v4kst1z

LSPosed

LSPosed Framework

paru

Feature packed AUR helper

pinduoduo_backdoor

拼多多apk内嵌提权代码，及动态下发dex分析

gnome-shell-extension-gsconnect

KDE Connect implementation for GNOME

gqrx

Software defined radio receiver powered by GNU Radio and Qt.

Gepetto

IDA plugin which queries uses language models to speed up reverse-engineering

btstack

Dual-mode Bluetooth stack, with small memory footprint.

Nope-Proxy

TCP/UDP Non-HTTP Proxy Extension (NoPE) for Burp Suite.

RadioLib

Universal wireless communication library for embedded devices

Android-Reports-and-Resources

A big list of Android Hackerone disclosed reports and other resources.

securitylab

Resources related to GitHub Security Lab

pinduoduo_backdoor_unpacker

Samples and Unpacker of malicious backdoors and exploits developed and used by Pinduoduo

BlueDucky

🚨 CVE-2023-45866 - BlueDucky Implementation (Using DuckyScript) 🔓 Unauthenticated Peering Leading to Code Execution (Using HID Keyboard)

5ghoul-5g-nr-attacks

sdr-examples

A collection of GNU Radio flow graphs

Pixel_GPU_Exploit

Android 14 kernel exploit for Pixel7/8 Pro

chromium_demo

A series of demos to show how chromium is constructed.

Simple

A Simple showcase for the Sea-of-Nodes compiler IR

ice9-bluetooth-sniffer

Wireshark-compatible all-channel BLE sniffer for bladeRF, with wideband Bluetooth sniffing for HackRF and USRP

LeakValue

Exploit for CVE-2022-20452, privilege escalation on Android from installed app to system app (or another app) via LazyValue using Parcel after recycle()

learnSDR

Lessons to learn about Software Defined Radios (SDR) through GNUradio

CVE-2021-28663

A basic PoC leak for CVE-2021-28663 (Internal of the Android kernel backdoor vulnerability)

ReparcelBug2

Writeup and exploit for installed app to system privilege escalation on Android 12 Beta through CVE-2021-0928, a `writeToParcel`/`createFromParcel` serialization mismatch in `OutputConfiguration`

CVE-2023-2002

Linux Bluetooth - Run arbitrary management commands as an unprivileged user

TheLastBundleMismatch

Writeup and exploit for CVE-2023-45777, bypass for Intent validation inside AccountManagerService on Android 13 despite "Lazy Bundle" mitigation

CVE-2023-2033

awesome-gnuradio

awesome gnuradio / SDR software

CVE-2022-41218

Vulnerability Details for CVE-2022-41218

v8-sbx-bypass-wasm

ReparcelBug

CVE-2017-0806 PoC (Android GateKeeperResponse writeToParcel/createFromParcel mismatch)