heeeeen Goto Github PK

how2heap

A repository for learning various heap exploitation techniques.

intlstudy_bbfuzz

Black Box Fuzzing(Bluetooth)

jaadas

Joint Advanced Defect assEsment for android applications

kernel-exploits

A bunch of proof-of-concept exploits for the Linux kernel

leakvalue

Exploit for CVE-2022-20452, privilege escalation on Android from installed app to system app (or another app) via LazyValue using Parcel after recycle()

littl_tools

marvin-static-analyzer

Marvin static analyzer is an Android application vulnerability scanner. The framework uses androguard and Static Android Analysis Framework (SAAF).

miscexp

myslide

organizertransaction

PoC for CVE-2021-39749, allowing starting arbitrary Activity on Android 12L Beta

ovaa

Oversecured Vulnerable Android App

pocforcve-2015-1528

I'll submit the poc after blackhat

qianghongbao

微信、QQ自动抢红包外挂（绿色、无广告）

reparcelbug

CVE-2017-0806 PoC (Android GateKeeperResponse writeToParcel/createFromParcel mismatch)

reparcelbug2

Writeup and exploit for installed app to system privilege escalation on Android 12 Beta through CVE-2021-0928, a `writeToParcel`/`createFromParcel` serialization mismatch in `OutputConfiguration`

static-arm-bins

Statically compiled ARM binaries for debugging and runtime analysis

street-party

Street Party is a suite of tools that allows the RTP streams of video conferencing implementations to be viewed and modified.

testgit

vikiroot

CVE-2016-5195 (Dirty COW) PoC for Android 6.0.1 Marshmallow

wooyun-drops-all-articles-package

wooyun drops all article package