PAPIMonitor

PAPIMonitor P ython API Monitor for Android apps is a python tool based on Frida for monitoring user-select APIs during the app execution. The app should be installed within an emulator already connected through ADB to the pc host. The user can choose to monitor a predefined list of APIs divided...

hooker

Hooker: Android 应用程序自动动态分析工具 关于 Hooker 功能描述 Hooker 是一个用于 Android 应用程序动态分析的开源项目。该项目提供了多种工具和应用，可用于自动拦截并修改目标应用所发出的任意 API 调用。 它利用 Android Substrate 框架来拦截这些调用，并汇总所有上下文信息（参数、返回值等）。收集的信息可以存储在 ElasticSearch 中，也可以保存为 JSON 文件。 此外，还提供了一套 Python 脚本，用于自动执行分析，以收集一组目标应用发出的所有 API 调用。 免责声明 Android-Hooker 是一个基于...

EUVD-2026-23151

Luanti 5 before 5.15.2 sometimes allows unintended access to an insecure environment. If at least one mod is listed as secure.trustedmods or secure.httpmods, then a crafted mod can intercept the request for the insecure environment or HTTP API, and also receive access to it...

CVE-2025-42603

This vulnerability exists in the Meon KYC solutions due to transmission of sensitive data in plain text within the response payloads of certain API endpoints. An authenticated remote attacker could exploit this vulnerability by intercepting API response that contains unencrypted sensitive...

Shopify: Customer's full name disclosure via Shopify Chat (by email lookup)

By making use of the Shopify Chat Application, it is possible to retrieve a customer First Name and Last Name by providing its email. Steps to reproduce 1. Having a shop with Shopify Chat installed, open up https://shop.myshopify.com/?chat in Incognito mode 1. Click on I need an update on my orde...

Zomato: [www.zomato.com] Availing Zomato Gold membership for free by tampering plan id(s)

Summary: Get free zomato gold membership using zomato iOS app. Description: add more details about this vulnerability 1 Login to the zomato iOS application. 2 Select zomato gold from the home screen. 3 Depending on your location, you will see different gold pack options. 4 Select any gold pack. 5...