kunglao-agent
amd2g2zz/kunglao-agentThe reverse-engineering expert agent: plans its own analysis path, derives every fact from raw evidence, and converges under mechanical verification…
ai-assisted-reversingandroid-securitybinary-analysis+8
26
amd2g2zz/kunglao-agentThe reverse-engineering expert agent: plans its own analysis path, derives every fact from raw evidence, and converges under mechanical verification…
hunt-benito/the-callback-that-outlived-the-page-cve-2026-78997-uc-browser-android-universal-xssPoC for CVE-2026-78997, a Universal XSS in UC Browser for Android. Includes a crafted URL builder, a callback-dispatch oracle, and Frida hooks to…
nabla-c0d3/ssl-kill-switch2Blackbox tool to disable SSL certificate validation - including certificate pinning - within iOS and macOS applications.
majd/ipatoolCommand-line tool that allows you to search for iOS, iPadOS, tvOS, visionOS, and macOS apps on the App Store, and download .ipa or macOS .pkg app…
httptoolkit/frida-interception-and-unpinningFrida scripts to rewrite mobile applications at runtime to directly MitM all HTTPS traffic
mitmproxy/mitmproxy_rsRust components for traffic interception and redirection, enabling WireGuard device proxying and local app redirection across macOS, Windows, and…
hackerronin/cve-2024-0044a vulnerability affecting Android version 12 & 13
quarkslab/android-hardware-attestation-demoAn Android HW Attestation demo
hunt-benito/two-dots-and-a-slash-cve-2026-18907-tecno-hi-browser-download-path-traversalPython PoC for CVE-2026-18907 path traversal in TECNO Hi Browser's download handler. Includes malicious HTTP server and naive downloader to…
lazybear8372/cve-2023-41898_labWalk through CVE-2023-41898: exploit an unvalidated deep link in Home Assistant Android to load arbitrary URLs in a privileged WebView and leak a…
tanprathan/mobileapp-pentest-cheatsheetThe Mobile App Pentest cheat sheet was created to provide concise collection of high value information on specific mobile application penetration…
harsh-bothra/securityexplainedSecurityExplained is a new series after the previous learning challenge series #Learn365. The aim of #SecurityExplained series is to create…
prateek147/dvia-v2Damn Vulnerable iOS App (DVIA) is an iOS application that is damn vulnerable. Its main goal is to provide a platform to mobile security…
lauriewired/artfulThe ARTful library for dynamically modifying the Android Runtime
george0papasotiriou/cve-2026-22010-android-intent-redirection-to-exported-componentProof-of-concept for CVE-2026-22010 Android intent redirection: demonstrates an exported activity forwarding intents to attacker-controlled internal…
nccgroup/android_demystification_toolboxADT is a toolset designed to help model application behavior, research and test security vulnerabilities, and facilitate reversing hostile code.
nccgroup/conscrypttrustusercertsMagisk module for Android 14 that adds user-installed CA certificates to the system's Conscrypt trust store, enabling HTTPS interception with proxy…