132 matches found
frida-c2-mcp
FridaC2MCP 一个基于流式 HTTP 传输的 MCP 服务器，完全在设备上运行 Frida 的动态插桩——无需客户端工具。 本项目直接在已 root 的 Android 和已越狱的 iOS 设备上运行 ，将 Frida 作为一组可通过 HTTP 调用的工具暴露出来。任何兼容 MCP 的客户端都可以连接到网络上的设备并执行动态插桩，而无需在本地安装任何 Frida 工具。 未来开发将主要面向Gemini CLI 和 Claude Code 作为主要客户端，因为它们都在原生构建多智能体编排和 MCP 支持——这与本项目将多个 MCP 服务器（例如 FridaC2MCP +...
tap-ducky
TapDucky - Android USB HID 击键注入器 TapDucky - Android USB HID 击键注入器 用于已 Root 安卓设备的开源 DuckyScript 执行器，支持 USB Gadget ConfigFS TapDucky 允许您通过模拟 USB 键盘、鼠标或复合 HID 设备，在 Android 上创建、自定义、调度和运行 DuckyScript，用于授权测试和自动化。它包括有效载荷参数化、多个调度器触发器、执行日志以及一个由 GitHub 支持的有效载荷库，具有自动 DuckyScript 验证和可选的 Digispark .ino 转换功能。 ...
android-hardware-attestation-demo
Android 硬件认证绕过 — 演示 本仓库是 Quarkslab 文章 的配套代码，该文章介绍 Android 硬件密钥认证（hardware Key Attestation），本仓库用于对其进行说明。 这是一个小型的端到端概念验证（proof of concept），展示了一种简单的绕过方式：已 root 手机上的分析人员通过将认证中继 到第二台干净设备，从而绕过后端的硬件认证检查。整个过程没有任何伪造。由未经修改的设备生成、且绑定到后端自身 nonce 的真实认证链，会被转发以替代已 root 设备被拒绝的认证链。 适用范围与伦理。 这是面向安全研究的教育材料。它使用明文...
android_hid
androidhid Use Android as Rubber Ducky against targeted Android device or PC HID attack using Android Using Android as Rubber Ducky against Android or Windows. This is not a new technique, just a demo how to perform HID attack using Android instead of rubber ducky. For targeted Android device it ...
twiga
Twiga A tool that enumerates Android devices for information useful in understanding its internals and for exploit development. It supports android 4.2 to android 7.1.1 Requirements The most current ADB must be in your path and fully functional The report name must not have any whitespace...
apkSneeze
apkSneeze v2.0.0 Androidアプリのペネトレーションテストにおける退屈な作業を自動化するツールです。 現在、このツールは以下の機能を提供します: 1. 提供されたAPKファイルを逆コンパイルします。 2. 提供されたAPKファイルをJarファイルに変換します。 3. 逆コンパイルされたファイルから興味深い文字列を検索します。 4. ADB over WiFiをセットアップします。 5. テストデバイスからAPKファイルをダウンロードします（root化されたデバイスが必要）。 Androidデバイス上の場所: /data/app/ 6...
dsploit
dSploit - Androidネットワーク侵入スイート Simone Margaritelli（別名evilsocket）のコピーレフト http://www.dsploit.net/ http://www.evilsocket.net/ dSploitは、ITセキュリティ専門家やギークに、モバイルデバイス上でネットワークセキュリティ評価を実行するための最も完全で高度なプロフェッショナルツールキット を提供することを目的とした、Android向けネットワーク分析・侵入スイートです。...
ADEL
ADEL - Android Data Extractor Lite Este script de Python vuelca todas las bases de datos SQLite importantes de un smartphone Android conectado al disco local y analiza estos archivos en un flujo de trabajo forense preciso. Si no hay ningún smartphone conectado, puedes especificar un directorio...
CVE-2026-68083 ksmbd: fix path resolution in ksmbd_vfs_kern_path_create
In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix path resolution in ksmbdvfskernpathcreate The SMB2 open lookup is rooted at the share with LOOKUPBENEATH, but the create/mkdir/hardlink sink is not: ksmbdvfskernpathcreate builds an absolute path with converttounixname...
CVE-2026-47362
Datadog Android app stores operationally sensitive content in plaintext SQLite databases via Room. Two databases analyzed: LocalNotificationDatabase (local_notifications; title, message, recipient, service, tags, on‑call/incident deeplinks) and SearchRecentDatabase (search_recents; stores every i...
CVE-2026-47362
In versions of the Datadog Android application prior to v554-5.9.4, two Room-backed SQLite databases store sensitive content in plaintext: LocalNotificationDatabase notification title, message, recipient, service, tags, and on-call/incident deep links and SearchRecentDatabase the user's full in-a...
Directory Traversal
Overview Affected versions of this package are vulnerable to Directory Traversal via the ExtractRelativeToDirectoryAsync path handling in src/libraries/System.Formats.Tar/src/System/Formats/Tar/TarEntry.cs. An attacker can create a tar archive that extracts a symbolic link whose target is a roote...
GHSA-PRXJ-3GCV-CQRH Tesla Fleet Telemetry allows spoofing telemetry for arbitrary vehicles via compromised vehicle credentials
Summary A vulnerability in vehicle authentication allows threat actor with valid client credentials i.e., a private key and certificate from a rooted infotainment system to impersonate arbitrary VINs when authenticating to the telemetry server. Impact The attacker would be able to submit falsifie...
CVE-2021-22336
There is an Improper Control of Generation of Code vulnerability in Huawei Smartphone. Successful exploitation of this vulnerability may cause denial of security services on a rooted device...
CVE-2025-61670
Wasmtime is a runtime for WebAssembly. Wasmtime 37.0.0 and 37.0.1 have memory leaks in the C/C++ API when using bindings for the anyref or externref WebAssembly values. This is caused by a regression introduced during the development of 37.0.0 and all prior versions of Wasmtime are unaffected. If...
CVE-2025-61670
Wasmtime is a runtime for WebAssembly. Wasmtime 37.0.0 and 37.0.1 have memory leaks in the C/C++ API when using bindings for the anyref or externref WebAssembly values. This is caused by a regression introduced during the development of 37.0.0 and all prior versions of Wasmtime are unaffected. If...
EUVD-2025-32904
Wasmtime is a runtime for WebAssembly. Wasmtime 37.0.0 and 37.0.1 have memory leaks in the C/C++ API when using bindings for the anyref or externref WebAssembly values. This is caused by a regression introduced during the development of 37.0.0 and all prior versions of Wasmtime are unaffected. If...
EUVD-2018-13330
Malware in sbrugna...
PT-2025-41158
Name of the Vulnerable Software and Affected Versions Wasmtime versions 37.0.0 through 37.0.1 Description Wasmtime, a runtime for WebAssembly, contains memory leaks within its C/C++ API when utilizing bindings for anyref or externref WebAssembly values. This issue stems from a regression introduc...