#1Tools for assessing, testing, and exploiting mobile applications and devices (Android, iOS).
Kitploit recommended

Bash script to build your own system.prop
CVE-2024-0044: a "run-as any app" high-severity vulnerability affecting Android versions 12 and 13

a Ghidra framework for iOS kernelcache reverse engineering

Automated Android backdoor generator with crypter, IP poisoning, and Metasploit payload integration for penetration testing and red team operations.

CVE-2026-43499 full exploit chain for Samsung Galaxy S22 Ultra (Android 5.10 kernel)

Deterministic kernel exploit based on CVE-2023-32434.

AndroSH No-Root Multi-Distro Linux on Android via Shizuku/ADB - Run Arch, Fedora, Alpine, Debian, Ubuntu, Kali, Void, Manjaro, OpenSUSE & Chimera…

Collections of my POCs for android vendor CVEs

double-free bug in WhatsApp exploit poc

NOTICE This repository contains the public FTC SDK for the SKYSTONE (2019-2020) competition season. If you are looking for the current season's FTC…

Encrypted peer-to-peer mesh VPN for remote mobile forensics, enabling wireless ADB and libimobiledevice acquisition, network monitoring, and…

[Android RAT] Remotely manage your android phone using PHP Interface

Curated collection of offensive security conference slide decks covering kernel and mobile exploitation, VM/container escapes, and…

One-Step APK Decompilation With Multiple Backends

Bad Spin: Android Binder Privilege Escalation Exploit (CVE-2022-20421)

Solitude is a privacy analysis tool that enables anyone to conduct their own privacy investigations. Whether a curious novice or a more advanced…

Exploits for Android Binder bug CVE-2020-0041

Intentionally vulnerable Android application.