CVE-2026-113266

A memory corruption vulnerability in ANGLE within Google Chrome on Android (versions prior to 156.0.8078.47 ) allows a remote attacker to potentially execute arbitrary code inside the sandbox. The vulnerability can be triggered by navigating to a crafted HTML page . The issue has been addressed i...

CVE-2026-113163

Use after free in WebGL in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-113163

A use after free vulnerability exists in the WebGL component of Google Chrome on Android in versions prior to 156.0.8078.47 . A remote attacker could exploit this flaw by using a crafted HTML page to execute arbitrary code within the sandbox. The vulnerability was reported by Google and addressed...

CVE-2026-113092

Use after free in Passwords in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-113092

Use after free in Passwords in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-113092

Google Chrome on Android (prior to version 156.0.8078.47 ) is vulnerable to a use-after-free flaw in the Passwords component. A remote attacker can exploit this by convincing a user to visit a crafted HTML page , potentially leading to arbitrary code execution within the browser sandbox. No speci...

CVE-2026-113341

Google Chrome on Android versions prior to 156.0.8078.47 is vulnerable to a memory corruption flaw within the Skia component. This vulnerability (CWE-119) allows a remote attacker to potentially read memory inside the sandbox by navigating to a crafted HTML page. The Chromium security severity fo...

BetterAndroRAT

Better Android RAT Dendroid Based Android Remote Access Trojan All responsibilities are at your own risk. Please use it only for research purposes. Feature Remote Update & Install Application Remote WebCam Remote Microphone Record Remote File Management Remote Call & SMS Remote Device Controller...

redexer

redexer Redexer is a reengineering tool that manipulates Android app binaries. This tool is able to parse a DEX file into an in-memory data structure; to infer with which parameters the app uses certain permissions we name this feature RefineDroid; to modify and unparse that data structure to...

qu1ckr00t

qu1ckr00t A PoC application demonstrating the power of an Android kernel arbitrary R/W CVE-2019-2215. Writeup: https://hernan.de/blog/2019/10/15/tailoring-cve-2019-2215-to-achieve-root/ Qu1ckR00t is a PROOF OF CONCEPT. It should NOT be used on your personal device with valuable userdata. It has...

MobileHackersWeapons

A collection of awesome tools used by Mobile hackers. Happy hacking , Happy bug-hunting! Family project Table of Contents Weapons Contribute Thanks to contributor Weapons Attributes | Attributes ---|--- Types| Analysis Pentest Proxy RE Scripts Scanner Utils Device Discovery, Monitor, NFC, Target,...

Metaphor

Metaphor Metaphor - Stagefright with ASLR bypass By Hanan Be'er from NorthBit Ltd. Link to whitepaper: https://raw.githubusercontent.com/NorthBit/Public/master/NorthBit-Metaphor.pdf Twitter: https://twitter.com/HighByte Metaphor's source code is now released! The source include a PoC that generat...

simplify

Simplify Generic Android Deobfuscator Simplify virtually executes an app to understand its behavior and then tries to optimize the code so that it behaves identically but is easier for a human to understand. Each optimization type is simple and generic, so it doesn't matter what the specific type...

ATFuzzer

ATFuzzer "Opening Pandora's Box through ATFuzzer: Dynamic Analysis of AT Interface for Android Smartphones" is accepted to the 35th Annual Computer Security Applications Conference ACSAC 2019. https://syed-rafiul-hussain.github.io/wp-content/uploads/2019/11/atfuzz.pdf Abstract This paper focuses ...

exploit_playground

About This is where I will post analysis of Public Exploits, or some of my 1day exploits. Public exploit analysis Personally I think the best way to learn a public exploit is by understanding it line-by-line until I can understand the exploit to the fullest. I will post some of these...

APKHunt

APKHunt | OWASP MASVS Static Analyzer APKHunt is a comprehensive static code analysis tool for Android apps that is based on the OWASP MASVS framework. Although APKHunt is intended primarily for mobile app developers and security testers, it can be used by anyone to identify and address potential...

cromite

Cromite a Bromite fork - Take back your browser Cromite is a Chromium fork based on Bromite with built-in support for ad blocking and an eye for privacy. Cromite is available for Android arm64-v8a, arm32-v7a and x8664, Android 10 and above, Windows and Linux 64bit. Goals Cromite's goal is to limi...

system_bt_AOSP10_r33_CVE-2020-0471

Fluoride Bluetooth stack Building and running on AOSP Just build AOSP - Fluoride is there by default. Building and running on Linux Instructions for Ubuntu, tested on 14.04 with Clang 3.5.0 and 16.10 with Clang 3.8.0 Download source mkdir /fluoride cd /fluoride git clone...

Podroid

Podroid Run Linux containers and a full Linux desktop on your Android phone. No root. A real Alpine Linux VM with its own kernel - not a chroot or proot trick - so Podman, Docker and LXC behave exactly like they do on a server. Website · Documentation · Download APK Home | Running | !Built-in...

metasploit-payloads

metasploit-payloads Appveyor build status: This is a unified repository for different Metasploit Framework payloads, which merges these repositories: C Windows Meterpreter Java and Android Meterpreter and Payloads Python and PHP Meterpreter An alternate cross-platform C Meterpreter, called Mettle...