Adhrit

Adhrit is an open source Android APK reversing and analysis suite. The tool is an effort to find an efficient solution to all the needs of mobile security testing and automation. Adhrit has been built with a focus on flexibility and mudularization. Adhrit currently uses the Ghera benchmarks to...

Google may add your number to all your accounts: How to stop it

As Android Central reports, users have received unexpected emails telling them their phone number has been verified for secondary Google accounts. Like me and many others, you may have one Google account for everyday use, another for work, and a third for things you would rather keep separate. Bu...

CVE-2026-113385

A vulnerability has been found in LeeDrOiD Labs Shortcutter 2 App 9.0.48 on Android. This issue affects the function Class.forName of the file ToggleGeneric.java. The manipulation of the argument Class leads to improper export of android application components. Local access is required to approac...

CVE-2026-113385

The LeeDrOiD Labs Shortcutter 2 App version 9.0.48 on Android is vulnerable to an improper export of android application components . This issue stems from the manipulation of the Class argument within the Class.forName function located in the ToggleGeneric.java file. An attacker with local acces...

CVE-2026-113385 LeeDrOiD Labs Shortcutter 2 App ToggleGeneric.java Class.forName improper export of android application components

A vulnerability has been found in LeeDrOiD Labs Shortcutter 2 App 9.0.48 on Android. This issue affects the function Class.forName of the file ToggleGeneric.java. The manipulation of the argument Class leads to improper export of android application components. Local access is required to approac...

cve-2015-1538-1

Included is a python script that generates an MP4 exploiting the ‘stsc’ vulnerability otherwise known as CVE-2015-1538 1. This is one of the most critical vulnerabilities I reported in the Stagefright library. The expected result of the exploit is a reverse shell as the media user. As detailed in...

Exploit for Use After Free in Google Android

mi5-temp-root Temporary root for Xiaomi Mi 5 gemini / MIU...

shellshocker-android

shellshocker-android This is an Android Application that helps you detect if your machine that run bash is vulnerable by CVE-2014-6271 Stefano Belli, C Copyleft, share, rebuild, modify, redistribuite as you think it should be better Google+: http://plus.google.com/+StefanoBelli WebSite:...

system_core_AOSP10_r33_CVE-2020-0421

This repository does not have a README...

packages_apps_Settings_AOSP10_r33_CVE-2020-0188

This repository does not have a README...

iovy_root_research

Inspired by dosomder/iovyroot https://github.com/dosomder/iovyroot A root tool based on the CVE-2015-1805 vulnerability It supports 32 and 64bit, get sys call table address via swi. ref to Getting syscalltable on Android...

frameworks_native_CVE-2020-0226

This repository does not have a README...

frameworks_av_AOSP_10_r33_CVE-2023-35687_CVE-2023-35679

This repository does not have a README...

com.cutestudio.colordialer

This repository does not have a README...

system_bt_AOSP10_r33_CVE-2021-0507

Fluoride Bluetooth stack Building and running on AOSP Just build AOSP - Fluoride is there by default. Building and running on Linux Instructions for Ubuntu, tested on 14.04 with Clang 3.5.0 and 16.10 with Clang 3.8.0 Download source mkdir /fluoride cd /fluoride git clone...

K0mraid3s-System-Shell-PREBUILT

K0mraid3s-System-Shell Way back in 2019, a vulnerability that would come to be known as "CVE-2019-16253" was found that affect Samsung's TTS engine in versions prior to 3.0.02.7. This exploit allowed for a local attacker to escalate privileges to system privileges and was later patched by Samsung...

AudioServer-Voip-Recorder

Goal: Demonstrate VoIP stream capture by hooking Android's audioserver specifically libaudioflinger.so and recording uplink mic and downlink speaker PCM buffers when the system is in communication mode. Project Design & Methodology Architecture: Controller App Android UI with 9 buttons to manage...

CVE-2024-54916

CVE-2024-54916: Authentication Bypass on Telegram apk An issue in the SharedConfig class of Telegram Android APK v.11.7.0 allows a physically proximate attacker to bypass authentication and escalate privileges by manipulating the return value of the checkPasscode method. Vulnerability Type...

cve-2026-0013-poc

CVE-2026-0013 Android DocumentsUI Confused Deputy Vulnerability - Security Research Verification Project Important Notice This repository is a derived build repository, affiliated with the original upstream repository. Role| Repository| Description ---|---|--- Main repository|...

nextcloud_android

Nextcloud Android app Codacy Badge The Android client forNextcloud. Easily work with your data on your Nextcloud. How to contribute If you want to contribute to Nextcloud, you are very welcome: on our IRC channels and on freenode our forum at https://help.nextcloud.com for translations of the app...