Tools

junelegency/dexfinder

Cross-platform APK/DEX method finder with call chain tracing, ProGuard deobfuscation, and hidden API detection

0rshemesh/jadx-magic-strings

JADX plugin that extracts method names, class references, and source file paths from string constants found in DEX files and decompiled Android code.

mobilehackinglab/cve-2026-0006-openapv-poc

CVE-2026-0006: Heap buffer overflow PoC for libopenapv (Android APV codec) - CVSS 9.8

zhengxr930/maleval

Official code for the ISSTA 2026 paper: Is "Knowing It’s Malicious" Enough? Evaluating LLMs for Fine-Grained Malware Behavior Auditing

nccgroup/android_demystification_toolbox

ADT is a toolset designed to help model application behavior, research and test security vulnerabilities, and facilitate reversing hostile code.

amruth-sn/pyjadx

Python bindings for JADX.

trinadh465/frameworks_minikin_aosp10_r33-cve-2022-20473

Repository dedicated to CVE-2022-20473, a vulnerability in Android's Minikin library, providing patched source code for AOSP 10.

umvfx1bvaw50/cve-2017-13286

CVE-2017-13286 Poc(can not use)

trinadh465/platform_frameworks_base_cve-2023-21281

Android platform framework patch for CVE-2023-21281, addressing a security vulnerability in the Android framework.

trinadh465/platform_frameworks_base_cve-2023-21288

Android platform framework repository containing a patch or analysis for CVE-2023-21288, a vulnerability in the Android framework.

trinadh465/frameworks_base_aosp10_r33_cve-2023-21284

Android framework patch for CVE-2023-21284, addressing a security vulnerability in AOSP 10.

satheesh575555/external_aac_aosp10_r33_cve-2022-20130

Android AAC codec vulnerability analysis and patch for CVE-2022-20130, focusing on memory corruption in external AAC library.

trinadh465/platform_art_cve-2021-0394

Analyzes and demonstrates the Android Runtime vulnerability CVE-2021-0394, providing code-level insights for security researchers and developers.