{"repo":"ivan-sincek/malware-apk","free":true,"listed":false,"github":"https://github.com/ivan-sincek/malware-apk","clone":"git clone https://github.com/ivan-sincek/malware-apk.git","description":"As a bug hunter, are your bug bounty reports getting rejected because you don't use a \"malicious\" Proof of Concept (PoC) app to exploit the vulnerabilities? I've got you covered!","language":"Java","stars":149,"topics":["android","bug-bounty","deep-link","ethical-hacking","java","mobile-penetration-testing","offensive-security","penetration-testing","security","deep-link-hijacking"],"license":"MIT","category":"security-tools","readme_excerpt":"Malware APK As a bug hunter, are your bug bounty reports getting rejected because you don't use a \"malicious\" Proof of Concept (PoC) app to exploit the vulnerabilities? As a security engineer, do you struggle with validating bug bounty reports, performing regression testing, and conducting penetration testing? I've got you covered - all from the comfort of your own device! --- NOTE: This is a testing / exploitation tool, not a vulnerability scanner. Identifying security vulnerabilities requires manually reverse‑engineering the APKs and reviewing the code. NOTE: Rooting your device is not required. Built with Android Studio v2025.2.3 (64-bit) (JDK 17) and tested on multiple virtual devices, as well as, on Samsung Galaxy Note S20 Ultra with Android OS v13.0 (Tiramisu) physical device. YouTube: Malware APK v5.0 - Proxy Intent Injection PoC For more tips and tricks check my Android Penetration Testing Cheat Sheet. Made for educational purposes. I hope it will help! Future plans: add an option to bind to a service, add an option to nest unlimited number of intents when testing intent filters, add an option to specify intent categories, add an option to specify HashMap type in intent extras, add an option to specify null value in intent extras, add an option to the broadcast monitor to cache and replay intercepted intents, add a content encoding and decoding section, add a log toolbar with options to search, copy, and download actions, add a project template to easily compile nativ","default_branch":null,"files":null,"tree":[],"storefront":"/r/ivan-sincek","claimed":false,"request_supported":{"post":"https://gitbuyer.com/r/ivan-sincek/malware-apk/request-supported","requests":0},"note":"indexed from public GitHub; nothing is for sale on this page. Clone it from GitHub. Paid listings live at /search."}