darnellwashingtonjr94-art/sandb0x-xtract0rAutomated cross-platform sandbox that detonates suspicious files in isolated VMs/emulators, captures network and memory artifacts, and creates LLM…
kc57/awesome-pentestA list of awesome penetration testing tools and resources.
bend0us/dexloaderA demo Android project showcasing dynamic DEX loading using DexClassLoader, PathClassLoader, and in-memory execution. For educational purposes only.
superandroidanalyzer/superSecure, Unified, Powerful and Extensible Rust Android Analyzer
cyber-buddy/apkhuntStatic code analysis tool for Android apps based on OWASP MASVS, detecting security vulnerabilities in APK files with low false-positive rates and…
0rshemesh/jadx-magic-stringsJADX plugin that extracts method names, class references, and source file paths from string constants found in DEX files and decompiled Android code.
kal1gh0st/whatsapphack-rceExploit for CVE-2019-11932, a remote code execution vulnerability in WhatsApp via malicious GIF files. Includes proof-of-concept code and technical…
pealeap/cve-2026-21045_and_cve-2026-21048Generates crafted TIFF/DNG files to trigger out-of-bounds writes in Samsung's libimagecodec.quram.so, including binary analysis and reproduction…
xcodeon1/ssh-killv2SSH brute-force tool targeting jailbroken iPhones with default 'alpine' password, featuring network scanning, wordlist-based cracking, and file…
diegovargasj/cve-2025-32407Proof-of-concept exploit for CVE-2025-32407: TLS certificate validation bypass in Samsung Internet for Galaxy Watch, enabling Man-in-the-Middle…
julio-cfa/poc-es-file-explorer-cve-2019-6447Bash PoC script exploiting CVE-2019-6447 in ES File Explorer to list files, photos, videos, apps, and download files from vulnerable Android devices.
owasp/cornucopiaThe source files and tools needed to build the OWASP Cornucopia decks in various languages
skorpion96/cve-2026-40000A poc for a vulnerability in ZTE File Manager (zte.com.cn.filer) which allows to read arbitrary files from other apps as the privileges of this file…
nanopathi/system_media_aosp10_r33_cve-2020-0458Proof-of-concept exploit for CVE-2020-0458, a vulnerability in Android 10's media framework enabling remote code execution via crafted media files.
haxatron/cve-2022-0219Proof-of-concept exploit for CVE-2022-0219, an XXE vulnerability in Jadx that allows local file disclosure when exporting malicious APK files via the…
jakev/pyxamstorePython utility for parsing Xamarin AssemblyStore blob files
gmh5225/androiddrivesignityAndroidDriveSignity is a Python utility designed to bypass driver signature verification in Android kernel(ARMv8.3), facilitating the loading of…
