
AOSP-DownloadProviderDbDumperSQLiWhere
PoC Exploiting SQL Injection in Android's Download Provider in Selection Parameter (CVE-2019-2198)

PoC Exploiting SQL Injection in Android's Download Provider in Selection Parameter (CVE-2019-2198)

Python script to generate a malicious MP4 file and start a CherryPy web server hosting a simple HTML page with the embedded file. Exploits another…

Inspects, decompiles and structurally patches Hermes bytecode (HBC) from React Native apps, with a GDB-style REPL, CFG, decompiler and re-serializing…

Termux Privilege Escalation Tool & Root Manager - CVE-2026-43501

Root an Android Studio emulator by patching its ramdisk with Magisk — in pure Go.

PoC Exploiting SQL Injection in Android's Download Provider (CVE-2018-9493)

This is an Exploit App I made when solving the DocumentViewer challenge (CVE-2021-40724) from MobileHackingLab. It will download a libdocviewe_pro.so…

ADT is a toolset designed to help model application behavior, research and test security vulnerabilities, and facilitate reversing hostile code.

CVE-2024-23729

PoC Exploiting SQL Injection in Android's Download Provider in Sort Parameter (CVE-2019-2196)

ZTE SmartLife security findings leading to account takeover: 100K+ Google Play downloads and CVE-2026-86552 through CVE-2026-86555.

Ekoparty Miami | Interface Anti-Patterns: Exploiting Insecure Navigation in 3rd Party Android App Lockers

Reporte técnico sobre vulnerabilidad crítica de Xiaomi

SQLi CVE-2019-5454