Ruse

Ruse 基于移动设备摄像头的应用，旨在修改照片，使其对人类保持可用性，同时让人脸识别系统无法使用。 安装 1 简单方法：等待并从相应的应用商店下载应用。 2 通过 Xcode 下载并运行 iOS 应用（详细步骤参见“开发设置”部分） 使用示例 应用开发为基于摄像头的应用，允许在拍摄新照片或从相机胶卷中选择现有照片时对脸部进行修改，目标是保持这些照片对社交媒体和人类观赏的可用性，同时让人脸识别系统难以准确有效地识别它们。 这是基于先前研究的多种方法实现的。由于移动设备和 TensorFlow Lite...

blutter

Blutter Flutter Mobile Application Reverse Engineering Tool by Compiling Dart AOT Runtime Currently the application supports only Android libapp.so arm64 only. Also the application is currently work only against recent Dart versions. For high priority missing features, see TODO Environment Setup...

mhf

移动端辅助框架 是一个自动化识别移动应用程序所用框架/技术的工具。此外，它有助于查找敏感信息或为使用识别的平台提供建议。 工作原理？ 该工具搜索与移动应用开发中使用的技术相关的文件，例如配置文件、资源文件和源代码文件。 示例 Cordova 搜索文件： index.html cordova.js cordovaplugins.js React Native Android & iOS 搜索文件 Android 文件： libreactnativejni.so index.android.bundle iOS 文件： main.jsbundle 安装 ❗运行 Apktool 至少需要 Ja...

scrounger

Description Scrounger - a person who borrows from or lives off others. There is no better description for this tool for two main reasons, the first is because this tool takes inspiration from many other tools that have already been published, the second reason is because it lives off mobile...

SecurityShepherd

OWASP Security Shepherd OWASP Security Shepherd 项目 是一个 Web 和移动应用程序安全培训平台。Security Shepherd 旨在培养和提升不同技能水平人群的安全意识。该项目的目标是让 AppSec 新手或有经验的工程师能够将其渗透测试技能磨练到安全专家水平。 我在哪里可以下载 Security Shepherd？ 虚拟机或手动安装 你可以从 GitHub 下载 Security Shepherd 虚拟机或手动安装包。 Docker（Ubuntu Linux 主机） 初始设置 安装前提条件 sudo apt install git...

mavd

mavd Detección de Vulnerabilidades en Aplicaciones Móviles Recibe un dominio o nombre de APK desde la CLI, identifica la mayoría de las aplicaciones vinculadas al dominio y descarga los APKs localmente. Luego revierte el APK a un archivo jar usando dex2jar, extrae los archivos de clase y objetos,...

CVE-2026-85153

The Schmooze dating mobile application contains a vulnerability caused by the use of hardcoded credentials and cryptographic keys within the client application. An unauthenticated remote attacker can exploit this by decompiling the distributed application package to extract the embedded secrets. ...

CVE-2019-6447-in-Mobile-Application

CVE-2019-6447 en Aplicación Móvil En este informe de investigación puedes obtener una idea completa sobre el CVE 2019-6447 en aplicaciones del mundo real y las explotaciones con ejemplos. Si quieres crear un video para la explotación, por favor usa el enlace mencionado a continuación...

CyberPup

CyberPup 一款免费、开源的网络安全应用，专为普通大众设计。 CyberPup 通过引导式清单、简短课程和泄露检查等工具，帮助非技术用户保障数字生活安全。所有指导均基于 ACSC、CISA 和 NIST 的知名框架，并将其转化为任何人都能实际遵循的通俗语言。 多数个人网络安全工具要么过于技术化，要么只解决单一方面的问题，要么就是彻头彻尾的骗局。CyberPup 试图引导用户全面了解密码、电子邮件安全、设备卫生、社交媒体和泄露检查。 该应用已在 iOS App Store 上线，约有 500...

CVE-2026-95699

Prior to 9/18/2026, the iSteamX mobile application's AWS policy could grant authenticated users access to wildcard MQTT topics, which can expose other users' device data and allow the attacker to start and stop other connected users' devices. This risked exposing user profile information and...

Oracle E-Business Suite (September 2026 CSPU)

The versions of Oracle E-Business Suite installed on the remote host are affected by multiple vulnerabilities as referenced in the September 2026 CSPU advisory. - Vulnerability in the Oracle Applications Framework product of Oracle E-Business Suite component: Personalization. Supported versions...

CVE-2026-83461

Vulnerability in the Oracle Mobile Application Server product of Oracle E-Business Suite component: MWA Terminal Server. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows unauthenticated attacker with network access via TCP to compromise Oracle Mobil...

EUVD-2026-79760

Vulnerability in the Oracle Mobile Application Server product of Oracle E-Business Suite component: MWA Terminal Server. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows unauthenticated attacker with network access via TCP to compromise Oracle Mobil...

CVE-2026-83463

Oracle Mobile Application Server (MWA Terminal Server component of Oracle E-Business Suite , versions 12.2.3–12.2.15) is affected by a vulnerability that allows an unauthenticated attacker with access to the adjacent physical communication segment to achieve full takeover of the server, impacting...

EUVD-2026-79761

Vulnerability in the Oracle Mobile Application Server product of Oracle E-Business Suite component: MWA Terminal Server. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows unauthenticated attacker with network access via TCP to compromise Oracle Mobil...

CVE-2026-83465: Uncontrolled Resource Consumption

Vulnerability in the Oracle Mobile Application Server product of Oracle E-Business Suite component: MWA Terminal Server. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Mobi...

CVE-2026-83461: Missing Authentication for Critical Function

Vulnerability in the Oracle Mobile Application Server product of Oracle E-Business Suite component: MWA Terminal Server. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows unauthenticated attacker with network access via TCP to compromise Oracle Mobil...

CVE-2026-83464: Improper Privilege Management

Vulnerability in the Oracle Mobile Application Server product of Oracle E-Business Suite component: MWA Terminal Server. Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows unauthenticated attacker with network access via TCP to compromise Oracle...

CVE-2026-83463: Improper Privilege Management

Vulnerability in the Oracle Mobile Application Server product of Oracle E-Business Suite component: MWA Terminal Server. Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows unauthenticated attacker with access to the physical communication segment...

CVE-2026-83462: Improper Authentication

Vulnerability in the Oracle Mobile Application Server product of Oracle E-Business Suite component: MWA Terminal Server. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows unauthenticated attacker with network access via TCP to compromise Oracle Mobil...