
APKHunt
Static code analysis tool for Android apps based on OWASP MASVS, detecting security vulnerabilities in APK files with low false-positive rates and…

Static code analysis tool for Android apps based on OWASP MASVS, detecting security vulnerabilities in APK files with low false-positive rates and…

A security focused static analysis tool for Android and Java applications.

CVE-2016-5195 (dirtycow/dirtyc0w) proof of concept for Android

Linux kernel privilege-escalation exploit for CVE-2026-46242, a race-condition use-after-free in epoll, with 99% reliable root on desktops, servers,…

Android complete exploit chain that enables privilege escalation from a local untrusted app to root/kernel, combination of CVE-2026-49881 and…

MARA is a Mobile Application Reverse engineering and Analysis Framework. It is a toolkit that puts together commonly used mobile application reverse…

Yet another static code analyzer for malicious Android applications

Dirty Pipe root exploit for Android (Pixel 6)

Blueborne CVE-2017-0785 Android information leak vulnerability

Android 14 kernel exploit for Pixel7/8 Pro

Collection of intentionally insecure iOS and Android apps for learning mobile security testing, reverse engineering, and vulnerability analysis,…

My first Android app: Launch Fusée Gelée payloads from stock Android (CVE-2018-6242)

Exploit for CVE-2022-20452, privilege escalation on Android from installed app to system app (or another app) via LazyValue using Parcel after…

Django application that performs SAST and Malware Analysis for Android APKs

CVE-2024-0044: a "run-as any app" high-severity vulnerability affecting Android versions 12 and 13

Collections of my POCs for android vendor CVEs

Exploits for Android Binder bug CVE-2020-0041

Reverse engineering framework with disassembly, decompilation, taint analysis, version diffing and semantic search, plus LLM-driven autonomous binary…