devrodt2/cve-2026-28609-matroska-pcm-oobProof-of-concept and instrumented reproduction harness for CVE-2026-28609, an out-of-bounds write in Android's MatroskaExtractor reachable via a…
minanagehsalalma/zte-smartlife-app-pwnedZTE SmartLife security findings leading to account takeover: 100K+ Google Play downloads and CVE-2026-86552 through CVE-2026-86555.
infiniteloopers/cve-2019-2107Proof-of-concept exploit for CVE-2019-2107, demonstrating remote code execution via crafted HEVC video on Android media framework. Includes crash…
nccgroup/android_demystification_toolboxADT is a toolset designed to help model application behavior, research and test security vulnerabilities, and facilitate reversing hostile code.
boredpentester/abl_ropExperimenting with CVE-2022-20120 (Pixel Bootloader / ABL) using Unicorn, derived from eShard's emulator at…
r3n3r0/cve-2026-27280In-depth analysis and proof-of-concept for CVE-2026-27280, an out-of-bounds write in Adobe DNG SDK's dng_render_task::ProcessArea, reachable via…
hasan-khalil/cve-2020-6514Exploit for CVE-2020-6514 targeting WebRTC SCTP memory corruption in Android applications. Uses Frida to hook native functions and alter SCTP packets…
hunt-benito/one-multiply-too-many-cve-2026-70638-llama-cpp-android-jni-integer-overflowReproduces the CVE-2026-70638 integer overflow in llama.cpp Android JNI with a safe arithmetic demo, malicious GGUF generator, and Frida hook for…
yohanes/poc-cve-2025-31931Proof-of-concept exploit for CVE-2025-31931 demonstrating arbitrary shared library loading in Intel ITT API on Android, affecting OpenCV 4.10.
kanpol/pocforcve-2015-1528Proof-of-concept exploit for CVE-2015-1528 demonstrating privilege escalation on Android 5.0 via binder call fuzzing, with staged code injection into…
shacode/olyx🔗 Lightweight security orchestrator mobile application for URI vetting, providing a unified, multi-engine interface to aggregate and validate link…
tinopreter/docviewerexploitappThis is an Exploit App I made when solving the DocumentViewer challenge (CVE-2021-40724) from MobileHackingLab. It will download a libdocviewe_pro.so…
shaikusaf/external_wpa_supplicant_8_aosp10_r33cve-2021-0326Android Wi-Fi vulnerability research repository containing patched wpa_supplicant source for CVE-2021-0326, enabling analysis and testing of the…
trinadh465/external_sonivox_aosp10_r33_cve-2020-0381Analyzes and demonstrates CVE-2020-0381, a vulnerability in the Android sonivox audio engine, providing binary analysis and exploitation research for…
pushkarreddyy/radioguardZero-Trust Cellular Defense Sub-Service for Android (IMSI-Catcher, 2G SMS Blaster, and 4G aLTEr Detection & Safe Routing)
ch0pin/rdxA native APK and DEX decompiler written in Rust
bishopfox/mauidllExtract the managed (.NET) assemblies out of a MAUI Android assembly store.
