High-risk tools in Renef

High severity Renef MCP Server 26 of 75 tools

26 of the 75 tools in Renef are classified as high risk. This page profiles those tools specifically, with recommended policy actions and the attack patterns that target them.

Every operation listed below is an action PolicyLayer recommends controlling at the transport layer. Open any tool to see the full profile, risk score, and YAML policy snippet.

Tools at high risk

adb_selinux_disable Execute

Sets SELinux to Permissive mode (disabled enforcement).
adb_selinux_enable Execute

Sets SELinux to Enforcing mode (enabled).
adb_start_app_am Execute

Starts an Android app on the connected device using 'am start'.
adb_start_app_monkey Execute

Starts an Android app on the connected device using 'monkey' command.
adb_stop_app_am Execute

Force stops an Android app on the connected device using 'am force-stop'.
renef_attach Execute

Attaches to a running process by PID and injects the renef payload.
renef_cli_reset Execute

Resets the renef CLI process by killing any stuck process and starting fresh.
renef_exec Execute

Executes Lua code in the target process.
renef_hook_generate Execute

renef_hook_generate
renef_hook_java Execute

renef_hook_java
renef_hook_native Execute

Installs a native hook at the specified offset in a library.
renef_jni_new_string Execute

Creates a new Java String object in the target process.
renef_load_script Execute

Loads and executes Lua script(s) in the target process.
renef_mem_write Execute

Writes raw bytes to memory at the specified address.
renef_mem_write_u16 Execute

Writes an unsigned 16-bit integer to memory.
renef_mem_write_u32 Execute

Writes an unsigned 32-bit integer to memory.
renef_mem_write_u64 Execute

Writes an unsigned 64-bit integer to memory.
renef_mem_write_u8 Execute

Writes an unsigned 8-bit integer to memory.
renef_memory_patch Execute

Patches memory at the specified address with automatic page protection handling.
renef_port_forward_add Execute

Adds a port forwarding rule for renef.
renef_server_deploy Execute

Deploys renef_server and libagent.so to the connected Android device.
renef_server_restart Execute

Restarts renef_server on the connected Android device.
renef_server_start Execute

Starts renef_server on the connected Android device.
renef_spawn Execute

renef_spawn
renef_zero_copy_multiline_exec Execute

renef_zero_copy_multiline_exec
run Execute

Sends a command to the CLI and returns the output.

Attacks that target this class

High-risk tools in any server share these documented attack patterns. Each links to the full case and the defensive policy.

Destructive Action Autonomy
Runaway Tool Loops
Prompt Injection via Tool Results

High-risk tools in Renef

Tools at high risk

Attacks that target this class

More on Renef

Enforce policy on every Renef tool call.