objection

📱objection - Runtime Mobile Exploration objection is a runtime mobile exploration toolkit, powered by Frida, built to help you assess the security posture of your mobile applications, without needing a jailbreak. Supports both iOS and Android. Inspect and interact with container file systems...

game-of-kingshot-re

got-re — Reverse Engineering: Game of Thrones: Conquest Android Educational project. The goal is to understand how a modern Unity/IL2CPP Android game communicates, how its native protection SDKs work, and how to apply static + dynamic analysis techniques to a real-world APK. What This Is This...

Apepe

📲 Apepe 📲 Enumerate information from an app based on the APK file 🕵️ What is Apepe? 🕵️ Apepe is a project developed to help to capture informations from a Android app through his APK file. It can be used to extract the content, get app settings, suggest SSL Pinning bypass based on the app detected...

universal-flutter-ssl-pinning

universal-flutter-ssl-pinning Reverse-engineers libflutter.so with PyGhidra to locate the SSL certificate verification function, then emits ready-to-use bypass scripts for both Frida and Renef. How it works 1. PyGhidra loads libflutter.so headlessly and scans all defined strings for sslclient 2...

Damn-Vulnerable-Bank

Damn Vulnerable Bank Guide: https://rewanthtammana.com/damn-vulnerable-bank/ About application Damn Vulnerable Bank is designed to be an intentionally vulnerable android application. All the details are documented in the guide, here. Upcoming Sessions NoNameCon...

SSLPinDetect

🔒 SSL Pinning Detector SSLPinDetect is a tool for analyzing Android APKs to detect SSL pinning implementations by scanning for known patterns in decompiled smali code. It helps security researchers and penetration testers identify SSL pinning mechanisms used in mobile applications efficiently. 🚀...

objection

📱objection - 런타임 모바일 탐색 objection은 Frida를 기반으로 한 런타임 모바일 탐색 도구 키트로, 탈옥 없이 모바일 애플리케이션의 보안 상태를 평가할 수 있도록 돕기 위해 만들어졌습니다. iOS와 Android를 모두 지원합니다. 컨테이너 파일 시스템을 검사하고 상호 작용합니다. SSL 피닝을 우회합니다. 키체인을 덤프합니다. 덤프 및 패치와 같은 메모리 관련 작업을 수행합니다. 힙에 있는 객체를 탐색하고 조작합니다. 그 외에도 훨씬 더 많은 기능이 있습니다... 스크린샷은 위키에서 확인할 수 있습니다...

MobileApp-Pentest-Cheatsheet

모바일 애플리케이션 침투 테스트 치트 시트 모바일 앱 침투 테스트Pentest 치트 시트는 특정 모바일 애플리케이션 침투 테스트 주제와 체크리스트에 대한 고가치 정보를 간결하게 수집하기 위해 제작되었으며, 침투 테스트 수행을 위한 OWASP Mobile Risk Top 10에 매핑되어 있습니다. Mobile Application Security Testing Distributions All-in-one Mobile Security Frameworks Android Application Penetration Testing...

ssl-kill-switch3

SSL Kill Switch 3 훨씬 더 많은 기능을 갖춘 iOS 트윅 SSLKillSwitch https://github.com/nabla-c0d3/ssl-kill-switch2의 차세대 버전! 새로운 기능 수정됨 Fishhook 지원 iOS 15+, ARM64/ARM64e — 탈옥이 아닌 환경에서도 훅을 걸 수 있습니다. 수정됨 루트리스Rootless 지원 iOS 15+, ARM64/ARM64e, 루트리스 파이팅 : 추가됨 SecIsInternalRelease를 훅하여...

frida-ssl-bypass

🔓 Frida SSL 피닝 우회 Android용 범용 SSL/TLS 인증서 피닝 우회 작성자: Danieldev GitHub: @danieldev23 | Telegram: @zadevz 모든 Android 앱 에서 SSL 피닝을 무력화하는 종합 Frida 툴킷 — 표준 OkHttp 피닝부터 Facebook의 커스텀 proxygen 네이티브 구현까지, Java와 네이티브 계층 모두를 아우릅니다. ✨ 기능 기능| 상태 ---|--- Java TrustManager / SSLContext| ✅ HostnameVerifier 모든 호...

EUVD-2016-6005

Malware in sbrugna...

EUVD-2016-6010

Malware in sbrugna...

EUVD-2017-16230

Malware in sbrugna...

EUVD-2017-14962

Malware in sbrugna...

CVE-2025-6031

Amazon Cloud Cam is a home security camera that was deprecated on December 2, 2022, is end of life, and is no longer actively supported. When a user powers on the Amazon Cloud Cam, the device attempts to connect to a remote service infrastructure that has been deprecated due to end-of-life status...

CVE-2025-6031

Amazon Cloud Cam is a home security camera that was deprecated on December 2, 2022, is end of life, and is no longer actively supported. When a user powers on the Amazon Cloud Cam, the device attempts to connect to a remote service infrastructure that has been deprecated due to end-of-life status...

CVE-2025-6031

CVE-2025-6031 concerns the now-deprecated Amazon Cloud Cam. The vulnerability arises from the device’s default pairing state, which can allow an arbitrary user to bypass SSL pinning and associate the camera with any network, enabling interception and modification of network traffic. Affected prod...

PT-2025-25352

Name of the Vulnerable Software and Affected Versions Amazon Cloud Cam affected versions not specified Description The issue concerns a home security camera that is no longer supported due to its end-of-life status. When powered on, the device attempts to connect to a deprecated remote service...

CVE-2025-6031: Operation on a Resource after Expiration or Release

Amazon Cloud Cam is a home security camera that was deprecated on December 2, 2022, is end of life, and is no longer actively supported. When a user powers on the Amazon Cloud Cam, the device attempts to connect to a remote service infrastructure that has been deprecated due to end-of-life status...

New SteelFox Trojan mimics software activators, stealing sensitive data and mining cryptocurrency

Introduction In August 2024, our team identified a new crimeware bundle, which we named "SteelFox". Delivered via sophisticated execution chains including shellcoding, this threat abuses Windows services and drivers. It spreads via forums posts, torrent trackers and blogs, imitating popular...