overwrite
daviszhto/overwriteProof-of-concept iOS exploit demonstrating font overwrite via CVE-2022-46689 for security research and vulnerability testing.
exploitationios-securitymobile-security+2
daviszhto/overwriteProof-of-concept iOS exploit demonstrating font overwrite via CVE-2022-46689 for security research and vulnerability testing.
mpast/mobileauditDjango application that performs SAST and Malware Analysis for Android APKs
barghest-ngo/meshEncrypted peer-to-peer mesh VPN for remote mobile forensics, enabling wireless ADB and libimobiledevice acquisition, network monitoring, and…
marin-m/pbtkA toolset for reverse engineering and fuzzing Protobuf-based apps
elementalsouls/claude-bughunterA Claude Code skill bundle for bug hunting and external red-team work - 82 skills, 15 slash commands, 681 disclosed-report patterns curated across 24…
pascal-lab/tai-eAn easy-to-learn/use static analysis framework for Java and Android
ironfox-oss/ironfoxHardened Android web browser forked from Mull/Firefox with privacy-focused patches, anti-fingerprinting, telemetry removal, and secure defaults for…
topjohnwu/magiskAndroid customization suite providing root access (MagiskSU), systemless module installation, boot image unpacking/repacking, and Zygisk runtime code…
mitmproxy/mitmproxyAn interactive TLS-capable intercepting HTTP proxy for penetration testers and software developers.
zaproxy/zaproxyOpen-source web application security scanner for automated vulnerability detection, manual penetration testing, and API security testing with a…
mozilla/firefox-devtools-mcpModel Context Protocol server for Firefox DevTools - enables AI assistants to inspect and control Firefox browser through the Remote Debugging…
alirezaparsi/copgAdvanced per-app device / CPU / GPU spoofer for rooted Android — device profiles, per-app CPU models, prop & Android-ID spoofing, all driven by a…
zenyxx-xd/rootmyvivoOne-click root for vivo/iQOO devices on locked bootloader | CVE-2026-43499 + KernelSU
cyb3rmx/qu1cksc0peAll-in-One malware analysis tool.
0xbinder/cve_2019_2215Proof-of-concept LPE exploit for Android Binder UAF that uses iovec spraying and addr_limit overwrite to achieve arbitrary kernel read/write.
secforce/droidgroundA flexible playground for Android CTF challenges.
facebook/mariana-trenchA security focused static analysis tool for Android and Java applications.
snothin/ghostlock-s26GhostLock (CVE-2026-43499) for the Galaxy S26