16 matches found
objection
📱objection - Runtime Mobile Exploration objection is a runtime mobile exploration toolkit, powered by Frida, built to help you assess the security posture of your mobile applications, without needing a jailbreak. Supports both iOS and Android. Inspect and interact with container file systems...
objection
📱objection - 运行时移动探索工具 objection 是一个运行时移动探索工具包,基于 Frida,旨在帮助你评估移动应用的安全状况,无需越狱。 支持 iOS 和 Android。 检查并交互容器文件系统。 绕过 SSL 证书固定。 导出钥匙串。 执行内存相关任务,例如转储与修补。 探索并操作堆上的对象。 还有更多更多功能... 截图可在wiki中查看。 安装 安装非常简单,只需执行 pip3 install objection。这将为你提供 objection 命令。你可以通过 pip3 install --upgrade objection 更新现有的 objection...
Apepe
📲 Apepe 📲 基于APK文件枚举应用信息 🕵️ 什么是 Apepe? 🕵️ Apepe 是一个项目,旨在帮助通过 APK 文件捕获 Android 应用的信息。它可用于提取内容、获取应用设置、根据检测到的应用语言建议 SSL Pinning 绕过方法、提取 AndroidManifest.xml、JSON 和 DEX 文件中的深层链接。 ⚡ 快速开始 安装和使用 Apepe 的快速指南。 1. git clone https://github.com/oppsec/Apepe.git 2. pip install -r requirements.txt...
MobileApp-Pentest-Cheatsheet
Mobile Application Penetration Testing Cheat Sheet La hoja de referencia de pentest de aplicaciones móviles fue creada para proporcionar una colección concisa de información de alto valor sobre temas específicos de pruebas de penetración en aplicaciones móviles y una lista de verificación, que es...
ssl-kill-switch3
SSL Kill Switch 3 ¡La próxima generación del tweak de iOS SSLKillSwitch https://github.com/nabla-c0d3/ssl-kill-switch2 con muchas más funcionalidades! ¿Qué hay de nuevo? CORREGIDO Soporte Fishhook iOS 15+, ARM64/ARM64e, para que puedas engancharte en la era sin jailbreak CORREGIDO Soporte Rootles...
EUVD-2017-16230
Malware in sbrugna...
CVE-2025-6031
Amazon Cloud Cam is a home security camera that was deprecated on December 2, 2022, is end of life, and is no longer actively supported. When a user powers on the Amazon Cloud Cam, the device attempts to connect to a remote service infrastructure that has been deprecated due to end-of-life status...
CVE-2025-6031
Amazon Cloud Cam is a home security camera that was deprecated on December 2, 2022, is end of life, and is no longer actively supported. When a user powers on the Amazon Cloud Cam, the device attempts to connect to a remote service infrastructure that has been deprecated due to end-of-life status...
CVE-2025-6031
CVE-2025-6031 concerns the now-deprecated Amazon Cloud Cam. The vulnerability arises from the device’s default pairing state, which can allow an arbitrary user to bypass SSL pinning and associate the camera with any network, enabling interception and modification of network traffic. Affected prod...
PT-2025-25352 · Amazon · Amazon Cloud Cam
Name of the Vulnerable Software and Affected Versions: Amazon Cloud Cam affected versions not specified Description: The issue concerns a home security camera that is no longer supported due to its end-of-life status. When powered on, the device attempts to connect to a deprecated remote service...
CVE-2024-7206 Firmware extraction and Hardware SSL Pinning Bypass
SSL Pinning Bypass in eWeLink Some hardware products allows local ATTACKER to Decrypt TLS communication and Extract secrets to clone the device via Flash the modified firmware...
CVE-2024-7206 Firmware extraction and Hardware SSL Pinning Bypass
SSL Pinning Bypass in eWeLink Some hardware products allows local ATTACKER to Decrypt TLS communication and Extract secrets to clone the device via Flash the modified firmware...
Objection v1.6.6 - Runtime Mobile Exploration
objection is a runtime mobile exploration toolkit, powered by Frida. It was built with the aim of helping assess mobile applications and their security posture without the need for a jailbroken or rooted mobile device. Note: This is not some form of jailbreak / root bypass. By using objection, yo...
Starscream 2.0.3 SSL Pinning Bypass Vulnerability
WebSocket.swift in Starscream versions 2.0.3 and below allows an SSL Pinning bypass because of incorrect management of the certValidated variable it can be set to true but cannot be set to false. An attacker can achieve traffic interception from a man-in-the-middle position, first by resetting th...