android-hardware-attestation-demo

Android 하드웨어 증명 우회 — 데모 이 저장소는 Android 하드웨어 키 증명Key Attestation에 관한 Quarkslab 기사와 함께 제공되며, 이를 예시로 보여주기 위해 존재합니다. 루팅된 휴대폰의 분석가가 릴레이relaying를 통해 백엔드의 하드웨어 증명 검사를 우회하는 간단한 방법을 보여주는 소규모 엔드투엔드 개념 증명입니다. 어떤 것도 위조되지 않습니다. 수정되지 않은 장치에서 생성되고 백엔드 자체 논스nonce에 바인딩된 진짜 증명 체인이 루팅된 장치의 거부된 체인 대신 전달됩니다. 범위 및 윤리....

apkSneeze

apkSneeze v2.0.0 Инструмент, который автоматизирует рутинные задачи тестирования Android-приложений на проникновение. В настоящее время инструмент предоставляет следующие возможности: 1. Декомпилирует указанный apk-файл. 2. Преобразует указанный apk-файл в JAR-файл. 3. Ищет в декомпилированных...

android_hid

androidhid Use Android as Rubber Ducky against targeted Android device or PC HID attack using Android Using Android as Rubber Ducky against Android or Windows. This is not a new technique, just a demo how to perform HID attack using Android instead of rubber ducky. For targeted Android device it ...

twiga

Twiga A tool that enumerates Android devices for information useful in understanding its internals and for exploit development. It supports android 4.2 to android 7.1.1 Requirements The most current ADB must be in your path and fully functional The report name must not have any whitespace...

dsploit

dSploit - Комплект для тестирования на проникновение в сетях Android. Copyleft Simone Margaritelli aka evilsocket. http://www.dsploit.net/ http://www.evilsocket.net/ dSploit - это Android-набор для анализа сетей и тестирования на проникновение, который предлагает ИТ-экспертам/гикам самый полный и...

ADEL

ADEL - 안드로이드 데이터 추출기 Lite 이 Python 스크립트는 연결된 Android 스마트폰에서 중요한 모든 SQLite 데이터베이스를 로컬 디스크로 덤프하고, 포렌식적으로 정확한 워크플로우로 이러한 파일들을 분석합니다. 스마트폰이 연결되어 있지 않은 경우, 분석하려는 데이터베이스가 포함된 로컬 디렉토리를 지정할 수 있습니다. 그런 다음 이 스크립트는 명확하게 구조화된 XML 보고서를 생성합니다. 스마트폰을 연결하려면 루팅되고 보안이 해제된 커널 또는 커스텀 리커버리가 스마트폰에 설치되어 있어야 합니다. ADEL이...

CVE-2021-22336

There is an Improper Control of Generation of Code vulnerability in Huawei Smartphone. Successful exploitation of this vulnerability may cause denial of security services on a rooted device...

EUVD-2018-13330

Malware in sbrugna...

EUVD-2024-50589

Malicious code in bioql PyPI...

PT-2025-39852

Name of the Vulnerable Software and Affected Versions Payeer Android application version 2.5.0 Description An improper access control issue exists in the authentication process for changing the PIN in the Payeer Android application. A local attacker with root access to the device can bypass the P...

CVE-2023-20857

VMware Workspace ONE Content contains a passcode bypass vulnerability. A malicious actor, with access to a users rooted device, may be able to bypass the VMware Workspace ONE Content passcode...

CVE-2024-12094

This vulnerability exists in the Tinxy mobile app due to storage of logged-in user information in plaintext on the device database. An attacker with physical access to the rooted device could exploit this vulnerability by accessing its database leading to unauthorized access of user information...

CVE-2024-12094

CVE-2024-12094 concerns the Tinxy mobile app, where logged-in user information is stored in plaintext on the device database. The underlying issue is storage of sensitive data on the device, which can lead to unauthorized access to usernames, email addresses, and mobile numbers if an attacker gai...

CVE-2024-12094 Information Disclosure Vulnerability in Tinxy

This vulnerability exists in the Tinxy mobile app due to storage of logged-in user information in plaintext on the device database. An attacker with physical access to the rooted device could exploit this vulnerability by accessing its database leading to unauthorized access of user information...

CVE-2024-30111

HCL DRYiCE AEX product is impacted by Missing Root Detection vulnerability in the mobile application. The mobile app can be installed in the rooted device due to which malicious users can gain unauthorized access to the rooted devices, compromising security and potentially leading to data breache...

CVE-2024-30111

The CVE-2024-30111 entry concerns HCL DRYiCE AEX mobile app with a Missing Root Detection vulnerability. Connected sources (EUVD-2024-28047, NVD/NVD-like records, CVE list) indicate the vulnerability affects DRYiCE AEX v10 and is tied to rooted-device bypass, enabling unauthorized access on roote...

CVE-2024-30111 Missing Root Detection vulnerability affects DRYiCE AEX v10

HCL DRYiCE AEX product is impacted by Missing Root Detection vulnerability in the mobile application. The mobile app can be installed in the rooted device due to which malicious users can gain unauthorized access to the rooted devices, compromising security and potentially leading to data breache...

CVE-2024-30111 Missing Root Detection vulnerability affects DRYiCE AEX v10

HCL DRYiCE AEX product is impacted by Missing Root Detection vulnerability in the mobile application. The mobile app can be installed in the rooted device due to which malicious users can gain unauthorized access to the rooted devices, compromising security and potentially leading to data breache...

CVE-2023-20857

VMware Workspace ONE Content contains a passcode bypass vulnerability. A malicious actor, with access to a users rooted device, may be able to bypass the VMware Workspace ONE Content passcode...

CVE-2023-20857

VMware Workspace ONE Content contains a passcode bypass vulnerability. A malicious actor, with access to a users rooted device, may be able to bypass the VMware Workspace ONE Content passcode...