55 matches found
mobsfscan
mobsfscan mobsfscan is a static analysis tool that can find insecure code patterns in your Android and iOS source code. Supports Java, Kotlin, Android XML, iOS Info.plist, Swift and Objective C Code. mobsfscan uses MobSF static analysis rules and is powered by semgrep and libsast pattern matcher...
CiLocks
root@kitploit: / / / / / / / / / / / / /// / / // / // // / // , //////|//v2.1 CiLocks | Android/IOS Hacking 📱 Crack Interface lockscreen, Metasploit and More Android/IOS Hacking Please Don't Use for illegal Activity Update Available V2.1 🚀 Added New Tools Root Android Supersu Not Support All...
mvt
Mobile Verification Toolkit !IMPORTANT 最近我们合并了「v3」分支。这引入了破坏性变更。如果您在其他脚本中依赖 mvt 的输出，它们可能会失效。更多详情：https://github.com/mvt-project/mvt/issues/757 Mobile Verification Toolkit（MVT）是一组实用工具，用于简化和自动化收集取证痕迹的过程，以帮助识别 Android 和 iOS 设备可能遭受的入侵。 该工具由国际特赦组织安全实验室在飞马计划的背景下于 2021 年 7...
Glass
Glass 透明で滑らか、という意味です 高速でネイティブな、モバイルアプリ最優先 のインタラクティブディスアセンブラ。Android / iOS リバースエンジニアリングのワークフローにおける IDA Pro の精神的な後継であり、以下を中心に構築されています: smali — APK / DEX / smali 処理用 armv8-encode — AArch64 および ARMv7 A32 / Thumb 用 — ネイティブ .so、iOS Mach-O gpui Zed — GPU アクセラレーションによるネイティブ UI 用 redb — コンテンツアドレス型永続化用 内蔵 M...
scrounger
설명 Scrounger – 다른 사람에게서 빌리거나 기대어 사는 사람. 이 도구를 설명하는 데 이보다 더 적절한 말은 없습니다. 첫째, 이 도구는 이미 출판된 많은 다른 도구들에서 영감을 받았기 때문이고, 둘째, 모바일 애플리케이션의 취약점에 기대어 살아가기 때문입니다. 이유 여러 모바일 애플리케이션 분석 도구들이 개발되었음에도 불구하고, 안드로이드와 iOS 모두에 사용할 수 있고 모든 모바일 애플리케이션 평가에 반드시 사용해야 하는 "표준"이라고 불릴 만한 도구는 없습니다. Scrounger 의 아이디어는 침투 테스터의 작업...
Arti Mobile - Tor in Rust for Android and iOS
Arti Mobile: Tor in Rust for Android and iOS The official Arti Mobile library, supported by Tor Project, bringing the new Tor Rust runtime to mobile devices. This is a shared project for exposing a standard API for Tor Arti to Android and iOS applications. This was based on the following projects...
frida-il2cpp-datacollector
frida-il2cpp-datacollector ceのmonodatacollectorをandroid/iosに移植したものです。 CEVersion 7.4.2以降で動作を確認しています。 使用方法 初期設定 pythonライブラリをインストールします。 root@kitploit: pip install pywin32 autorun/monoscript.luaの修正CEがMonoを有効なものとして認識するための設定 1コメントアウト root@kitploit: --local injectResult,...
CVE-2026-13770: Improper Neutralization of Input During Web Page Generation
The AppMySite – WordPress & WooCommerce Mobile App Builder No-Code Android & iOS App Maker plugin for WordPress is vulnerable to Stored Cross-Site Scripting via saveamslicensekey AJAX Handler in all versions up to, and including, 3.15.3 due to insufficient input sanitization and output escaping...
Security Bulletin: IBM On Call Manager Mobile Application is affected by a vulnerability in regular expression processing
Summary A vulnerability in the xmldom library affects regular expression processiong for the IBM On Call Manager Android and iOS mobile applications. Vulnerability Details CVEID:CVE-2026-34601 DESCRIPTION: xmldom is a pure JavaScript W3C standard-based XML DOM Level 2 Core DOMParser and...
CVE-2026-7638: Authorization Bypass Through User-Controlled Key
The App Builder – Create Native Android & iOS Apps On The Flight plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to and including 5.6.0. This is due to missing authorization validation in the uploadavatar function, which accepts an attacker-controlled...
Notesnook 代码注入漏洞
Notesnook is an end-to-end encrypted note application developed by Streetwriters. There were code injection vulnerabilities in versions of Notesnook Web/Desktop prior to 3.3.11, as well as in versions for Android/iOS prior to 3.3.17. These vulnerabilities stemmed from a stored-xss vulnerability...
CVE-2026-2375: Improper Privilege Management
The App Builder – Create Native Android & iOS Apps On The Flight plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 5.5.10. This is due to the verifyrole function in AuthTrails.php explicitly whitelisting the wcfmvendor role alongside subscriber and...
CVE-2025-47147
Cleartext Storage of Sensitive Information CWE-312 in the Command Centre Mobile Client on Android and iOS could allow an attacker with access to a logged-in Operator's mobile device to extract the session token and exploit access for a limited duration. This issue affects Command Centre Mobile...
CVE-2026-2974
A vulnerability was identified in AliasVault App up to 0.25.3 on Android/iOS. This vulnerability affects unknown code of the file sharedprefs/aliasvault.xml of the component Backup Handler. The manipulation of the argument accessToken/refreshToken/metadata/keyderivationparams/authmethods leads to...
CVE-2025-56400
Cross-Site Request Forgery CSRF vulnerability in the OAuth implementation of the Tuya SDK 6.5.0 for Android and iOS, affects the Tuya Smart and Smartlife mobile applications, as well as other third-party applications that integrate the SDK, allows an attacker to link their own Amazon Alexa accoun...
EUVD-2021-19772
Malware in sbrugna...
EUVD-2021-23357
Malware in sbrugna...
EUVD-2020-25339
Malware in sbrugna...