androidqf

androidqf NOTE: this project is currently not maintained. An independent fork can be found under theMVT Project. androidqf Android Quick Forensics is a portable tool to simplify the acquisition of relevant forensic data from Android devices. Download androidqf Build Executable binaries for Linux,...

androidqf

androidqf NOTA: este proyecto actualmente no tiene mantenimiento. Se puede encontrar un fork independiente bajo elProyecto MVT. androidqf Android Quick Forensics es una herramienta portátil para simplificar la adquisición de datos forenses relevantes de dispositivos Android. Descargar androidqf...

GO-2026-5464 androidqf: Zip entry Name Injection in APK bundle (Zip Slip for zip consumers) in github.com/mvt-project/androidqf

androidqf: Zip entry Name Injection in APK bundle Zip Slip for zip consumers in github.com/mvt-project/androidqf...

GO-2026-5206 androidqf: APK download Path Traversal in device APK paths in github.com/mvt-project/androidqf

androidqf: APK download Path Traversal in device APK paths in github.com/mvt-project/androidqf...

PT-2026-45231

Summary generateZipPath constructs zip entry names for collected APKs using device controlled content from extractFileName. Since extractFileName does not reject traversal sequences, the resulting zip entry name can contain ../. AndroidQF itself does not extract the zip it creates, but any forens...

PT-2026-45227

Summary During device acquisition, getPathToLocalCopy constructs local filesystem paths for downloaded APKs using a filename component extracted by extractFileName. The extraction splits on ==/ and takes the remainder without sanitization. If a compromised device returns a crafted APK path...