dex-oracle

Oracle A pattern based Dalvik deobfuscator which uses limited execution to improve semantic analysis. Also, the inspiration for another Android deobfuscator: Simplify. Before After sha1: a68d5d2da7550d35f7dbefc21b7deebe3f4005f3 md5: 2dd2eeeda08ac8c15be8a9f2d01adbe8 Installation Step 1. Install...

androwarn

Androwarn Encore un autre analyseur statique de code pour applications Android malveillantes Description Androwarn est un outil dont l'objectif principal est de détecter et d'avertir l'utilisateur des comportements malveillants potentiels développés par une application Android. La détection est...

r2frida

r2frida Radare2 and Frida better together Description Self-contained plugin for radare2 that ships frida and allows to instrument local or remote processes using r2 commands instead but not limited to Frida scripts. The radare project provides a complete toolchain for reverse engineering, it's...

AndBug

AndBug -- Un debugger Android scriptabile AndBug è un debugger rivolto alla macchina virtuale Dalvik della piattaforma Android, pensato per ingegneri inversi e sviluppatori. Utilizza le stesse interfacce del plugin di debugging Eclipse di Android, il Java Debug Wire Protocol JDWP e il Dalvik Debu...

smali

Informazioni smali/baksmali è un assemblatore/disassemblatore per il formato dex utilizzato da dalvik, l'implementazione della Java VM di Android. La sintassi è liberamente basata sulla sintassi di Jasmin/dedexer e supporta l'intera funzionalità del formato dex annotazioni, informazioni di debug,...

enjarify

Nota: Questo repository potrebbe essere obsoleto. Lo sviluppo futuro avverrà su https://github.com/Storyyeller/enjarify. Introduzione Enjarify è uno strumento per tradurre bytecode Dalvik in bytecode Java equivalente. Ciò consente agli strumenti di analisi Java di analizzare applicazioni Android...

trueseeing

README trueseeing ist ein schneller, genauer und robuster Schwachstellenscanner für iOS-/Android-Apps. Wir arbeiten auf der Dalvik-VM-Ebene für Android – d.h. es ist uns egal, ob die Ziel-App obfuskiert ist oder nicht. Fähigkeiten Derzeit können wir: Automatisches Scannen der App auf...

droidlysis

DroidLysis DroidLysis is a pre-analysis tool for Android apps : it performs repetitive and boring tasks we'd typically do at the beginning of any reverse engineering. It disassembles the Android sample, organizes output in directories, and searches for suspicious spots in the code to look at. The...

GDA-android-reversing-Tool

ˇ GDAGJoy Dex Analyzer GDA, C++ में लागू एक शक्तिशाली Dalvik बाइटकोड डीकंपाइलर है, जिसमें तेज विश्लेषण, कम मेमोरी और डिस्क खपत तथा apk, dex, odex, oat, jar, class, aar फ़ाइलों को डीकंपाइल करने की अधिक क्षमता के लाभ हैं। GDA पूरी तरह से नेटिव सॉफ्टवेयर है और बिना किसी सेटअप या Java VM के काम करता...

EUVD-2009-3671

Malware in sbrugna...

EUVD-2019-6342

Malware in sbrugna...

Linux Distros Unpatched Vulnerability : CVE-2017-9520

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The rconfigset function in libr/config/config.c in radare2 1.5.0 allows remote attackers to cause a denial of service use-after-free and application crash via a...

Linux Distros Unpatched Vulnerability : CVE-2017-6448

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The dalvikdisassemble function in libr/asm/p/asmdalvik.c in radare2 1.2.1 allows remote attackers to cause a denial of service stack-based buffer overflow and...

CVE-2019-15346

The Tecno Camon iClick 2 Android device with a build fingerprint of TECNO/H622/TECNO-ID6:8.1.0/O11019/F-180824V116:user/release-keys contains a pre-installed platform app with a package name of com.lovelyfont.defcontainer versionCode=7, versionName=7.0.11. This app contains an exported service...

CVE-2015-9547

An issue was discovered on Samsung mobile devices with JBP4.3 and KK4.4.2 software. Because the READLOGS permission is mishandled, sensitive information is disclosed in a world-readable copy of the log file if the error message is "Unhandled exception in Dalvik VM," "Application not responding AN...

Fedora: Security Advisory for enjarify (FEDORA-2024-129d8ca6fc)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] Fedora 40 Update: enjarify-1.0.3-35.fc40

Android applications are Java programs that run on a customized virtual machine, which is part of the Android operating system, the Dalvik VM. Their bytecode differs from the bytecode of normal Java applications. Enjarify can translate the Dalvik bytecode back to equivalent Java bytecode, which...

Fluhorse: Flutter-Based Android Malware Targets Credit Cards and 2FA Codes

Cybersecurity researchers have shared the inner workings of an Android malware family called Fluhorse. The malware "represents a significant shift as it incorporates the malicious components directly within the Flutter code," Fortinet FortiGuard Labs researcher Axelle Apvrille said in a report...

PT-2022-23135 · Rizin · Rizin

Name of the Vulnerable Software and Affected Versions: Rizin versions 0.4.0 and prior Description: The issue affects a UNIX-like reverse engineering framework and command-line toolset, allowing an attacker to execute code on a user's machine when a malicious DEX file is opened. This is due to an...

ASB-A-206090748

In multiple functions of odsignmain.cpp, there is a possible way to persist system attack due to a logic error in the code. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation...