frida-ssl-bypass

🔓 Frida SSL Pinning Bypass Universal SSL/TLS Certificate Pinning Bypass for Android Author: Danieldev GitHub: @danieldev23 | Telegram: @zadevz A comprehensive Frida toolkit that defeats SSL pinning on any Android app — covering both Java and Native layers, from standard OkHttp pinning to Facebook...

CVE-2026-77875

The application protects access through its calculator-style vault passcode, but the stored data is not bound to that authentication boundary. A local actor who can access shared external storage, such as through an authorized non-root ADB shell or another local file-reading context with suitable...

kavanoz

🫙 kavanoz 🫙 Kavanoz frasco en turco es una herramienta para desempaquetar estáticamente malware bancario común de Android. ¿Alguna vez quisiste obtener el payload de un malware empaquetado sin ejecutar un emulador de Android? Yo tampoco : Pero aquí tienes una herramienta de todos modos. 👀...

CVE-2015-1474_poc

Este código pretende ser una prueba de concepto PoC para CVE-2015-1474. El código se basa en el código del comando screencap, pero genera un parcel malicioso que provoca un fallo en surfaceflinger cuando se deserializa. Más información en...

Chrome-Forensic_CVE-2024-0044

🔍 Chrome Forense - CVE-2024-0044 Una herramienta robusta de forense digital para extraer y analizar artefactos de Google Chrome desde dispositivos Android Características • Instalación • Uso • Documentación 👤 Información del Autor Autor: JackTekno GitHub: github.com/JackTekno 📋 Resumen Esta...

AOSP-DownloadProviderHijacker

AOSP-DownloadProviderHijacker PoC que explota la omisión de permisos en el Proveedor de Descargas de Android CVE-2018-9468 Aviso de Seguridad https://ioactive.com/wp-content/uploads/2019/04/IOActive-Security-Advisory-Androids-Download-Provider-Permission-Bypass-CVE-2018-9468.pdf Más Información...

CVE-2025-50110

CVE-2025-50110 Cleartext Transmission of Sensitive Information in EagleEyes Lite Android Application 1. Overview Name : EagleEyesLite Version : 2.0.0 Vendor : AVTECH CWE : CWE-319: Cleartext Transmission of Sensitive Information, CWE-598: Use of GET Request Method With Sensitive Query Strings CVS...

BLACKHAT_Asia2023

BLACKHATAsia2023 Solo acerca de PDF público de BLACKHAT USA2022 Lista de archivos, busca lo que te interese. root@kitploit: BLACKHATAsia2023 ├── AS-23-Babkin-firmWar-An-Imminent-Threat-to-the-Foundation-of-Computing.pdf ├── AS-23-Bai-Stealthy-Sensitive-Information-Collection-from-Android-Apps.pdf...

permhash

Permhash es un marco extensible para calcular el hash de los permisos declarados aplicados a las extensiones de navegador basadas en Chromium y a los APK, lo que permite agrupamiento, búsqueda y pivoteo similar al hash de importaciones y al hash de cabeceras rich. Permhash actualmente es capaz de...

CVE-2026-68928

Acode is a powerful text and code editor for Android. From 1.11.6 until 1.12.7, com.foxdebug.acode.rk.exec.terminal.TerminalService is declared as an exported service in src/plugins/terminal/plugin.xml without a binding permission, and src/plugins/terminal/src/android/TerminalService.java does no...

CVE-2026-68928 Acode: Exported TerminalService (bundled terminal plugin) lets any installed app execute arbitrary shell commands as Acode

Acode is a powerful text and code editor for Android. From 1.11.6 until 1.12.7, com.foxdebug.acode.rk.exec.terminal.TerminalService is declared as an exported service in src/plugins/terminal/plugin.xml without a binding permission, and src/plugins/terminal/src/android/TerminalService.java does no...

CVE-2026-68928

Acode is a text and code editor for Android. In versions 1.11.6 through 1.12.7 , the bundled terminal plugin's TerminalService is declared as an exported service without a binding permission, and the service implementation does not verify the calling application. Any locally installed app can bin...

EUVD-2026-83444

Acode is a powerful text and code editor for Android. From 1.11.6 until 1.12.7, com.foxdebug.acode.rk.exec.terminal.TerminalService is declared as an exported service in src/plugins/terminal/plugin.xml without a binding permission, and src/plugins/terminal/src/android/TerminalService.java does no...

CVE-2026-68928 Acode: Exported TerminalService (bundled terminal plugin) lets any installed app execute arbitrary shell commands as Acode

Acode is a powerful text and code editor for Android. From 1.11.6 until 1.12.7, com.foxdebug.acode.rk.exec.terminal.TerminalService is declared as an exported service in src/plugins/terminal/plugin.xml without a binding permission, and src/plugins/terminal/src/android/TerminalService.java does no...

CVE-2026-68928 Acode: Exported TerminalService (bundled terminal plugin) lets any installed app execute arbitrary shell commands as Acode

Acode is a powerful text and code editor for Android. From 1.11.6 until 1.12.7, com.foxdebug.acode.rk.exec.terminal.TerminalService is declared as an exported service in src/plugins/terminal/plugin.xml without a binding permission, and src/plugins/terminal/src/android/TerminalService.java does no...

CVE-2026-43499-S26

CVE-2026-43499 — Android GKI 6.12 pselect / configfs kernel exploit A Linux kernel exploit for the Android GKI 6.12 line Samsung and Pixel devices targeting CVE-2026-43499 : a buggy removewaiter rollback in rtmutexstartproxylock that uses current instead of waiter::task, leaving a waiter's...

CVE-2026-0049

CVE-2026-0049 — DoS de cero clics en Android DNG desbordamiento de suma en MapTable de dngsdk Material completo de investigación y PoC. Análisis narrativo: 🇮🇹BLOG.md · 🇬🇧BLOG.en.md. Bug : desbordamiento de enteros sin signo en fAreaSpec.Plane + fAreaSpec.Planes en dngopcodeMapTable::ProcessArea...

ARTful

Descripción ARTful es una biblioteca nativa de Android que permite a los desarrolladores modificar el Android Runtime ART en Android 13 y 14. Con esta herramienta, puedes cambiar dinámicamente la implementación de cualquier método estático dentro de tu aplicación o del Android Framework para...

ACF

Android Connections Forensics This software enables a forensic investigator to map each connection to its originating process. It doesn't require root privliges on the system, but do require adb & USB debugging. Supported OS ACF works currently only on Linux Ubuntu 14.04 Installation root@kitploi...

android_kernel_oneplus_avicii

OnePlus Nord avicii NeverSettle Kernel Source OnePlus Nord codename:- avicii is the first upper mid-range non-flagship smartphone from OnePlus Technology Co., Ltd. released in the year 2020. The phone is available in 2 variants based on region: AC2001 India & AC2003 Europe & Global Features|...