smali

Über smali/baksmali ist ein Assembler/Disassembler für das dex-Format, das von dalvik, der Java-VM-Implementierung von Android, verwendet wird. Die Syntax lehnt sich lose an die Syntax von Jasmin/dedexer an und unterstützt die volle Funktionalität des dex-Formats Annotationen, Debug-Informationen...

GDA-android-reversing-Tool

ˇ GDAGJoy Dex Analyzer GDA, un potente decompilatore di bytecode Dalvik implementato in C++, che presenta i vantaggi di un'analisi veloce e di un basso consumo di memoria e disco, nonché una maggiore capacità di decompilare i file apk, dex, odex, oat, jar, class, aar. GDA è un software...

dex-oracle

Oracle Ein musterbasierter Dalvik-Entschleierer, der begrenzte Ausführung nutzt, um die semantische Analyse zu verbessern. Außerdem die Inspiration für einen weiteren Android-Entschleierer: Simplify. Vorher Nachher sha1: a68d5d2da7550d35f7dbefc21b7deebe3f4005f3 md5: 2dd2eeeda08ac8c15be8a9f2d01adb...

AndBug

======================================= AndBug -- Um Depurador Android Scriptável AndBug é um depurador direcionado à máquina virtual Dalvik da plataforma Android, destinado a engenheiros reversos e desenvolvedores. Ele usa as mesmas interfaces do plugin de depuração do Eclipse do Android, o Java...

androwarn

Androwarn Un altro analizzatore statico di codice per applicazioni Android dannose Descrizione Androwarn è uno strumento il cui scopo principale è rilevare e avvisare l'utente circa potenziali comportamenti malevoli sviluppati da un'applicazione Android. Il rilevamento viene effettuato tramite...

enjarify

Nota: Questo repository potrebbe essere obsoleto. Lo sviluppo futuro avverrà su https://github.com/Storyyeller/enjarify. Introduzione Enjarify è uno strumento per tradurre bytecode Dalvik in bytecode Java equivalente. Ciò consente agli strumenti di analisi Java di analizzare applicazioni Android...

r2frida

r2frida Radare2 and Frida better together Description Self-contained plugin for radare2 that ships frida and allows to instrument local or remote processes using r2 commands instead but not limited to Frida scripts. The radare project provides a complete toolchain for reverse engineering, it's...

trueseeing

README trueseeing è uno scanner di vulnerabilità veloce, accurato e resiliente per app iOS/Android. Operiamo a livello di Dalvik VM per Android – cioè non ci interessa se l'app target è offuscata o meno. Capacità Attualmente possiamo: Scansionare automaticamente l'app per vulnerabilità, producend...

droidlysis

DroidLysis DroidLysis is a pre-analysis tool for Android apps : it performs repetitive and boring tasks we'd typically do at the beginning of any reverse engineering. It disassembles the Android sample, organizes output in directories, and searches for suspicious spots in the code to look at. The...

EUVD-2009-3671

Malware in sbrugna...

EUVD-2019-6342

Malware in sbrugna...

Linux Distros Unpatched Vulnerability : CVE-2017-9520

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The rconfigset function in libr/config/config.c in radare2 1.5.0 allows remote attackers to cause a denial of service use-after-free and application crash via a...

Linux Distros Unpatched Vulnerability : CVE-2017-6448

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The dalvikdisassemble function in libr/asm/p/asmdalvik.c in radare2 1.2.1 allows remote attackers to cause a denial of service stack-based buffer overflow and...

CVE-2019-15346

The Tecno Camon iClick 2 Android device with a build fingerprint of TECNO/H622/TECNO-ID6:8.1.0/O11019/F-180824V116:user/release-keys contains a pre-installed platform app with a package name of com.lovelyfont.defcontainer versionCode=7, versionName=7.0.11. This app contains an exported service...

CVE-2015-9547

An issue was discovered on Samsung mobile devices with JBP4.3 and KK4.4.2 software. Because the READLOGS permission is mishandled, sensitive information is disclosed in a world-readable copy of the log file if the error message is "Unhandled exception in Dalvik VM," "Application not responding AN...

Fedora: Security Advisory for enjarify (FEDORA-2024-129d8ca6fc)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] Fedora 40 Update: enjarify-1.0.3-35.fc40

Android applications are Java programs that run on a customized virtual machine, which is part of the Android operating system, the Dalvik VM. Their bytecode differs from the bytecode of normal Java applications. Enjarify can translate the Dalvik bytecode back to equivalent Java bytecode, which...

Fluhorse: Flutter-Based Android Malware Targets Credit Cards and 2FA Codes

Cybersecurity researchers have shared the inner workings of an Android malware family called Fluhorse. The malware "represents a significant shift as it incorporates the malicious components directly within the Flutter code," Fortinet FortiGuard Labs researcher Axelle Apvrille said in a report...

PT-2022-23135 · Rizin · Rizin

Name of the Vulnerable Software and Affected Versions: Rizin versions 0.4.0 and prior Description: The issue affects a UNIX-like reverse engineering framework and command-line toolset, allowing an attacker to execute code on a user's machine when a malicious DEX file is opened. This is due to an...

ASB-A-206090748

In multiple functions of odsignmain.cpp, there is a possible way to persist system attack due to a logic error in the code. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation...