Lucene search
+L

16 matches found

Kitploit
Kitploit
added 2026/09/15 6:26 a.m.20 views

objection

📱objection - Runtime Mobile Exploration objection is a runtime mobile exploration toolkit, powered by Frida, built to help you assess the security posture of your mobile applications, without needing a jailbreak. Supports both iOS and Android. Inspect and interact with container file systems...

5.8AI score
SaveExploits0References3
Kitploit
Kitploit
added 2026/09/15 6:26 a.m.9 views

objection

📱objection - 运行时移动探索工具 objection 是一个运行时移动探索工具包,基于 Frida,旨在帮助你评估移动应用的安全状况,无需越狱。 支持 iOS 和 Android。 检查并交互容器文件系统。 绕过 SSL 证书固定。 导出钥匙串。 执行内存相关任务,例如转储与修补。 探索并操作堆上的对象。 还有更多更多功能... 截图可在wiki中查看。 安装 安装非常简单,只需执行 pip3 install objection。这将为你提供 objection 命令。你可以通过 pip3 install --upgrade objection 更新现有的 objection...

5.9AI score
SaveExploits0References3
Kitploit
Kitploit
added 2026/09/14 10:51 p.m.6 views

Apepe

📲 Apepe 📲 基于APK文件枚举应用信息 🕵️ 什么是 Apepe? 🕵️ Apepe 是一个项目,旨在帮助通过 APK 文件捕获 Android 应用的信息。它可用于提取内容、获取应用设置、根据检测到的应用语言建议 SSL Pinning 绕过方法、提取 AndroidManifest.xml、JSON 和 DEX 文件中的深层链接。 ⚡ 快速开始 安装和使用 Apepe 的快速指南。 1. git clone https://github.com/oppsec/Apepe.git 2. pip install -r requirements.txt...

5.9AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/12 6:16 a.m.9 views

MobileApp-Pentest-Cheatsheet

Mobile Application Penetration Testing Cheat Sheet La hoja de referencia de pentest de aplicaciones móviles fue creada para proporcionar una colección concisa de información de alto valor sobre temas específicos de pruebas de penetración en aplicaciones móviles y una lista de verificación, que es...

5.9AI score
SaveExploits0References48
Kitploit
Kitploit
added 2026/09/11 10:12 p.m.9 views

ssl-kill-switch3

SSL Kill Switch 3 ¡La próxima generación del tweak de iOS SSLKillSwitch https://github.com/nabla-c0d3/ssl-kill-switch2 con muchas más funcionalidades! ¿Qué hay de nuevo? CORREGIDO Soporte Fishhook iOS 15+, ARM64/ARM64e, para que puedas engancharte en la era sin jailbreak CORREGIDO Soporte Rootles...

5.9AI score
SaveExploits0References4
EUVD
EUVD
added 2025/10/07 12:30 a.m.9 views

EUVD-2017-16230

Malware in sbrugna...

7.5CVSS7.6AI score0.01905EPSS
SaveExploits1References4
RedhatCVE
RedhatCVE
added 2025/06/14 8:17 p.m.10 views

CVE-2025-6031

Amazon Cloud Cam is a home security camera that was deprecated on December 2, 2022, is end of life, and is no longer actively supported. When a user powers on the Amazon Cloud Cam, the device attempts to connect to a remote service infrastructure that has been deprecated due to end-of-life status...

7.7CVSS7.6AI score0.00304EPSS
SaveExploits0References1
NVD
NVD
added 2025/06/12 8:15 p.m.19 views

CVE-2025-6031

Amazon Cloud Cam is a home security camera that was deprecated on December 2, 2022, is end of life, and is no longer actively supported. When a user powers on the Amazon Cloud Cam, the device attempts to connect to a remote service infrastructure that has been deprecated due to end-of-life status...

7.7CVSS0.00304EPSS
SaveExploits0References1
CVE
CVE
added 2025/06/12 7:29 p.m.65 views

CVE-2025-6031

CVE-2025-6031 concerns the now-deprecated Amazon Cloud Cam. The vulnerability arises from the device’s default pairing state, which can allow an arbitrary user to bypass SSL pinning and associate the camera with any network, enabling interception and modification of network traffic. Affected prod...

7.7CVSS7.2AI score0.00304EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2025/06/12 12:00 a.m.17 views

PT-2025-25352 · Amazon · Amazon Cloud Cam

Name of the Vulnerable Software and Affected Versions: Amazon Cloud Cam affected versions not specified Description: The issue concerns a home security camera that is no longer supported due to its end-of-life status. When powered on, the device attempts to connect to a deprecated remote service...

7.7CVSS6.7AI score0.00304EPSS
SaveExploits0References9
Vulnrichment
Vulnrichment
added 2024/10/08 6:14 a.m.16 views

CVE-2024-7206 Firmware extraction and Hardware SSL Pinning Bypass

SSL Pinning Bypass in eWeLink Some hardware products allows local ATTACKER to Decrypt TLS communication and Extract secrets to clone the device via Flash the modified firmware...

7CVSS7.1AI score0.00237EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2024/10/08 6:14 a.m.53 views

CVE-2024-7206 Firmware extraction and Hardware SSL Pinning Bypass

SSL Pinning Bypass in eWeLink Some hardware products allows local ATTACKER to Decrypt TLS communication and Extract secrets to clone the device via Flash the modified firmware...

7CVSS0.00237EPSS
SaveExploits0References1
Kitploit
Kitploit
added 2019/07/12 10:13 p.m.328 views

Objection v1.6.6 - Runtime Mobile Exploration

objection is a runtime mobile exploration toolkit, powered by Frida. It was built with the aim of helping assess mobile applications and their security posture without the need for a jailbroken or rooted mobile device. Note: This is not some form of jailbreak / root bypass. By using objection, yo...

7.1AI score
SaveExploits0References3
zdt
zdt
added 2017/04/21 12:00 a.m.75 views

Starscream 2.0.3 SSL Pinning Bypass Vulnerability

WebSocket.swift in Starscream versions 2.0.3 and below allows an SSL Pinning bypass because of incorrect management of the certValidated variable it can be set to true but cannot be set to false. An attacker can achieve traffic interception from a man-in-the-middle position, first by resetting th...

5CVSS7.3AI score0.01905EPSS
SaveExploits1
OSV
OSV
added 2017/04/06 2:59 p.m.13 views

CVE-2017-7192

WebSocket.swift in Starscream before 2.0.4 allows an SSL Pinning bypass because of incorrect management of the certValidated variable it can be set to true but cannot be set to false...

7.5CVSS6.8AI score
SaveExploits0References3
Cvelist
Cvelist
added 2017/04/06 2:00 p.m.22 views

CVE-2017-7192

WebSocket.swift in Starscream before 2.0.4 allows an SSL Pinning bypass because of incorrect management of the certValidated variable it can be set to true but cannot be set to false...

7.5AI score0.01905EPSS
SaveExploits1References3
Rows per page
Query Builder