
dexfinder
Cross-platform APK/DEX method finder with call chain tracing, ProGuard deobfuscation, and hidden API detection

Cross-platform APK/DEX method finder with call chain tracing, ProGuard deobfuscation, and hidden API detection

JADX plugin that extracts method names, class references, and source file paths from string constants found in DEX files and decompiled Android code.

CVE-2026-0006: Heap buffer overflow PoC for libopenapv (Android APV codec) - CVSS 9.8

Know what changed inside your Electron release: diff two builds for IPC, preload, windows, fuses and hosts, with file:line. CLI, CI gate, MCP server.

Inspects, decompiles and structurally patches Hermes bytecode (HBC) from React Native apps, with a GDB-style REPL, CFG, decompiler and re-serializing…

Official code for the ISSTA 2026 paper: Is "Knowing It’s Malicious" Enough? Evaluating LLMs for Fine-Grained Malware Behavior Auditing

ADT is a toolset designed to help model application behavior, research and test security vulnerabilities, and facilitate reversing hostile code.


Repository dedicated to CVE-2022-20473, a vulnerability in Android's Minikin library, providing patched source code for AOSP 10.



Android platform framework patch for CVE-2023-21281, addressing a security vulnerability in the Android framework.

CVE-2017-13286 Poc(can not use)

Android platform framework repository containing a patch or analysis for CVE-2023-21288, a vulnerability in the Android framework.

Android framework patch for CVE-2023-21284, addressing a security vulnerability in AOSP 10.

Android AAC codec vulnerability analysis and patch for CVE-2022-20130, focusing on memory corruption in external AAC library.

Android netd vulnerability analysis and exploitation research for CVE-2023-40084, focusing on the platform's network daemon.

Analyzes and demonstrates the Android Runtime vulnerability CVE-2021-0394, providing code-level insights for security researchers and developers.