PoC and writeup for bypassing the initial patch of CVE-2024-0044, Android run-as any app vulnerability allowing privilege escalation from adb to installed app

Conference presentation slides

LSPass: Bypass restrictions on non-SDK interfaces

VPS融合怪服务器测评项目(VPS Fusion Monster Server Test Script)(尽量做最全能测试服务器的脚本)

An efficient, small mobile key-value storage framework developed by WeChat. Works on Android, iOS, macOS, Windows, and POSIX.

pull decrypted ipa from jailbreak device

Link Identity Editor. Put real or fake signatures in a Mach-O.

Provides automated reverse engineering assistance through the use of local large language models (LLMs) on consumer hardware.

Home of CodeT5: Open Code LLMs for Code Understanding and Generation

CodeBERT

Fuzz iOS URL schemes

This is a library that can bypass the hidden api restriction on Android 9-12.

A frida tool to dump dex in memory to support security engineers analyzing malware.

Collection of publicly available IPTV channels from all over the world

Exploit for CVE-2022-20452, privilege escalation on Android from installed app to system app (or another app) via LazyValue using Parcel after recycle()

weggli is a fast and robust semantic search tool for C and C++ codebases. It is designed to help security researchers identify interesting functionality in large codebases.

iOS Objective-C headers as derived from runtime introspection

FANS: Fuzzing Android Native System Services

Curated list of classic fuzzing books, papers about fuzzing at information security top conferences over the years, commonly used fuzzing tools, and resources that can help us use fuzzer easily.

An app to view libraries used in apps in your device.

快速寻找一个类所在 dex 的小工具

Android Frida GUI Manager; Android 图形化Frida管理器

This repository contains the tools we used in our research on the Google Titan M chip

A security focused static analysis tool for Android and Java applications.

记录一些我自己在学习Android逆向过程中的有意思的东西

Build your own 'AirTags' 🏷 today! Framework for tracking personal Bluetooth devices via Apple's massive Find My network.

A portable utility to locate android binder service