebung beantwortet. Ein Black-Box-Verschleierungswerkzeug für Android-Apps. Obfuscapk ist ein modulares Python-Tool zur Verschleierung von Android-Apps, ohne das...
viper
This repository is archived and development of Viper 1.x is discontinued. A full refactor of the project started withViper 2. Viper is a binary analysis and management framework. Its fundamental objective is to provide a solution to easily organize your collection of malware and exploit samples a...
Exploit for Path Traversal in Apktool
CVE-2026-39973-PoC This is a small C apk file builder for CV...
Linux Distros Unpatched Vulnerability : CVE-2026-39973
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Apktool is a tool for reverse engineering Android APK files. In versions 3.0.0 and 3.0.1, a path traversal vulnerability in...
Apktool: Path Traversal to Arbitrary File Write
A path traversal vulnerability in brut/androlib/res/decoder/ResFileDecoder.java allows a maliciously crafted APK to write arbitrary files to the filesystem during standard decoding apktool d. This is a security regression introduced in commit e10a045 PR 4041, December 12, 2025, which removed the...
