magisk-renef

MagiskRenef A Magisk / KernelSU / APatch module that automatically packages and runs renef — a dynamic instrumentation toolkit for Android. Inspired by magisk-frida. Requirements Rooted Android device Magisk / KernelSU / KernelSU Next / APatch ARM64 only — renef only supports ARM64 Android Androi...

patching

Patching - Interactive Binary Patching for IDA Pro Overview Patching assembly code to change the behavior of an existing program is not uncommon in malware analysis, software reverse engineering, and broader domains of security research. This project extends the popular IDA Pro disassembler to...

machscope

MachScope A native macOS binary analysis tool providing Mach-O parsing, ARM64 disassembly, and process debugging. Built entirely in Swift with zero external dependencies. Features Feature| Description ---|--- Mach-O Parsing| Headers, segments, sections, symbols, dylibs, strings Code Signatures|...

USN-8871-1: Linux kernel (Raspberry Pi) vulnerabilities

It was discovered that some Arm processors could complete a broadcast translation lookaside buffer TLB invalidation before memory writes made through the invalidated translation were globally observed. A local attacker could possibly use this to write to memory after permission to do so had been...

lfi

Lightweight Fault Isolation LFI Welcome to the top-level repository for the Lightweight Fault Isolation LFI project. What is LFI? LFI is a system for sandboxing native code. Like WebAssembly and Native Client, LFI isolates sandboxed code in-process i.e., in the same address space as a host...

ITScape

ITScape: Guest-to-Host Escape in KVM/arm64 Abstract This document describes the ITScape CVE-2026-46316 vulnerability reported and patched by Hyunwoo Kim @v4bel. It is a KVM escape vulnerability that lets a guest escape to the host in a KVM/arm64 environment and run commands on the host with kerne...

itscape

ITScape — Linux KVM/arm64 guest-to-host escape tracking site Source for the ITScape patch-status tracker: a single-page site recording which distributions have shipped a fix for the KVM/arm64 guest-to-host escape in the Linux kernel. Where the facts live Everything about the bug — CVE IDs, affect...

VMPacker

🛡️ VMPacker ARM64 ELF Virtual Machine Protection System Translate ARM64 native instructions into custom VM bytecode for function-level code protection 🇨🇳 中文文档 • Features • Architecture • Quick Start • Usage • License Overview VMPacker is a Virtual Machine Protection VMP system for ARM64 AArch64...

metasploit_in_termux

Metasploit Framework 6 in Termux How to Install Before In order to have updated Termux: Purge all data of Termux in Android Settings Uninstall and reinstall latest Termux version from F-Droid Version on Play Store is outdated Then launch Termux to initialization, close it force stop, not swap...

r2frida

r2frida Radare2 and Frida better together Description Self-contained plugin for radare2 that ships frida and allows to instrument local or remote processes using r2 commands instead but not limited to Frida scripts. The radare project provides a complete toolchain for reverse engineering, it's...

oppo-ghostlock

oppo-ghostlock GhostLock CVE-2026-43499 — OPPO Find N2 Linux Kernel Privilege Escalation Research Project Overview GhostLock CVE-2026-43499 is a kernel stack UAF vulnerability affecting Linux 2.6.39 through 7.1-rc1, triggered via a FUTEXCMPREQUEUEPI race condition. This project ports the x8664...

chronomaly

Chronomaly Chronomaly is a kernel exploit for the Android / Linux kernel using CVE-2025-38352. The exploit was written specifically for Linux kernel v5.10.157, but should work against all vulnerable v5.10.x kernels, as it does not require any specific kernel text offsets to work. I covered the...

CVE-2026-43499-Poc-Analysis

CVE-2026-43499 Android arm64 Local Privilege Escalation Adaptation English | 中文 This is an Android arm64 local privilege escalation adaptation project for CVE-2026-43499. The project generates a target-specific target.h from the target device's boot.img and profile, then builds the corresponding...

cve-2026-64560-a16

CVE-2026-64560 — Toolchain + Multi-Target Port CVE-2026-64560 is a use-after-free in the Linux kernel posix-cpu-timers local unprivileged race, CVSS 3.1 = 7.8; unfixed in 6.6.118, fixed only in 6.6.147. This repository does two things: it turns the upstream toolchain, which can only be driven by ...

CVE-2024-7965

CVE-2024-7965 This repository contains PoC for CVE-2024-7965. This is the vulnerability in the V8 that occurs only within ARM64. Acknowledgments Yuri Pazdnikov — Junior Vulnerability Researcher @ BI.ZONE...

voltron

Voltron Voltron is an extensible debugger UI toolkit written in Python. It aims to improve the user experience of various debuggers LLDB, GDB, VDB and WinDbg by enabling the attachment of utility views that can retrieve and display data from the debugger host. By running these views in other TTYs...

patching

Patching - IDA Pro를 위한 대화형 바이너리 패칭 개요 기존 프로그램의 동작을 변경하기 위해 어셈블리 코드를 패칭하는 것은 악성코드 분석, 소프트웨어 리버스 엔지니어링 및 보안 연구의 더 넓은 영역에서 드문 일이 아닙니다. 이 프로젝트는 인기 있는 IDA Pro 디스어셈블러를 확장하여 빠른 반복을 위해 설계된 보다 강력한 대화형 바이너리 패칭 워크플로우를 만듭니다. 이 프로젝트는 현재 널리 사용되는 Keystone Engine의 작은 포크를 기반으로 하며, x86/x64 및 Arm/Arm64 패칭을 지원하고 향후...

blutter

Blutter Flutter 모바일 애플리케이션 리버스 엔지니어링 도구 Dart AOT 런타임 컴파일 방식 현재 이 도구는 Android libapp.so arm64 전용만 지원합니다. 또한 최신 Dart 버전에서만 작동합니다. 높은 우선순위의 누락된 기능은 TODO를 참조하세요. 환경 설정 이 애플리케이션은 C++20 Formatting 라이브러리를 사용합니다. g++=13, Clang=16과 같은 매우 최신의 C++ 컴파일러가 필요합니다. Linux OS 사용을 권장합니다 Debian sid/trixie에서만 테스트됨. 설...

cryptomator

Cryptomator をサポートする Cryptomator は、開発に多大な労力を要するにもかかわらず、オープンソースプロジェクトとして無償で提供されているため、寄付に依存しています。もし今後の開発にもご興味があれば、以下の方法でサポートしていただけます： Cryptomator のウェブサイトからの一回限りまたは継続的な寄付。 Cryptomator のスポンサーサイトからスポンサーになる。 ゴールドスポンサー --- シルバースポンサー | | ---|---|--- スペシャルシャウトアウト ARM64 ビルド向けの継続的インテグレーションのホスティングは MacStadium...

magisk-renef

MagiskRenef Magisk / KernelSU / APatch モジュールで、renef（Android向け動的インストルメンテーションツールキット）を自動的にパッケージ化して実行します。 magisk-frida に着想を得ています。 要件 ルート化されたAndroidデバイス（Magisk / KernelSU / KernelSU Next / APatch） ARM64のみ — renefはARM64 Androidのみをサポート Android 10以上を推奨 インストール 1. リリース から最新の MagiskRenef-version.zip をダウンロード...