Ever wanted to get payload from packed android malware without running android emulator/device? Me neither. But I wrote a tool for that anyway😄
github.com/eybisi/kavanoz
When Your IDE Becomes a RCE Endpoint
Your IDE is basically one launch away from running someone else's code.
If your devs use Cursor, Windsurf, or any VS Code fork, the extensions they think they trust can quietly point to code nobody legitimate owns. We've been digging into
Inspired by JEB, I forked Simplify’s smalivm to perform concrete execution for string decryption and automatic unpacking. The results look promising. Combined with Unidbg for native emulation, this will eventually become a Jadx plugin.