Tools

zhengxr930/maleval

Official code for the ISSTA 2026 paper: Is "Knowing It’s Malicious" Enough? Evaluating LLMs for Fine-Grained Malware Behavior Auditing

mobilehackinglab/cve-2026-0006-openapv-poc

CVE-2026-0006: Heap buffer overflow PoC for libopenapv (Android APV codec) - CVSS 9.8

michalbednarski/abxoverflow

Writeup and exploit for CVE-2024-34740, integer overflow in Android's BinaryXmlSerializer to system_server file write and then to system_server code…

symbioticsec/hermes-decomp

A powerful decompiler that lets you reverse-engineer React Native mobile apps by converting their compiled Hermes bytecode (.hbc) files back into…

haxatron/cve-2022-0219

Proof-of-concept exploit for CVE-2022-0219, an XXE vulnerability in Jadx that allows local file disclosure when exporting malicious APK files via the…

canyie/magiskeop

Exploit and writeup for installed app to root privilege escalation through CVE-2024-48336 (Magisk Bug #8279), Privileges Escalation / Arbitrary Code…

trinadh465/platform_packages_providers_mediaprovider_cve-2023-40127

Android MediaProvider vulnerability analysis and patch for CVE-2023-40127, focusing on security assessment and remediation.

trinadh465/platform_frameworks_base_cve-2023-21288

Android platform framework repository containing a patch or analysis for CVE-2023-21288, a vulnerability in the Android framework.

trinadh465/platform_frameworks_base_cve-2023-21281

Android platform framework patch for CVE-2023-21281, addressing a security vulnerability in the Android framework.

trinadh465/platform_art_cve-2021-0394

Analyzes and demonstrates the Android Runtime vulnerability CVE-2021-0394, providing code-level insights for security researchers and developers.

trinadh465/packages_apps_keychain_aosp10_r33_cve-2021-0963

Android KeyChain package with patch for CVE-2021-0963, addressing a security vulnerability in AOSP 10.

trinadh465/frameworks_minikin_aosp10_r33-cve-2022-20473

Repository dedicated to CVE-2022-20473, a vulnerability in Android's Minikin library, providing patched source code for AOSP 10.

trinadh465/frameworks_base_aosp10_r33_cve-2023-21284

Android framework patch for CVE-2023-21284, addressing a security vulnerability in AOSP 10.

trinadh465/external_aac_android-4.2.2_r1_cve-2023-21282

Analyzes and patches Android AAC (Adaptive Audio Coding) library for CVE-2023-21282, focusing on vulnerability assessment and code-level fixes.

deemoun/pulseapk

PulseAPK is a WPF frontend for apktool and uber-signer with drag-and-drop support, live decompilation output, smali analysis, and integrated APK…

satheesh575555/external_aac_aosp10_r33_cve-2022-20130

Android AAC codec vulnerability analysis and patch for CVE-2022-20130, focusing on memory corruption in external AAC library.

renukaselvar/platform_packages_providers_mediaprovider_cve-2023-40127

Exploit code for CVE-2023-40127, a vulnerability in Android MediaProvider, demonstrating the flaw for security research and testing.