
trueseeing
Non-decompiling iOS/Android app vulnerability scanner (DC25 demo lab, CB17)

Non-decompiling iOS/Android app vulnerability scanner (DC25 demo lab, CB17)

Open-source web application security scanner for automated vulnerability detection, manual penetration testing, and API security testing with a…

A tool to scan Android devices for the recently exploited Qualcomm flaw CVE-2026-21385, providing a simple and efficient way to identify vulnerable…

fsp - Firestore Database Vulnerability Scanner Using APKs

A PoC tool for the CVE-2026-0073 on android 11+ devices which allows instant zero click RCE on any unpatched device with adb over tcp enabled

Modular Android APK security analysis framework integrating static, dynamic, and reverse engineering tools for comprehensive vulnerability assessment…

Simple detection tool for Blueborne vulnerability found on Android devices --- CVE-2017-0781.

Android app to scan for bash Vulnerability - CVE-2014-6271 also known as Shellshock

Proof-of-concept exploit for CVE-2022-0219, an XXE vulnerability in Jadx that allows local file disclosure when exporting malicious APK files via the…

Proof-of-concept code for Android APEX key reuse vulnerability

Android NFC package patched for CVE-2020-0453, addressing a security vulnerability in the NFC component.

Analyzes and demonstrates the Android Runtime vulnerability CVE-2021-0394, providing code-level insights for security researchers and developers.

the fastest and most powerful android decompiler(native tool working without Java VM) for the APK, DEX, ODEX, OAT, JAR, AAR, and CLASS file. which…

ES File Explorer Open Port Vulnerability - CVE-2019-6447

Extracts and investigates infrastructure (IPs, domains) from APK files, with manifest parsing and WHOIS lookup for mobile application reconnaissance.

PoC and red team app for CVE-2026-28576, a zero-permission SQL injection in the Android Contacts Provider enabling full contacts database…

Python script using r2pipe to detect CVE-2017-13208 in Android libnetutils.so by checking for missing dhcp_size validation via static binary analysis.

Static taint analysis platform for Android apps that detects vulnerabilities and compliance issues using customizable rule-based scanning and…