Andromeda

Andromeda makes initial reverse engineering work of Android applications bit faster and easier. Compared to other alternatives, it's written in C/C++ and has a noticeable performance advantage. DEMO The tool is in the early development stage Building Requirements clang: apt install clang libzip:...

hooker

Hooker: Automated Dynamic Analysis of Android Applications About Hooker Functional Description Hooker is an opensource project for dynamic analyses of Android applications. This project provides various tools and applications that can be use to automatically intercept and modify any API calls mad...

CVE-2014-8609-POC

CVE-2014-8609-POC -pendingintent vulnerability Explanation of how the vulnerability works with exploitation method. It is one of the most common vulnerabilities in Android applications, and you can use it to access more vulnerabilities in a professional way. POC...

androwarn

Androwarn Otro analizador de código estático para aplicaciones Android maliciosas Descripción Androwarn es una herramienta cuyo objetivo principal es detectar y advertir al usuario sobre posibles comportamientos maliciosos desarrollados por una aplicación Android. La detección se realiza mediante...

How we found 24 Android vulnerabilities using our open source AI security agent

With the rise of AI in the security space, our team created the GitHub Security Lab Taskflow Agent as a way for security researchers to easily automate, package, and share the AI prompts and workflows that they find effective for their work. In this blog post, I'll share how I created auditing...

Do Privacy Policies Match with the Logs? an Empirical Study of Privacy Disclosure in Android Application Logs

Privacy policies are intended to inform users about how software systems collect and handle data, yet they often remain vague or incomplete. This paper presents an empirical study of patterns in log-related statements within privacy policies and their alignment with privacy disclosures observed i...

CVE-2023-25749

Android applications with unpatched vulnerabilities can be launched from a browser using Intents, exposing users to these vulnerabilities. Firefox will now confirm with users that they want to launch an external application before doing so. This bug only affects Firefox for Android. Other version...

CVE-2020-12856

OpenTrace, as used in COVIDSafe through v1.0.17, TraceTogether, ABTraceTogether, and other applications on iOS and Android, allows remote attackers to conduct long-term re-identification attacks and possibly have unspecified other impact, because of how Bluetooth is used...

EUVD-2012-2621

Malware in sbrugna...

EUVD-2011-4782

Malware in sbrugna...

EUVD-2014-0833

Malware in sbrugna...

EUVD-2014-0836

Malware in sbrugna...

EUVD-2020-4310

Malware in sbrugna...

EUVD-2014-9107

Malware in sbrugna...

EUVD-2017-2545

Malware in sbrugna...

EUVD-2020-1761

Malware in sbrugna...

EUVD-2024-35236

Malicious code in bioql PyPI...

EUVD-2024-1332

Malicious code in bioql PyPI...

EUVD-2023-29656

Malicious code in bioql PyPI...

CVE-2012-5179

The Boat Browser application before 4.2 and Boat Browser Mini application before 3.9 for Android do not properly implement the WebView class, which allows attackers to obtain sensitive information via a crafted application...