Tools

r3n3r0/cve-2026-27280

In-depth analysis and proof-of-concept for CVE-2026-27280, an out-of-bounds write in Adobe DNG SDK's dng_render_task::ProcessArea, reachable via…

alphabugx/cve-2025-54957

Proof-of-concept exploit for CVE-2025-54957, an out-of-bounds write in Dolby's DDPlus Unified Decoder, demonstrating a 0-click crash on Android via…

hunt-benito/two-dots-and-a-slash-cve-2026-18907-tecno-hi-browser-download-path-traversal

Python PoC for CVE-2026-18907 path traversal in TECNO Hi Browser's download handler. Includes malicious HTTP server and naive downloader to…

kalilinux/nethunter/build-scripts/kali-nethunter-installer

Builds flashable installer ZIPs that deploy a mobile penetration-testing environment on Android, including kernel boot patching, rootfs integration,…

neternels/android_kernel_xiaomi_sunny

CAFest nethunter kernel based on LA.UM.9.1.r1-11900-SMXXX0.0 with latest upstream-f2fs-stable-linux-4.14.y merged, bb and perf focused. | Force push…

martyx00/collare

Multi-tool reverse engineering collaboration solution.

felix-pb/kfd

kfd, short for kernel file descriptor, is a project to read and write kernel memory on Apple devices.

msuiche/elegant-bouncer

ELEGANTBOUNCER is a detection tool for file-based mobile exploits.

nccgroup/mtk_bp

Tools for analyzing and reverse engineering MediaTek baseband firmware, including file extraction, symbol parsing, and Ghidra integration for modem…

skorpion96/cve-2026-40000

A poc for a vulnerability in ZTE File Manager (zte.com.cn.filer) which allows to read arbitrary files from other apps as the privileges of this file…

elevenpaths/iphonerestrictionspasscodebf

Extracts and decrypts the 4-digit restriction passcode from iPhone backups on Windows machines, enabling recovery of device access controls.

mwsrc/betterandrorat

Android Remote Access Trojan

moloch--/cve-2016-1764

Extraction of iMessage Data via XSS

shawarkhanethicalhacker/cve-2019-8389

[CVE-2019-8389] An exploit code for exploiting a local file read vulnerability in Musicloud v1.6 iOS Application

missaels235/poc-cve-2025-24104-py

Proof-of-concept Python script demonstrating iOS file exfiltration via malicious symlink in device backup restoration, targeting the…

xyzasian/janus-cve-2017-13156

Java-based exploit tool for CVE-2017-13156 that bypasses Android APK signature verification by appending a DEX file to an existing APK, enabling code…

jgoyd/ios-attack-chain-cve-2025-31200-cve-2025-31201

CVE-2025-31200 is a zero-day, zero-click RCE in iOS CoreAudio’s AudioConverterService, triggered by a malicious audio file via iMessage/SMS.…

mineek/filemanager

File Manager for CVE-2022-46689