CVE-2026-0047-poc

CVE-2026-0047: Отсутствие проверки разрешений в ActivityManagerService Куча битмапов, украденных из каждого работающего приложения — ноль разрешений, ноль взаимодействия с пользователем. Отсутствие проверки enforceCallingOrSelfPermissionDUMP в ActivityManagerService.dumpBitmapsProto позволяет...

Nanobrok

Nanobrok Web Service Web Service write in Python for control and protect your android device remotely. The official app can be found on the PlayStore: NanobrokPro Nanobrok Community Overview Nanobrok-Server is powerful opensource webservice for control and protect your android device, written in...

AOSP-DownloadProviderDbDumperSQLiLimit

AOSP-DownloadProviderDbDumperSQLiLimit PoC Exploiting SQL Injection in Android's Download Provider in Sort Parameter CVE-2019-2196 Security Advisory Android AOSP Download Provider SQL Injection in Query Sort Parameter CVE-2019-2196 Demo...

cve-2026-28576

CVE-2026-28576: Android Contacts Provider SQL 인젝션 및 체계적 유출 개요 CVE-2026-28576 은 Android Contacts Provider 프레임워크ContactsProvider2.queryLocal의 치명적인 접근 제어 취약점입니다. 이 결함은 선언된 권한이 전혀 없는 로컬에 설치된 비특권 애플리케이션이 전체 이름, 전화번호, 우편 주소, 이메일 주소를 포함한 기기의 전체 연락처 데이터베이스를 유출할 수 있게 합니다. 속성| 값 ---|--- CVE ID|...

APKHunt

APKHunt | OWASP MASVS Static Analyzer APKHunt is a comprehensive static code analysis tool for Android apps that is based on the OWASP MASVS framework. Although APKHunt is intended primarily for mobile app developers and security testers, it can be used by anyone to identify and address potential...

android_autorooter

Android Autorooter This is just a mental note more than anything to further explore the posibilities of the work done here: https://rtx.meta.security/exploitation/2024/03/04/Android-run-as-forgery.html...

scrounger

Описание Scrounger — человек, который одалживает у других или живёт за их счёт. Нет лучшего описания для этого инструмента по двум основным причинам: первая — этот инструмент черпает вдохновение из многих других уже опубликованных инструментов, вторая — он живёт за счёт уязвимостей мобильных...

scrounger

Description Scrounger - a person who borrows from or lives off others. There is no better description for this tool for two main reasons, the first is because this tool takes inspiration from many other tools that have already been published, the second reason is because it lives off mobile...

simplify

Simplify Generic Android Deobfuscator Simplify virtually executes an app to understand its behavior and then tries to optimize the code so that it behaves identically but is easier for a human to understand. Each optimization type is simple and generic, so it doesn't matter what the specific type...

CVE-2022-20474

CVE-2022-20474 Анализ — Self-changed Bundle в LazyValue Предисловие Пожалуйста, прочтите это предупреждение: перед чтением этой статьи следует иметь базовое представление об уязвимостях, связанных с несоответствием Bundle. Если вы еще не читали следующие справочные материалы, рекомендуется сначал...

Blackash-CVE-2025-48593

🚨 CVE-2025-48593 Zero-Click Remote Code Execution in Android System 🚨 "A single malicious packet can own your device." — Android Security Team, Nov 2025 🎯 Vulnerability Snapshot Attribute| Details ---|--- CVE ID| CVE-2025-48593 Severity| 🔴 Critical RCE, Zero-Click CVSS Est.| 9.8 Pending NVD...

frameworks_native_AOSP10_r33_ShaikUsaf-frameworks_native_AOSP10_r33_CVE-2020-0226

This repository does not have a README...

frameworks_native_AOSP-10_r33_CVE-2023-21094

This repository does not have a README...

CVE-2026-43499-Poc-Analysis

CVE-2026-43499 Android arm64 локальное повышение привилегий — адаптация English | 中文 Это проект адаптации локального повышения привилегий для Android arm64, использующий CVE-2026-43499. Проект генерирует target.h на основе boot.img целевого устройства и информации из profile, после чего компилиру...

CVE-2019-2107

CVE-2019-2107 CVE-2019-2107 CVE-2019-2107 - looks scary. Still remember Stagefright and PNG bugs vulns .... With CVE-2019-2107 the decoder/codec runs under mediacodec user and with properly "crafted" video with tiles enabled - pspps-i1tilesenabledflag you can possibly do RCE. The codec affected i...

CVE-2019-2107

CVE-2019-2107 CVE-2019-2107 CVE-2019-2107 - looks scary. Still remember Stagefright and PNG bugs vulns .... With CVE-2019-2107 the decoder/codec runs under mediacodec user and with properly "crafted" video with tiles enabled - pspps-i1tilesenabledflag you can possibly do RCE. The codec affected i...

cve_2024_0044

CVE 2024 0044 CVE-2024-0044, identified in the createSessionInternal function of the PackageInstallerService.java file, is a high-severity vulnerability affecting Android versions 12 and 13. This vulnerability allows an attacker to perform a "run-as any app" attack, leading to local escalation of...

frameworks_base_AOSP_06_r22_CVE-2022-20338

This repository does not have a README...

CVE-2017-0785

CVE-2017-0785 PoC This is just a personal study based on the Android information leak vulnerability released by Armis. Further reading: https://www.facebook.com/khelfatni To run, be sure to have pybluez and pwntools installed. root@kitploit: sudo apt-get install bluetooth libbluetooth-dev sudo pi...

CVE-2024-31317-PoC-Deployer

CVE-2024-31317-PoC-Deployer A deployment tool for CVE-2024-31317 proof-of-concept exploit targeting Android 9 through 13 devices. 📝 Project Description CVE-2024-31317-PoC-Deployer is an automated deployment script for quickly generating and configuring all the files required for exploiting...