This is your work, valued
Android ɹǝǝuıƃuǝ ǝsɹǝʌǝᴚ, Android/iOS Dynamic and static analysis, Radare2, Frida, Vulnerability Research, RASP Bypass.
MagiskDetection. Collection of Some Publically Available POC Apps to Detect Root/Magisk presence.
1kFridaScripts. JavaScript
615AntiFrida_Bypass. Generic Script To Bypass Some AntiFrida Checks
547Anti-Frida. Some Of Anti-Frida Stuff
131unrasp_guard. Anti Tamper & Anti Frida Bypass For Our Lovely LolGuard
110Smali2Frida. Java
98DetectZygisk. A POC to detect zygisk
76CheckBeer. Easy-to-use Android library for tampering detection, with a sample app included
62Frida-Detection. Small Apps As PoC to Detect Frida With Frida
54Root_Bypass. Generic Frida Script To Bypass Root Detection
54DexDumper. JavaScript
47SyscallHooks. JavaScript
32Native2Frida. Java
30ARMFingerprint. Code to extracts stable ARM CPU register values directly from system hardware for fingerprinting device.
27RootAppDetector. Small POC code that detects known root-related apps by attempting to launch their activities and monitoring security exception.
26IDA-Gepetto. IDA plugin which queries Local language models to speed up reverse-engineering
24Frida-AppSec. A dynamic frida script for detecting possible vulnerabilities in Android apps, automating security scanning and reporting.
17ApkProtector-multiplatform. Java
11String_Decryption. Files used in my blog
9zygisk-memdump. A zygisk module that dumps so file from process memory
6fridare. Fridare 是一个用于修改和定制 Frida-server 的魔改工具,专为 iOS 越狱设备设计。Fridare is a custom modification tool designed for modifying and customizing Frida-server, specifically for jailbroken iOS devices.
5CVE-2024-0044. PoC and writeup for bypassing the initial patch of CVE-2024-0044, Android run-as any app vulnerability allowing privilege escalation from adb to installed app
5Android-Kernel-Tutorials. Kernel building tutorials for Any device which is currently unsupported with APatch.
5Open-Obfuscator-Challenge. Files for Open-Obfuscator Challenge
5frida-flutterproxy. Burp proxy flutter apps
4MobileHackingCheatSheet. Basics on commands/tools/info on how to assess the security of mobile applications
4aidapal. aiDAPal is an IDA Pro plugin that uses a locally running LLM that has been fine-tuned for Hex-Rays pseudocode to assist with code analysis.
4ZygiskFrida. Injects frida gadget using zygisk to bypass anti-tamper checks.
4ExtraStuff. A repo to store general purpose code/script
4DetectApp_iOS. Detect installed app list on iOS using unauthorized iOS private APIs (SBSLaunchApplicationWithIdentifierAndURLAndLaunchOptions)
3SherlockElf. SherlockElf is a powerful tool designed for both static and dynamic analysis of Android ELF binaries.
3TrickyStore. C++
3MagiskEoP. Exploit and writeup for Magisk Bug #8279, Privileges Escalation / Arbitrary Code Execution Vulnerability
3Tutorial. Some Frida Tutorial
3BootloaderSpoofer. Spoof a locked bootloader in local attestations
3magisk-frida-inject. Inject frida script when process starts
2hookbot_source. This repository contains a few leaked files of HookBot.
2Disable-TamperProtection. A POC to disable TamperProtection and other Defender / MDE components
2MyIdaFrida. Generate Frida Script
230-Days-Of-Python. 30 days of Python programming challenge is a step-by-step guide to learn the Python programming language in 30 days. This challenge may take more than100 days, follow your own pace. These videos may help too: https://www.youtube.com/channel/UC7PNRuno1rzYPb1xLa4yktw
2system-prompts-and-models-of-ai-tools.
2r2tips. Small tips about R2 which runs everywhere
2jadx-xvision-plugin. xVision is a plugin for the JadX decompiler that aims to integrate with Large Language Models (LLMs) to provide code analysis directly in the JAdX.
2XDEX. C++
2meowna_detector. Prove of concept of detecting meowna module
1CVE-2024-26229. CWE-781: Improper Address Validation in IOCTL with METHOD_NEITHER I/O Control Code
1virtualbox. Source code for Oracle VirtualBox
1ajeossida. Customized Frida build for bypassing basic detections and helping ajeossideul (guys) test mobile apps with Frida
1apkunpacker.
1DeviceWarLock. 这是一个Android Project,具备设备指纹采集,设备安全检测的能力
1DAILA. A decompiler-agnostic plugin for interacting with AI in your decompiler. GPT-4, Claude, and local models supported!
1bytedance_tiktok. TikTok Reverse Engineering - Security Algorithms
1r2frida. Radare2 and Frida better together.
1ExploitGSM. Exploit for 6.4 - 6.5 kernels
1APKiD. Android Application Identifier for Packers, Protectors, Obfuscators and Oddities - PEiD for Android
1idapython_scripts. Python
1