trueseeing

自述文件 trueseeing 是一款快速、准确且坚韧的 iOS/Android 应用漏洞扫描器。我们在 Android 的 Dalvik 虚拟机层面运行——即，我们不关心目标应用是否被混淆。 功能特性 目前我们能够： 自动扫描应用漏洞，以 HTML/JSON/文本格式输出报告（见下文） 对应用进行操作以简化分析：例如启用调试位、启用完整备份、禁用 TLS 证书绑定、操纵目标 API 级别、注入 frida-gadget 等。 检查应用的一般信息 通过调试接口复制应用数据进出 搜索特定的调用/常量/sput/iput 推导操作参数的常量/类型集 扫描原生代码的 API/私有调用（注意：你...

AndBug

AndBug -- スクリプト可能なAndroidデバッガ AndBugは、リバースエンジニアや開発者を対象とした、AndroidプラットフォームのDalvik仮想マシン向けのデバッガです。AndroidのEclipseデバッグプラグインと同じインターフェース、Java Debug Wire Protocol JDWP および Dalvik Debug Monitor DDM を使用して、ユーザーがDalvikメソッドをフックしたり、プロセス状態を調査したり、さらには変更を加えることを可能にします。 Googleの公式Android...

trueseeing v2.2.11

README trueseeing is a fast, accurate and resillient vulnerability scanner for iOS/Android apps. We operate on the Dalvik VM level for Android -- i.e. we don't care if the target app is obfuscated or not. Capability Currently we can: Automatically scan app for vulnerabilities, reporting in...

CVE-2015-9547

An issue was discovered on Samsung mobile devices with JBP4.3 and KK4.4.2 software. Because the READLOGS permission is mishandled, sensitive information is disclosed in a world-readable copy of the log file if the error message is "Unhandled exception in Dalvik VM," "Application not responding AN...

[SECURITY] Fedora 40 Update: enjarify-1.0.3-35.fc40

Android applications are Java programs that run on a customized virtual machine, which is part of the Android operating system, the Dalvik VM. Their bytecode differs from the bytecode of normal Java applications. Enjarify can translate the Dalvik bytecode back to equivalent Java bytecode, which...

Design/Logic Flaw

An issue was discovered on Samsung mobile devices with JBP4.3 and KK4.4.2 software. Because the READLOGS permission is mishandled, sensitive information is disclosed in a world-readable copy of the log file if the error message is "Unhandled exception in Dalvik VM," "Application not responding AN...

PT-2020-7918

Name of the Vulnerable Software and Affected Versions: Samsung mobile devices with JBP4.3 software Samsung mobile devices with KK4.4.2 software Description: An issue was discovered on Samsung mobile devices where the READ LOGS permission is mishandled. This mishandling discloses sensitive...

Roaming Mantis uses DNS hijacking to infect Android smartphones

In March 2018, Japanese media reported the hijacking of DNS settings on routers located in Japan, redirecting users to malicious IP addresses. The redirection led to the installation of Trojanized applications named facebook.apk and chrome.apk that contained Android Trojan-Banker. According to ou...

[Drozer] The Leading Security Testing Framework for Android.

drozer enables you to search for security vulnerabilities in apps and devices by assuming the role of an app and interacting with the Dalvik VM, other apps’ IPC endpoints and the underlying OS. drozer provides tools to help you use and share public Android exploits. It helps you to deploy a droze...