132 matches found
android-hardware-attestation-demo
Bypass dell'attestazione hardware Android — demo Questo repository accompagna un articolo di Quarkslab sull'attestazione delle chiavi hardware Android e serve a illustrarla. È una piccola prova di concetto end-to-end che mostra un semplice bypass: un analista su un telefono rooted supera il...
dsploit
dSploit - Una suite di penetrazione di rete per Android. Copyleft di Simone Margaritelli aka evilsocket. http://www.dsploit.net/ http://www.evilsocket.net/ dSploit è una suite di analisi di rete e penetration testing per Android che mira a offrire a esperti/geek di sicurezza IT il toolkit...
ADEL
ADEL - Estrattore Dati Android Lite Questo script Python estrae tutti i database SQLite importanti da uno smartphone Android connesso al disco locale e analizza questi file in un flusso di lavoro forense accurato. Se nessuno smartphone è connesso, puoi specificare una directory locale che contien...
apkSneeze
apkSneeze v2.0.0 Uno strumento che automatizza le attività banali del penetration testing di app Android. Lo strumento attualmente fornisce le seguenti funzionalità: 1. Decompila il file apk fornito. 2. Converte il file apk fornito in un file Jar. 3. Cerca nei file decompilati stringhe...
android_hid
androidhid Use Android as Rubber Ducky against targeted Android device or PC HID attack using Android Using Android as Rubber Ducky against Android or Windows. This is not a new technique, just a demo how to perform HID attack using Android instead of rubber ducky. For targeted Android device it ...
twiga
Twiga A tool that enumerates Android devices for information useful in understanding its internals and for exploit development. It supports android 4.2 to android 7.1.1 Requirements The most current ADB must be in your path and fully functional The report name must not have any whitespace...
frida-c2-mcp
FridaC2MCP एक MCP सर्वर जिसमें स्ट्रीमेबल HTTP ट्रांसपोर्ट है जो Frida की डायनामिक इंस्ट्रुमेंटेशन को पूरी तरह से डिवाइस पर ही चलाता है — क्लाइंट-साइड किसी टूलिंग की आवश्यकता नहीं। यह प्रोजेक्ट सीधे रूट किए गए Android और जेलब्रेक किए गए iOS डिवाइसों पर चलता है , Frida को HTTP पर कॉल करने योग्य...
tap-ducky
TapDucky - Iniettore di sequenze di tasti HID USB per Android TapDucky - Iniettore di sequenze di tasti HID USB per Android Eseguire script DuckyScript open-source per Android rooted con supporto USB Gadget ConfigFS TapDucky ti permette di creare, personalizzare, programmare ed eseguire DuckyScri...
CVE-2026-68083 ksmbd: fix path resolution in ksmbd_vfs_kern_path_create
In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix path resolution in ksmbdvfskernpathcreate The SMB2 open lookup is rooted at the share with LOOKUPBENEATH, but the create/mkdir/hardlink sink is not: ksmbdvfskernpathcreate builds an absolute path with converttounixname...
CVE-2026-47362
In versions of the Datadog Android application prior to v554-5.9.4, two Room-backed SQLite databases store sensitive content in plaintext: LocalNotificationDatabase notification title, message, recipient, service, tags, and on-call/incident deep links and SearchRecentDatabase the user's full in-a...
CVE-2026-47362
Datadog Android app stores operationally sensitive content in plaintext SQLite databases via Room. Two databases analyzed: LocalNotificationDatabase (local_notifications; title, message, recipient, service, tags, on‑call/incident deeplinks) and SearchRecentDatabase (search_recents; stores every i...
Directory Traversal
Overview Affected versions of this package are vulnerable to Directory Traversal via the ExtractRelativeToDirectoryAsync path handling in src/libraries/System.Formats.Tar/src/System/Formats/Tar/TarEntry.cs. An attacker can create a tar archive that extracts a symbolic link whose target is a roote...
GHSA-PRXJ-3GCV-CQRH Tesla Fleet Telemetry allows spoofing telemetry for arbitrary vehicles via compromised vehicle credentials
Summary A vulnerability in vehicle authentication allows threat actor with valid client credentials i.e., a private key and certificate from a rooted infotainment system to impersonate arbitrary VINs when authenticating to the telemetry server. Impact The attacker would be able to submit falsifie...
CVE-2021-22336
There is an Improper Control of Generation of Code vulnerability in Huawei Smartphone. Successful exploitation of this vulnerability may cause denial of security services on a rooted device...
CVE-2025-61670
Wasmtime is a runtime for WebAssembly. Wasmtime 37.0.0 and 37.0.1 have memory leaks in the C/C++ API when using bindings for the anyref or externref WebAssembly values. This is caused by a regression introduced during the development of 37.0.0 and all prior versions of Wasmtime are unaffected. If...
CVE-2025-61670
Wasmtime is a runtime for WebAssembly. Wasmtime 37.0.0 and 37.0.1 have memory leaks in the C/C++ API when using bindings for the anyref or externref WebAssembly values. This is caused by a regression introduced during the development of 37.0.0 and all prior versions of Wasmtime are unaffected. If...
EUVD-2025-32904
Wasmtime is a runtime for WebAssembly. Wasmtime 37.0.0 and 37.0.1 have memory leaks in the C/C++ API when using bindings for the anyref or externref WebAssembly values. This is caused by a regression introduced during the development of 37.0.0 and all prior versions of Wasmtime are unaffected. If...
EUVD-2018-13330
Malware in sbrugna...
PT-2025-41158
Name of the Vulnerable Software and Affected Versions Wasmtime versions 37.0.0 through 37.0.1 Description Wasmtime, a runtime for WebAssembly, contains memory leaks within its C/C++ API when utilizing bindings for anyref or externref WebAssembly values. This issue stems from a regression introduc...