Popular repositories Loading

1. LeakValue LeakValue Public

   Exploit for CVE-2022-20452, privilege escalation on Android from installed app to system app (or another app) via LazyValue using Parcel after recycle()

   Java 278 49

2. ReparcelBug2 ReparcelBug2 Public

   Writeup and exploit for installed app to system privilege escalation on Android 12 Beta through CVE-2021-0928, a `writeToParcel`/`createFromParcel` serialization mismatch in `OutputConfiguration`

   Java 109 20

3. TheLastBundleMismatch TheLastBundleMismatch Public

   Writeup and exploit for CVE-2023-45777, bypass for Intent validation inside AccountManagerService on Android 13 despite "Lazy Bundle" mitigation

   Java 80 8

4. ReparcelBug ReparcelBug Public

   CVE-2017-0806 PoC (Android GateKeeperResponse writeToParcel/createFromParcel mismatch)

   Java 22 12

5. OrganizerTransaction OrganizerTransaction Public

   PoC for CVE-2021-39749, allowing starting arbitrary Activity on Android 12L Beta

   Java 19 8

6. IntentsLab IntentsLab Public

   Android app for trying Intents, Content Providers and Binder interfaces

   Java 14 6