
jsonorg-fp1
simple application with a (unreachable!) CVE-2022-45688 vulnerability
educationpapers-researchstatic-analysis+2

simple application with a (unreachable!) CVE-2022-45688 vulnerability
Ninja Reverse Engineering on Android APK packages

This is a little plugin to copy disassembly in a way that is usable in YARA rules!

Python script using r2pipe to detect CVE-2017-13208 in Android libnetutils.so by checking for missing dhcp_size validation via static binary analysis.

Educational demonstration of CVE-2007-4559 Python tarfile symlink attack with a script showing why os.path.realpath() fails to prevent extraction…