The https://androidvulnerabilities.org/ website and source data.
- Download Poole and set it up on your system
- Clone this repository onto your system
- In the root directory of this repository, run:
poole.py --build --md-ext=markdown.extensions.extrato build the source code (may take a long time)
poole.py --serveto run the website
- Then go to [http://localhost:8080] to view the site
- The web scraper (
tools/scraper/scraper.py) will take vulnerability details from Google's Android Security Bulletins. Please see
tools/scraper/README.mdfor more details.
- Graph analysis tools:
analyser.pyplots a month-by-month matrix of how different Android versions can be exploited
actual_usage.pyuses the Google Play Dashboard usage data to estimate the number of devices which can be exploited in different ways over time
device_analyzer_usage.pydoes a similar process using data gathered by the Device Analyzer project
scorer.pyplots an overall vulnerability score over time for different versions of Android
Data on vulnerability storage format is in