Writeup and exploit for CVE-2023-45777, bypass for Intent validation inside AccountManagerService on Android 13 despite "Lazy Bundle" mitigation
☆100Jan 21, 2024Updated 2 years ago
Alternatives and similar repositories for TheLastBundleMismatch
Users that are interested in TheLastBundleMismatch are comparing it to the libraries listed below
Sorting:
- PoC of CVE-2022-20474☆19Feb 3, 2025Updated last year
- Exploit for CVE-2022-20452, privilege escalation on Android from installed app to system app (or another app) via LazyValue using Parcel …☆341Apr 12, 2023Updated 2 years ago
- PoC and writeup for bypassing the initial patch of CVE-2024-0044, Android run-as any app vulnerability allowing privilege escalation from…☆171Sep 30, 2024Updated last year
- CVE-2023-20963 PoC (Android WorkSource parcel/unparcel logic mismatch)☆72Apr 27, 2024Updated last year
- ☆81Oct 12, 2021Updated 4 years ago
- Writeup and exploit for installed app to system privilege escalation on Android 12 Beta through CVE-2021-0928, a `writeToParcel`/`createF…☆119Mar 3, 2022Updated 4 years ago
- CVE-2025-21479 proof-of-concept, I think☆203Aug 16, 2025Updated 6 months ago
- PoC for CVE-2021-39749, allowing starting arbitrary Activity on Android 12L Beta☆31Apr 16, 2022Updated 3 years ago
- Bad Spin: Android Binder Privilege Escalation Exploit (CVE-2022-20421)☆281May 27, 2023Updated 2 years ago
- CVE-2017-0806 PoC (Android GateKeeperResponse writeToParcel/createFromParcel mismatch)☆24Jun 3, 2018Updated 7 years ago
- a demo poc for CVE-2024-0015☆18Aug 14, 2024Updated last year
- Run `strace` on program that is under another debugger☆18Aug 6, 2023Updated 2 years ago
- Android 14 kernel exploit for Pixel7/8 Pro☆543Apr 23, 2024Updated last year
- CVE-2024-0044: a "run-as any app" high-severity vulnerability affecting Android versions 12 and 13☆330Dec 2, 2024Updated last year
- Exploit code for CVE-2021-1961☆121Sep 7, 2022Updated 3 years ago
- Binder Trace is a tool for intercepting and parsing Android Binder messages. Think of it as "Wireshark for Binder".☆739Sep 11, 2025Updated 5 months ago
- ☆86Sep 19, 2024Updated last year
- study https://github.com/n132/Libc-GOT-Hijacking☆15Dec 7, 2023Updated 2 years ago
- Android kernel exploitation for CVE-2022-20409☆203Oct 17, 2024Updated last year
- HarmonyOS NEXT Decompiler(纯血鸿蒙反编译器)☆157Updated this week
- Proof of concept app for Android permanent denial-of-service vulnerability CVE-2020-0443☆17Mar 15, 2022Updated 3 years ago
- some vul☆790Apr 25, 2025Updated 10 months ago
- PendingIntent exploit☆11Sep 26, 2023Updated 2 years ago
- Android Emulator with Newest Security Patch☆28Mar 4, 2025Updated last year
- Files related to the Pwn2Own Toronto 2023 exploit against the Xiaomi 13 Pro.☆31Oct 14, 2024Updated last year
- Proof-of-concept code for Android APEX key reuse vulnerability☆104Jan 31, 2024Updated 2 years ago
- ☆15Apr 3, 2022Updated 3 years ago
- ☆13Nov 9, 2022Updated 3 years ago
- ☆33Sep 13, 2024Updated last year
- ☆213Nov 6, 2025Updated 4 months ago
- Writeup and exploit for CVE-2024-34740, integer overflow in Android's BinaryXmlSerializer to system_server file write and then to system_…☆53Oct 8, 2025Updated 5 months ago
- An adbd extension used for adb root and shell replacement.☆58Oct 16, 2025Updated 4 months ago
- ☆32Aug 10, 2020Updated 5 years ago
- Dynamic java method hook for Android，Implemented by jvmti☆52Apr 6, 2024Updated last year
- A black-box fuzzer to detect custom permission related privilege escalation vulnerabilities in Android.☆33Feb 9, 2022Updated 4 years ago
- ☆219Aug 27, 2025Updated 6 months ago
- 主要记入自己复现过的android cve☆53Feb 28, 2022Updated 4 years ago
- 安卓内核提权漏洞分析☆493Apr 27, 2019Updated 6 years ago
- 研究内核改机策略☆70Mar 13, 2024Updated last year