APKLab

APKLab The ultimate Android RE experience right inside your VS Code. APKLab seamlessly integrates the best open-source tools: Apktool, smali-lsp, Jadx, uber-apk-signer, apk-mitm and more to the excellent VS Code so you can focus on app analysis and get it done without leaving the IDE. Features...

CVE-2026-124599

An Android application is vulnerable because RSA cryptographic key material , including private and public keys, is embedded directly within the application package. Due to the ability to extract and reverse engineer Android applications, an attacker could recover these keys to impersonate the ap...

PhoneSploit-Pro

PhoneSploit Pro The Swiss Army knife for Android. An all-in-one hacking tool written in Python to remotely take over Android devices using ADB, scrcpy, Nmap, and Metasploit-Framework. Table of contents Overview Screenshots Features Requirements Getting started Installing dependencies Device setup...

PT-2026-141270

The RSA cryptographic key material, including a private key and public key, is embedded within the GV-Access application package. Because Android applications can be extracted and reverse engineered, storing private cryptographic keys directly inside the client application may allow an attacker t...

PT-2026-141267

The RSA cryptographic key material, including a private key and public key, is embedded within the application package. Because Android applications can be extracted and reverse engineered, storing private cryptographic keys directly inside the client application may allow an attacker to recover...

metasploit_in_termux

Metasploit Framework 6 in Termux How to Install Before In order to have updated Termux: Purge all data of Termux in Android Settings Uninstall and reinstall latest Termux version from F-Droid Version on Play Store is outdated Then launch Termux to initialization, close it force stop, not swap...

backdoor-apk

backdoor-apk backdoor-apk is a shell script that simplifies the process of adding a backdoor to any Android APK file. Users of this shell script should have working knowledge of Linux, Bash, Metasploit, Apktool, the Android SDK, smali, etc. This shell script is provided as-is without warranty of...

awesome-termux-hacking

seeker - Accurately Locate Smartphones using Social Engineering. ANDRAX - ANDRAX is a Penetration Testing platform developed specifically for Android smartphones, ANDRAX has the ability to run natively on Android so it behaves like a common Linux distribution, But more powerful than a common...

apk-mitm

apk-mitm A CLI application that automatically prepares Android APK files for HTTPS inspection Inspecting a mobile app's HTTPS traffic using a proxy is probably the easiest way to figure out how it works. However, with the Network Security Configuration introduced in Android 7 and app developers...

Kage

Kage Kage ka-geh is a tool inspired by AhMyth designed for Metasploit RPC Server to interact with meterpreter sessions and generate payloads. For now it only supports windows/meterpreter & android/meterpreter. Getting Started Please follow these instructions to get a copy of Kage running on your...

mitmproxy

mitmproxy !autofix.ci:...

CVE-2026-125198

FFmpeg versions through 9.0.2 are vulnerable to a memory leak within the mediaformat_jni_setBuffer() function in libavcodec/mediacodec_wrapper.c. The root cause is the failure to free buffers wrapped with NewDirectByteBuffer(). Attackers can exploit this by providing crafted media files with larg...

EUVD-2026-120287

FFmpeg through 9.0.2 contains a memory leak vulnerability in mediaformatjnisetBuffer in libavcodec/mediacodecwrapper.c that never frees buffers wrapped with NewDirectByteBuffer. Attackers can supply crafted media files with large extradata, leaking native memory on each MediaCodec decoder...

CVE-2026-60117

The Android implementation of the Flutter/Dart receive_sharing_intent package (versions 1.4.1 through 1.9.0 ) is vulnerable to a path traversal vulnerability in FileDirectory.getDataColumn. A malicious co-resident application can exploit this by providing a crafted _display_name value via an untr...

EUVD-2026-120158

The Android implementation of the Flutter/Dart receivesharingintent package, versions 1.4.1 through 1.9.0, contains a path traversal vulnerability in FileDirectory.getDataColumn that allows a malicious co-resident application to write files outside the intended cache directory by supplying a...

appmon

Welcome to AppMon! As seen at US & EU AppMon is an automated framework for monitoring and tampering system API calls of native macOS, iOS and android apps. It is based on Frida. This project was only possible because of Ole André Vadla Ravnås and I dedicate it to him. Follow him on GitHub, Twitte...

android-classyshark

ClassyShark Introduction ClassyShark is a standalone binary inspection tool for Android developers. It can reliably browse any Android executable and show important info such as class interfaces and members, dex counts and dependencies. ClassyShark supports multiple formats including libraries...

keyfinder

Overview Installation Keyfinder Usage Key Parsing Simple Example Verbose Output APK Parsing Simple APK Example crt.sh Checking Key File Usage Overview CERT Keyfinder is a utility for finding and analyzing key files on a filesystem as well as contained within Android APK files. CERT Keyfinder...

PT-2026-140939

The Android implementation of the Flutter/Dart receive sharing intent package, versions 1.4.1 through 1.9.0, contains a path traversal vulnerability in FileDirectory.getDataColumn that allows a malicious co-resident application to write files outside the intended cache directory by supplying a...

PT-2026-141026

FFmpeg through 9.0.2 contains a memory leak vulnerability in mediaformat jni setBuffer in libavcodec/mediacodec wrapper.c that never frees buffers wrapped with NewDirectByteBuffer. Attackers can supply crafted media files with large extradata, leaking native memory on each MediaCodec decoder...