BlackDex

BlackDex BlackDex is an Android unpack tool, it supports Android 5.012 and need not rely to any environment. BlackDex can run on any Android mobile phone or emulator, you can unpack APK File in several seconds. Declaration This project is not directed against any encryption, it does not deal with...

frameworks_base_AOSP10_r33_CVE-2020-0203

This repository does not have a README...

platform_frameworks_base_CVE-2023-21288

This repository does not have a README...

AndBug

======================================= AndBug -- A Scriptable Android Debugger AndBug is a debugger targeting the Android platform's Dalvik virtual machine intended for reverse engineers and developers. It uses the same interfaces as Android's Eclipse debugging plugin, the Java Debug Wire Protoc...

CVE-2019-9465

CVE-2019-9465 This is a demo Android application for CVE-2019-9465...

badspin

Bad Spin: Android Binder LPE Author: Moshe Kol Privilege escalation exploit from unstrustedapp for Android Binder vulnerability CVE-2022-20421. The vulnerability is patched on Android's Security Bulletin of October 2022. The exploit works on devices running kernel versions 5.4.x and 5.10.x, and i...

frameworks_base_AOSP10_r33_CVE-2020-0401

This repository does not have a README...

skylift

SkyLift SkyLift is an experimental Wi-Fi/BT geolocation spoofing device that uses the ESP8266 or ESP32 boards to broadcast Wi-Fi beacon frames or BT advertisements that emulate the wireless infrastructure from a remote/target location. The above example shows a successful georelocation to Peter...

frameworks_base_AOSP10_r33_CVE-2023-21246

This repository does not have a README...

CVE-2019-2215

Bad-Binder CVE-2019-2215 The following is the exploit for the bad binder CVE-2019-2215 vulnz that was tested on an x86 Emulator. The aim was to abuse the UAF vulnerability to trigger an AAR primitive to leak kernel addresses and use an AAW primitive to overwrite addrlimit leading to a Kernel Read...

system_media_AOSP10_r33_CVE-2020-0458

This repository does not have a README...

CVE-2021-36808

CVE-2021-36808 A local attacker could bypass the app password using a race condition in Sophos Secure Workspace for Android before version 9.7.3115. Advisory: https://www.sophos.com/en-us/security-advisories/sophos-sa-20211029-ssw-pw-bypass Write Up:...

CVE-2017-13286

CVE-2017-13286 CVE-2017-13286 Poccannot use All resources are sourced from this article https://bbs.kanxue.com/thread-268506.htm The main cause of this vulnerability is the inconsistency between reading and writing of Parcel objects. It can be traced back to the following code public void...

CVE-2020-0418

CVE-2020-0418 Android Studio project to generate the APKs used for the exploit. To generate version 1 of the APK, just leave the indicated lines commented in AndroidManifest.xml To generate version 2 of the APK, just uncomment them Demo at https://www.youtube.com/watch?v=3qPJoiuWhD0...

awesome-android-security

Awesome-Android-Security Table of Contents Blog How To's Papers Books Trainings Tools Static Analysis Tools Dynamic Analysis Tools Online APK Analyzers Online APK Decompiler Forensic Analysis Tools Labs Talks Misc Bug Bounty & Writeups Cheat Sheet Checklist Bug Bounty Report Blogs 1-click Exploit...

CVE-2024-0044

CVE 2024 0044 CVE-2024-0044, identified in the createSessionInternal function of the PackageInstallerService.java file, is a high-severity vulnerability affecting Android versions 12 and 13. This vulnerability allows an attacker to perform a "run-as any app" attack, leading to local escalation of...

qu1ckr00t

qu1ckr00t A PoC application demonstrating the power of an Android kernel arbitrary R/W CVE-2019-2215. Writeup: https://hernan.de/blog/2019/10/15/tailoring-cve-2019-2215-to-achieve-root/ Qu1ckR00t is a PROOF OF CONCEPT. It should NOT be used on your personal device with valuable userdata. It has...

android-app

ProtonVPN for Android Copyright c 2019 Proton AG Download !Get it on GitHubhttps://assets.kitploit.com/production/public/readmes/50914/e73aa9f910b0d8c3484bda6ecf61bb21d05d928d646a676...

CVE-2026-0073

ADB TLS Auth Bypass Exploit CVE-2026-0073 An automated network scanner and exploitation tool for CVE-2026-0073 , a vulnerability in the Android Debug Bridge daemon adbd that allows unauthenticated Remote Code Execution RCE and interactive shell access via Wireless Debugging. This tool is...

i2pd

Note: i2pd for Android can be found in thei2pd-android repository and with a Qt GUI in the i2pd-qt repository. For macOS, a GUI version can be found in the gui-i2pd repository. i2pd Русская версия i2pd I2P Daemon is a full-featured C++ implementation of I2P client. I2P Invisible Internet Protocol...