Tools

topjohnwu/magisk

Android customization suite providing root access (MagiskSU), systemless module installation, boot image unpacking/repacking, and Zygisk runtime code…

webldix/cve-2024-31317-poc-deployer

Automated deployment tool for CVE-2024-31317 PoC on Android 9-13, enabling privilege escalation via Zygote injection and reverse shell execution.

gmh5225/awesome-game-security

Curated index of game security research: anti-cheat internals, DMA attacks, reverse engineering, kernel/mobile protections, and graphics API hooking…

bkerler/mtkclient

Mediatek Flash and Repair Utility

osuni-99/cve-2019-6447

The above investigation of the ES file browser security weakness allows us to see the issue in its entirety

nighthawkk/audioserver-voip-recorder

🔬 An advanced Android research tool for real-time VoIP audio capture (Uplink/Downlink) by dynamically hooking libaudioflinger.so. Tested and built…

m4sc3r4n0/evil-droid

Framework to create, generate, and embed APK payloads for Android penetration testing, leveraging Metasploit for exploitation and Apktool for…

michalbednarski/reparcelbug2

Writeup and exploit for installed app to system privilege escalation on Android 12 Beta through CVE-2021-0928, a `writeToParcel`/`createFromParcel`…

michalbednarski/thelastbundlemismatch

Writeup and exploit for CVE-2023-45777, bypass for Intent validation inside AccountManagerService on Android 13 despite "Lazy Bundle" mitigation

michalbednarski/organizertransaction

PoC for CVE-2021-39749, allowing starting arbitrary Activity on Android 12L Beta

fixedoctocat/cve-2024-25466

Description for CVE-2024-25466

satheesh575555/external_wpa_supplicant_8_aosp10_r33_cve-2021-0516

Proof-of-concept exploit for CVE-2021-0516 in wpa_supplicant on AOSP 10, demonstrating a buffer overflow vulnerability in Wi-Fi authentication.

k4ran909/cve_2024_0044

CVE-2024-0044: a "run-as any app" high-severity vulnerability affecting Android versions 12 and 13

michalbednarski/resourcepoison

Writeup and exploit for CVE-2025-22441: Privilege escalation from installed app to SystemUI process on Android due to pass of untrusted…

spiralbl0ck/guide-and-theoretical-code-for-cve-2023-35674

Guide and theoretical code for CVE-2023-35674

justsoman/cve-2026-43499-jinghu

CVE-2026-43499 exploit reproduction on jinghu (Xiaomi Pad 7 Ultra)

tegal1337/cilocks

Crack Interface lockscreen, Metasploit and More Android/IOS Hacking