blutter

Blutter Strumento di Reverse Engineering per Applicazioni Flutter Mobile tramite Compilazione del Runtime Dart AOT Attualmente l'applicazione supporta solo il file Android libapp.so solo arm64. Inoltre, l'applicazione funziona al momento solo con versioni recenti di Dart. Per le funzionalità...

blutter

Blutter Flutter Mobile Application Reverse Engineering Tool by Compiling Dart AOT Runtime Currently the application supports only Android libapp.so arm64 only. Also the application is currently work only against recent Dart versions. For high priority missing features, see TODO Environment Setup...

PoC-Deployer-System

PoC-Deployer-System English | Chinês Ferramenta visual baseada na ferramenta de injeção Zygote do CVE-2024-31317, integrando terminal remoto e transferência de arquivos. Binder-CLI - acessar serviços do sistema via binder Capturas de tela Injeção UID/GID| Funções Avançadas| Reverse Shell...

ecapture

汉字 | Englisch eCapture旁观者: SSL/TLS-Textinhalte ohne CA-Zertifikat mit eBPF erfassen. !IMPORTANT Unterstützt Linux/Android auf x8664 Kernel 4.18+ und aarch64 Kernel 5.5+. Die Kernel-Versionsanforderungen gelten pro CPU-Architektur für sowohl Linux als auch Android. Benötigt ROOT-Berechtigung oder...

Adhrit

Adhrit è una suite open source per il reversing e l'analisi di APK Android. Lo strumento è nato per trovare una soluzione efficiente a tutte le esigenze del testing di sicurezza mobile e dell'automazione. Adhrit è stato sviluppato con un focus sulla flessibilità e la modularizzazione. Attualmente...

PhoneSploit-Pro

PhoneSploit Pro PhoneSploit mit Metasploit-Integration. Ein All-in-One-Hacking-Tool geschrieben in Python zum Fernausnutzen von Android-Geräten mit ADB Android Debug Bridge und Metasploit-Framework. Inhaltsverzeichnis Übersicht Bildschirmfotos Funktionen Anforderungen Abhängigkeiten installieren...

Aegis

Aegis Authenticator Aegis Authenticator è un'app 2FA gratuita, sicura e open source per Android. Il suo obiettivo è fornire un autenticatore sicuro per i tuoi servizi online, includendo anche alcune funzionalità assenti nelle app autenticatrici esistenti, come una corretta crittografia e i backup...

keyfinder

Überblick Installation Keyfinder Verwendung Schlüssel-Parsing Einfaches Beispiel Ausführliche Ausgabe APK-Parsing Einfaches APK-Beispiel crt.sh Prüfung Schlüsseldatei Verwendung Überblick CERT Keyfinder ist ein Dienstprogramm zum Auffinden und Analysieren von Schlüsseldateien auf einem Dateisyste...

PoC-in-GitHub

PoC in GitHub 2026 CVE-2026-0009 2026-06-01 In multiple locations, there is a possible tapjacking due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

frida-fuzzer

Frida API Fuzzer v1.4 Copyright C 2020 Andrea Fioraldi [email protected] Released under the Apache License v2.0 This experimental fuzzer is meant to be used for API in-memory fuzzing. The design is highly inspired and based on AFL/AFL++. ATM the mutator is quite simple, just the AFL's havoc...

frida-fuzzer

Frida API Fuzzer v1.4 Copyright C 2020 Andrea Fioraldi [email protected] Rilasciato sotto la Licenza Apache v2.0 Questo fuzzer sperimentale è pensato per essere usato per il fuzzing in-memory di API. Il design è fortemente ispirato e basato su AFL/AFL++. Al momento il mutatore è piuttosto...

FAMA

VERALTET: LabCIF - Forensische Analyse für mobile Apps Erste Schritte Android-Extraktions- und Analyse-Framework mit integriertem Autopsy-Modul. Dumpen Sie einfach Benutzerdaten von einem Gerät und erstellen Sie leistungsstarke Berichte für Autopsy oder externe Anwendungen. Funktionen Extrahieren...

lockphish

Lockphish v2.0 Lockphish it's the first tool 07/04/2020 for phishing attacks on the lock screen, designed to grab Windows credentials, Android PIN and iPhone Passcode using a https link. LockPhish Tutorial: https://www.kalilinux.in/2020/05/lockphish.html Author: The Linux Choice Who deleted his...

adbsploit

ADBSploit Uno strumento basato su Python per sfruttare e gestire dispositivi Android tramite ADB Attualmente in sviluppo Screenrecord Stream Screenrecord Estrai Contatti Estrai SMS Estrai Chat App di Messaggistica WhatsApp/Telegram/Line Installa Backdoor E altro ancora... Installazione...

adbsploit

ADBSploit A python based tool for exploiting and managing Android devices via ADB Currently on development Screenrecord Stream Screenrecord Extract Contacts Extract SMS Extract Messasing App Chats WhatsApp/Telegram/Line Install Backdoor And more... Installation root@kitploit: First Download or...

CVE-2026-82089

The wallabag aka fr.gaulupeau.apps.InThePoche application through 2.6.0 for Android allows XSS because /api/entries data is loaded into a WebView...

CVE-2026-82089

The wallabag aka fr.gaulupeau.apps.InThePoche application through 2.6.0 for Android allows XSS because /api/entries data is loaded into a WebView...

CVE-2026-82089

The wallabag Android application (package fr.gaulupeau.apps.InThePoche) through version 2.6.0 is affected by a Cross-Site Scripting (XSS) vulnerability. The root cause is that /api/entries data is loaded directly into a WebView , allowing injected script content to execute. The CVSS 4.0 score is ...

EUVD-2026-67402

The wallabag aka fr.gaulupeau.apps.InThePoche application through 2.6.0 for Android allows XSS because /api/entries data is loaded into a WebView...

zygote-CVE-2024-31317

Zygote Toolkit - CVE-2024-31317 Ce kit utilise CVE-2024-31317 pour extraire les données privées des applications via ADB ou lancer un shell avec l'UID d'une application. Cette vulnérabilité affecte les versions Android 9 à 14 avec un niveau de correctif de sécurité au 2024-06-01 ou antérieur. Une...