apkSneeze

apkSneeze v2.0.0 Инструмент, который автоматизирует рутинные задачи тестирования Android-приложений на проникновение. В настоящее время инструмент предоставляет следующие возможности: 1. Декомпилирует указанный apk-файл. 2. Преобразует указанный apk-файл в JAR-файл. 3. Ищет в декомпилированных...

twiga

Twiga A tool that enumerates Android devices for information useful in understanding its internals and for exploit development. It supports android 4.2 to android 7.1.1 Requirements The most current ADB must be in your path and fully functional The report name must not have any whitespace...

ADEL

ADEL - Легкий извлекатель данных Android Этот скрипт на Python извлекает все важные базы данных SQLite с подключенного Android-смартфона на локальный диск и анализирует эти файлы в криминалистически точном рабочем процессе. Если смартфон не подключен, вы можете указать локальный каталог, содержащ...

dsploit

dSploit - Комплект для тестирования на проникновение в сетях Android. Copyleft Simone Margaritelli aka evilsocket. http://www.dsploit.net/ http://www.evilsocket.net/ dSploit - это Android-набор для анализа сетей и тестирования на проникновение, который предлагает ИТ-экспертам/гикам самый полный и...

android-hardware-attestation-demo

Android ハードウェア構成証明バイパス — デモ このリポジトリは、Android ハードウェア Key Attestation に関する Quarkslab の記事 に付随し、その内容を説明するためのものです。 これは、単純なバイパスを示す小規模なエンドツーエンドの概念実証（PoC）です。root化された電話機を使うアナリストが、構成証明を2台目のクリーンなデバイスにリレー することで、バックエンドのハードウェア構成証明チェックを無効化します。何も偽造されていません。未改変のデバイスが生成し、バックエンド自身の nonce...

android_hid

androidhid Use Android as Rubber Ducky against targeted Android device or PC HID attack using Android Using Android as Rubber Ducky against Android or Windows. This is not a new technique, just a demo how to perform HID attack using Android instead of rubber ducky. For targeted Android device it ...

CVE-2021-22336

There is an Improper Control of Generation of Code vulnerability in Huawei Smartphone. Successful exploitation of this vulnerability may cause denial of security services on a rooted device...

EUVD-2018-13330

Malware in sbrugna...

EUVD-2024-50589

Malicious code in bioql PyPI...

PT-2025-39852

Name of the Vulnerable Software and Affected Versions Payeer Android application version 2.5.0 Description An improper access control issue exists in the authentication process for changing the PIN in the Payeer Android application. A local attacker with root access to the device can bypass the P...

CVE-2023-20857

VMware Workspace ONE Content contains a passcode bypass vulnerability. A malicious actor, with access to a users rooted device, may be able to bypass the VMware Workspace ONE Content passcode...

CVE-2024-12094

This vulnerability exists in the Tinxy mobile app due to storage of logged-in user information in plaintext on the device database. An attacker with physical access to the rooted device could exploit this vulnerability by accessing its database leading to unauthorized access of user information...

CVE-2024-12094 Information Disclosure Vulnerability in Tinxy

This vulnerability exists in the Tinxy mobile app due to storage of logged-in user information in plaintext on the device database. An attacker with physical access to the rooted device could exploit this vulnerability by accessing its database leading to unauthorized access of user information...

CVE-2024-12094

CVE-2024-12094 concerns the Tinxy mobile app, where logged-in user information is stored in plaintext on the device database. The underlying issue is storage of sensitive data on the device, which can lead to unauthorized access to usernames, email addresses, and mobile numbers if an attacker gai...

CVE-2024-12094: Cleartext Storage of Sensitive Information

This vulnerability exists in the Tinxy mobile app due to storage of logged-in user information in plaintext on the device database. An attacker with physical access to the rooted device could exploit this vulnerability by accessing its database leading to unauthorized access of user information...

CVE-2024-30111

HCL DRYiCE AEX product is impacted by Missing Root Detection vulnerability in the mobile application. The mobile app can be installed in the rooted device due to which malicious users can gain unauthorized access to the rooted devices, compromising security and potentially leading to data breache...

CVE-2024-30111

The CVE-2024-30111 entry concerns HCL DRYiCE AEX mobile app with a Missing Root Detection vulnerability. Connected sources (EUVD-2024-28047, NVD/NVD-like records, CVE list) indicate the vulnerability affects DRYiCE AEX v10 and is tied to rooted-device bypass, enabling unauthorized access on roote...

CVE-2024-30111 Missing Root Detection vulnerability affects DRYiCE AEX v10

HCL DRYiCE AEX product is impacted by Missing Root Detection vulnerability in the mobile application. The mobile app can be installed in the rooted device due to which malicious users can gain unauthorized access to the rooted devices, compromising security and potentially leading to data breache...

CVE-2024-30111 Missing Root Detection vulnerability affects DRYiCE AEX v10

HCL DRYiCE AEX product is impacted by Missing Root Detection vulnerability in the mobile application. The mobile app can be installed in the rooted device due to which malicious users can gain unauthorized access to the rooted devices, compromising security and potentially leading to data breache...

CVE-2023-20857

VMware Workspace ONE Content contains a passcode bypass vulnerability. A malicious actor, with access to a users rooted device, may be able to bypass the VMware Workspace ONE Content passcode...