prey-android-client

Here you will find all the source code for the current and in development releases of the Prey client for Android devices. Prey is a SaaS platform for device tracking, monitoring, data protection, and device management. Its open-source agent runs on endpoints and connects to a centralized control...

PAGASUS-PRO

██████╗ ███████╗ ██████╗ █████╗ ███████╗██╗ ██╗███████╗ ██╔══██╗██╔════╝██╔════╝ ██╔══██╗██╔════╝██║ ██║██╔════╝ ██████╔╝█████╗ ██║ ███╗███████║███████╗██║ ██║███████╗ ██╔═══╝ ██╔══╝ ██║ ██║██╔══██║╚════██║██║ ██║╚════██║ ██║ ███████╗╚██████╔╝██║ ██║███████║╚██████╔╝███████╗ ╚═╝ ╚══════╝ ╚═════╝...

nexmon

What is nexmon? Nexmon is our C-based firmware patching framework for Broadcom/Cypress WiFi chips that enables you to write your own firmware patches, for example, to enable monitor mode with radiotap headers and frame injection. Below, you find an overview what is possible with nexmon. This...

CVE-2026-0092

CVE-2026-0092 In Package Manager, there is a possible device lock controller bypass due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. NVD - CVE-2026-0092 Android...

poc-CVE-2025-38352

🚀 poc-CVE-2025-38352 - Easy Download for a Security Tool 📥 Download Now 📖 Overview This application is a proof of concept for CVE-2025-38352. It demonstrates a vulnerability in the Linux kernel's POSIX CPU timers implementation. The September 2025 Android Bulletin notes that this vulnerability ha...

Android Debug Bridge Security Auditor

A Metasploit auxiliary scanner performs read-only identification of Android Debug Bridge services exposed over TCP port 5555 and records protocol and authentication-response evidence...

PT-2026-135033

Thanks @element hq for adding me to your Security Hall of Fame 💚 Found a way to create files at arbitrary paths in Element Android matrix-android-sdk2. CVE-2026-93406 / GHSA-fr74-76wm-x6pp Advisory: https://t.co/h9KpPOtL92 Hall of Fame: https://t.co/L4gURsJ8zf...

Android ADB Network Propagator

Android ADB Network Propagator is a Metasploit auxiliary module that scans for Android devices exposing ADB over TCP port 5555, installs a supplied Meterpreter APK, and launches it...

ASB-A-368376056

In multiple locations, there is a possible method for a primary user to disable secure nfc on other full users due to insufficient isolation between Android users. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for...

Android Network Discovery and Device Profiling Tool

A Python tool that scans the local network, identifies and profiles Android devices accessible through ADB, deploys a temporary monitoring script, and generates JSON reports...

CVE-2019-2215

CVE-2019-2215 Exploit for the Bad Binder vulnerability in Android written by @wired0ut. It abuses the UAF in order to leak taskstruct, then overwrites addrlimit and escalates privileges by overwriting the id block in cred. The full flow of the research and exploitation can be found here series of...

CVE-2016-5195

CVE-2016-5195 CVE-2016-5195 dirty cow/dirtycow/dirtyc0w proof of concept for Android This repository demonstrates the vulnerability on vulnerable Android devices attached via ADB. It does not disable SELinux see https://github.com/timwr/CVE-2016-5195/issues/9 or install superuser on the device. $...

CVE-2019-2107

CVE-2019-2107 CVE-2019-2107 CVE-2019-2107 - looks scary. Still remember Stagefright and PNG bugs vulns .... With CVE-2019-2107 the decoder/codec runs under mediacodec user and with properly "crafted" video with tiles enabled - pspps-i1tilesenabledflag you can possibly do RCE. The codec affected i...

JXL_Infotainment_CVE-2025-69515

CVE-2025-69515 Attack Name 📂 Additional Details Afftected product Affected Components GNSS Receiver Module / GPS Chipset Infotainment Navigation Module Location Services Framework Attack Vector The infotainment unit can be targeted by broadcasting spoofed GPS signals using an SDR device. Because...

CVE-2024-0044-EXP

CVE-2024-0044-EXP Exploit CVE-2024-0044 Android privilege escalation to download arbitrary target app sandbox files. Usage ./CVE-2024-0044.sh Parameters Path to any local APK file Target app package name Example ./CVE-2024-0044.sh /path/to/target.apk com.target.mobile Description 1. Applicable...

CVE-2016-5195

demo1 This demo is based on https://github.com/timwr/CVE-2016-5195 make test output: user@user:/$ cd /home/user/demo1 && make test /home/user/adb/android-ndk-r21d/ndk-build NDKPROJECTPATH=. APPBUILDSCRIPT=./Android.mk APPABI=x8664 APPPLATFORM=android-23 make1: Entering directory '/home/user/demo1...

POC-CVE-2025-31931

Writeup Read it here: https://tinyhack.com/2025/11/09/cve-2025-31931-arbitrary-shared-library-loading-in-intel-itt-api-on-android-affects-opencv-4-10/...

CVE-2025-46408

CVE-2025-46408 Improper Hostname Verification in EagleEyes Lite Android Application 1. Overview Name : EagleEyesLite Version : 2.0.0 Vendor : AVTECH CWE : CWE-297: Improper Validation of Certificate with Host Mismatch CVSS : 9.8 CRITICAL Vector String : CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:...

exploit_playground

About This is where I will post analysis of Public Exploits, or some of my 1day exploits. Public exploit analysis Personally I think the best way to learn a public exploit is by understanding it line-by-line until I can understand the exploit to the fullest. I will post some of these...

CVE-2026-40000

CVE-2026-40000 A poc for CVE-2026-40000, a vulnerability in ZTE File Manager zte.com.cn.filer which allows to read arbitrary files from other apps as the privileges of this file manager How to: build the project or get the app from releases, install and open the poc, then input a file to open and...