ddc

ddc — DEX → Java 反编译器（Rust） English | 简体中文 ddc 把 Android DEX 字节码反编译回可读的 Java —— 真实 App 级别的速度、 可以像数据库一样查询，并且经过 javac 验证 ：七个真实 APK 共 909,689 个输出文件全部零语法错误。 特性 快 —— 226MB/20 dex 的 weibo（9.8 万个类）全量反编译 5.0s ， 398MB 的飞书 5.5s ；病态类跑在带截止期的受控线程上，不会拖死 整个运行。 能编译 —— 七个基准...

EUVD-2024-30446

Malicious code in bioql PyPI...

CVE-2024-32653 Insufficient input filtering of "package name" allows command execution in the device with shell privileges

jadx is a Dex to Java decompiler. Prior to version 1.5.0, the package name is not filtered before concatenation. This can be exploited to inject arbitrary code into the package name. The vulnerability allows an attacker to execute commands with shell privileges. Version 1.5.0 contains a patch for...