Anestis Bechtsoudis

vdexExtractor. Tool to decompile & extract Android Dex bytecode from Vdex files

android-simg2img. Tool to convert Android sparse images to raw images

android-prepare-vendor. Set of scripts to automate AOSP compatible vendor blobs generation from factory images

android-unpackbootimg. Tools to work with Android boot images

WeBaCoo. Web Backdoor Cookie Script-Kit

oatdump_plus. Extended oatdump from AOSP platform/art repo

qc_image_unpacker. Qualcomm image unpacker

radamsa-android. An Android port of radamsa fuzzer

melkor-android. An Android port of the melkor ELF fuzzer

dexRepair. Cmd line tool to repair Android DEX bytecode files CRC checksum

snet-extractor. SafetyNet Jar download & extractor utility

honggfuzz. A general-purpose, easy-to-use fuzzer with interesting analysis options. Supports feedback-driven code coverage modes.

honggfuzz-android. An Android port of the general purpose honggfuzz fuzzer

SNMP-BCC. SNMP Backdoor Communication Channel

dalvik-after-art. dalvik-after-art

setools-android. Unofficial port of setools to Android with additional sepolicy-inject utility included

iCSFV. iOS Application Code Signature File Validator

exploitable. The 'exploitable' GDB plugin. I don't work at CERT anymore, but here is the original homepage: http://www.cert.org/vuls/discovery/triage.html

random-scripts. scripts I use from time to time

android-security-awesome. A collection of android security related resources

clustergit. run git commands on multiple git clones

canhazaxs. A tool for enumerating the access to entries in the file system of an Android device.

proxychains_sw. Proxychains switcher to work efficiently under multiple local socks proxies

pyrsistence. A Python extension for managing External Memory Data Structures (EMDs)