flankerhqd

JAADAS

Joint Advanced Defect assEsment for android applications

vendor-android-cves

Collections of my POCs for android vendor CVEs

bindump4j

A portable utility to locate android binder service

descriptor-describes-toctou

POCs for IOMemoryDescriptor racing bugs in iOS/OSX kernels

blitzard

Will release EXPs soon after BHUSA

BadKernel

Full exploit of CVE-2016-6754(BadKernel) and slide of SyScan360 2016

drozer-py3

The Leading Security Assessment Framework for Android.

feishu-chatgpt

idaplugins-list

A list of IDA Plugins

VirtualApp

An open source implementation of MultiAccount.(Support 4.0 - N).

dpt-shell

An android Dex protects shell implementation

mobile-security-wiki

my-notes

ovaa

Oversecured Vulnerable Android App

pine

Dynamic java method hook framework on ART.

VirtualAppDoc

appshark

Appshark is a static taint analysis platform to scan vulnerabilities in an Android app.

BinAbsInspector

BinAbsInspector: Vulnerability Scanner for Binaries

blind_watermark

Blind&Invisible Watermark ，图片盲水印，提取水印无须原图！

Chrome-Issue-992914-Sealed-Frozen-Element-Kind-Type-Confusion-RCE-Exploit

September Chrome 1day by István Kurucsai

DroidPlugin

A plugin framework on android,Run any third-party apk without installation, modification or repackage

FlowDroid

FlowDroid Static Data Flow Tracker

FUPK3

演示视频https://pan.baidu.com/s/1HH_-TQGca1NLoSqzvOPB3Q 密码：izm3

kernel_msm

navicat-keygen

A keygen for Navicat Premium

PyWxDump

SharpWxDump的Python语言版。微信客户端取证，可获取用户个人信息(昵称/账号/手机/邮箱/数据库密钥(用来解密聊天记录))，解密脚本，获取数据库脚本；持获取多用户信息，目前支持所有新版本、正式版版本

sekiro

基于长链接和代码注入的Android private API暴露框架

soot

Soot - A Java optimization framework

Tai-e-assignments

Tai-e assignments for static program analysis

yalu102

incomplete iOS 10.2 jailbreak for 64 bit devices by qwertyoruiopz and marcograssi