
awesome-android-security
A curated list of Android Security materials and resources For Pentesters and Bug Hunters

A curated list of Android Security materials and resources For Pentesters and Bug Hunters

Cross-platform GUI written in Rust using ADB to debloat non-rooted Android devices. Improve your privacy, the security and battery life of your…

Android Application Identifier for Packers, Protectors, Obfuscators and Oddities - PEiD for Android

Hands-on challenges for learning how to reverse engineer Flutter applications.

Reproducer for CVE-2023-3635 in Okio 2.9.0, demonstrating how React Native's version catalog pins a vulnerable dependency, affecting Android apps.

Python simulation of CVE-2026-22012, showing how a missing Final-Unit-Indication in Diameter Credit-Control allows unlimited quota and service bypass…

Exploit chain utilizing directory traversal and iOS restore to overwrite protected files.

End-to-end simulation of detecting a root-less Android Drop Device (Casper) using Wazuh SIEM to capture Layer 7 attacks like Shellshock…

Educational reverse engineering study of a Unity/IL2CPP Android game. Documents gateway protocol decoding, native anti-tampering SDK analysis, SSL…

How to Install OpenClaw on an Android Phone and Control It via WhatsApp

Reverse Engineering of the Shining App Mask

A curated list of public TEE resources for learning how to reverse-engineer and achieve trusted code execution on ARM devices

A phone number can reveal whether a device is active, in standby or offline (and more). This PoC demonstrates how delivery receipts + RTT timing leak…

itunesstored & bookassetd sbx escape

Adaptation of CVE-2023-6241 for Google Pixel 7 from Google Pixel 8 taken from securitylab/SecurityExploits/Android/Mali/CVE_2023_6241

CVE-2024-0044: a "run-as any app" high-severity vulnerability affecting Android versions 12 and 13. This repo demonstrates how to exploit…

Open source Android, iOS and Web app for learning about and managing digital and physical security. From how to send a secure message to dealing with…

CVE-2023-40429: An app may be able to access sensitive user data.