A̴N̴D̴R̴O̴I̴D̴ ̴R̴E̴V̴E̴R̴S̴E̴

Change logs: 🔥 - Fhook+ powered only by frida inject binaries. - Code improvements and better UI. - Added frida "inject" and scripts manager, now u can import frida inject binaries and scripts. - Added Javascript code viewer. - Added update checker. - Consider staring the repo as a support ⭐ - More features soon 😉 Download link: https://github.com/Syntaxerr101/FHookPlus/releases/tag/v1.0.1 @fhookplus

APKDeepLens is a Python based tool designed to scan Android applications (APK files) for security vulnerabilities. It specifically targets the OWASP Top 10 mobile vulnerabilities, providing an easy and efficient way for developers, penetration testers, and security researchers to assess the security posture of Android apps https://github.com/d78ui98/APKDeepLens

APKHunt is a comprehensive static code analysis tool for Android apps that is based on the OWASP MASVS framework. Although APKHunt is intended primarily for mobile app developers and security testers, it can be used by anyone to identify and address potential security vulnerabilities in their code. https://github.com/Cyber-Buddy/APKHunt @Android_Reverse

Deanon is claiming to have the original version of Pegasus that works on all versions of Android and iOS. The pricing for the lifetime access is $ 1,500,000 👀 A few days later, Deanon offered the subscription model for Pegasus Panel. Around April 10, Apple started sending email notifications on targeted mercenary spyware attacks to affected users. https://support.apple.com/en-us/102174 @Android_Reverse

https://github.com/zer0def/undetected-frida @Android_Reverse

❤️ Quran verses ♥️

0day linux privilege escalation exploit affecting Linux 5.15, 6.1, 6.4 and 6.5 Kernels https://github.com/YuriiCrimson/ExploitGSM @Android_Reverse

🔥 A true super-hero's https://twitter.com/sabkuchsamjha/status/1750938143019147400

BeanShell is a small, free, embeddable Java source interpreter with object scripting language features, written in Java. BeanShell dynamically executes standard Java syntax and extends it with common scripting conveniences such as loose types, commands, and method closures like those in Perl and JavaScript. (I did read about this library time ago and how its used, so from a security standpoint, a malicious actor may initially deploy an app containing non-suspicious code stored on a server. Subsequently, they can covertly switch the code to malicious content, infecting unsuspecting users who remain unaware of the online update and its execution within the app. This exploit enables the actor to compromise users devices without any prior warning. Some apps utilize this method to update their code seamlessly without requiring updates to the APK itself.) Better to have an idea about it https://github.com/beanshell/beanshell http://beanshell.org/manual/contents.html @Android_Reverse

Zygisk-Il2CppDumper: Il2CppDumper with Zygisk, dump il2cpp data at runtime, can bypass protection, encryption and obfuscation. https://github.com/Perfare/Zygisk-Il2CppDumper @Android_Reverse

ZygiskFrida is a zygisk module allowing you to inject frida gadget in Android applications in a more stealthy way: - The gadget is not embedded into the APK itself. So APK Integrity/Signature checks will still pass. - The process is not being ptraced like it is with frida-server. Avoiding ptrace based detection. - Control about the injection time of the gadget. - Allows you to load multiple arbitrary libraries into the process. https://github.com/lico-n/ZygiskFrida @Android_Reverse

Eid Al-Fitr blessings to everyone! ❤️ Wishing peace and joy to Muslims and non-Muslims alike as Ramadan comes to a close. Let's spread peace and love throughout the world. #FREE_PALESTINE 🇵🇸 ❤️ @Android_Reverse

Telegram response on RCE vulnerability as a scam .. https://twitter.com/telegram/status/1777677055837995151 @Android_Reverse

POC video @Android_Reverse

🔴 SECURITY ALERT ⚠️ Possible RCE was detected in Telegram's media processing in Telegram Desktop application. This issue expose users to malicious attacks through specially crafted media files, such as images or videos. For security reasons disable auto-download feature. Please follow these steps: 1. Go to Settings. 2. Tap on "Advanced". 3. Under the "Automatic Media Download" section, disable auto-download for "Photos", "Videos", and "Files" across all chat types (Private chats, groups, and channels). We are currently investigating this vulnerability. Source: exploitorg @Android_Reverse