Yiannis Kozyrakis

fromthetransistor. From the Transistor to the Web Browser, a rough outline for a 12 week course

frida-detection. A couple of methods for detecting Frida on Android.

YalpStore. Download apks from Google Play Store

secure-ios-app-dev. Collection of the most common vulnerabilities found in iOS applications

LibScout. LibScout: Third-party library detector for Java/Android apps

Auditor. Hardware-based attestation and intrusion detection app for Android. It provides both local verification with another Android device via QR codes and optional scheduled server-based verification with support for alert emails. It uses hardware-backed keys and attestation support as the foundation and chains trust to the app for software checks.

AndroidAttacher. IDA debugging plugin for android armv7 so

research.

syscall_intercept. The system call intercepting library

DVRF. The Damn Vulnerable Router Firmware Project

manticore. Symbolic execution tool

TaLoS. Efficient TLS termination inside Intel SGX enclaves for existing applications

ida. Python

Frida-Android-Scripts. Some frida scripts

frida-java-bridge. Java runtime interop from Frida

ios-deploy. Install and debug iPhone apps from the command line, without using Xcode

androwarn. Yet another static code analyzer for malicious Android applications

android-classyshark. Android and Java bytecode viewer

MARA_Framework. MARA is a Mobile Application Reverse engineering and Analysis Framework. It is a toolkit that puts together commonly used mobile application reverse engineering and analysis tools to assist in testing mobile applications against the OWASP mobile security threats.

droid-hunter. (deprecated) Android application vulnerability analysis and Android pentest tool

redexer. The Redexer binary instrumentation framework for Dalvik bytecode

dex-oracle. A pattern based Dalvik deobfuscator which uses limited execution to improve semantic analysis

apkstudio. Open-source, cross platform Qt6 based IDE for reverse-engineering Android application packages. It features a friendly IDE-like layout including code editor with syntax highlighting support for *.smali code files.

RemoteDroidGuard. Service to run Google's DroidGuard binary in an isolated environment

Inspeckage. Android Package Inspector - dynamic analysis with api hooks, start unexported activities and more. (Xposed Module)

flare-floss. FLARE Obfuscated String Solver - Automatically extract obfuscated strings from malware.

hasper. a port of Ghost's casper theme for Hugo

fridump. A universal memory dumper using Frida

Tracer. Set of Dynamic Binary Instrumentation and visualization tools for execution traces.

Deadpool. Repository of various public white-box cryptographic implementations and their practical attacks.

AES. Implementations of white-box AES constructions and their cryptanalyses.

ARES. ARES: Android Reverse Engineering Suite is a security suite for analyzing Android .apk files.

drammer. Native binary for testing Android phones for the Rowhammer bug

APKiD. Android Application Identifier for Packers, Protectors, Obfuscators and Oddities - PEiD for Android

mastg. The OWASP Mobile Application Security Testing Guide (MASTG) is a comprehensive manual for mobile app security testing and reverse engineering. It describes technical processes for verifying the OWASP Mobile Security Weakness Enumeration (MASWE) weaknesses, which are in alignment with the OWASP MASVS.

masvs. The OWASP MASVS (Mobile Application Security Verification Standard) is the industry standard for mobile app security.

jeb-androsig. Android Library Code Recognition

cwac-netsecurity. CWAC-NetSecurity: Simplifying Secure Internet Access

safetynethelper. SafetyNet Helper wraps the Google Play Services SafetyNet.API and verifies Safety Net API response with the Android Device Verification API.

ProbeDroid. A SDK for the creation of analysis tools without obtaining app source code in order to profile runtime performance, examine code coverage, and track high-risk behaviors of a given app on Android 5.0 and above.

SmartThingsAnalysisTools. SmartThings Analysis Tools

android-overlay-malware-example. Harmless Android malware using the overlay technique to steal user credentials.

JAADAS. Joint Advanced Defect assEsment for android applications

TinyInjector. Shared Library Injector on Android

Stingray. IDAPython plugin for finding function strings recursively

hooker. Hooker is an opensource project for dynamic analyses of Android applications. This project provides various tools and applications that can be use to automaticaly intercept and modify any API calls made by a targeted application.

Android-Inline-Hook. thumb16 thumb32 arm32 inlineHook in Android

methodHook. 通过Xposed框架hook android的敏感函数，具体参考https://github.com/halfkiss/ZjDroid, 并添加了相应的函数

sslsplit. Transparent SSL/TLS interception

AndroidGotHook. GOT Hook implemented in Android

cydiasubstrate_hooktools. Java 与 jni 部分函数Hook项目

jniostorlab. JNI method enumeration in ELF files

gomo. Wiki pages about Android internals

ApkSecurityAnalysis. ApkSecurityAnalysis

Inject-Hook. for android

appmon. Documentation:

nogotofail. An on-path blackbox network traffic security testing tool

nogotofail-pii. This is a fork of the nogotofail project also found on GitHub (https://github.com/google/nogotofail). This project adds tests for detecting common privacy issues in mobile application network traffic.

axmlprinter. Library for parsing and printing compiled Android manifest files

vsaq. VSAQ is an interactive questionnaire application to assess the security programs of third parties.

bintut. Teach you a binary exploitation for great good.

smali_emulator. This software will emulate a smali source file generated by apktool.

Swift.nV. Security Training Tool that demonstrates common mobile application vulnerabilities using Swift in iOS

crass. Code Review Audit Script Scanner

firmwalker. Script for searching the extracted firmware file system for goodies!

MobileApp-Pentest-Cheatsheet. The Mobile App Pentest cheat sheet was created to provide concise collection of high value information on specific mobile application penetration testing topics.

baredroid. Python

AndroidKernelExploitationPlayground. C

libsodium-jni. (Android) Networking and Cryptography Library (NaCL) JNI binding. JNI is utilized for fastest access to native code. Accessible either in Android or Java application. Uses SWIG to generate Java JNI bindings. SWIG definitions are extensible to other languages.

Marvin-static-Analyzer. Marvin static analyzer is an Android application vulnerability scanner. The framework uses androguard and Static Android Analysis Framework (SAAF).

dnSpy. .NET debugger and assembly editor

deobfuscator. The real deal

AllHookInOne. C++

maline. Android Malware Detection Framework

syms2elf. A plugin for Hex-Ray's IDA Pro and radare2 to export the symbols recognized to the ELF symbol table

idataco. IDATACO IDA Pro Plugin

jeb-samplecode. Sample scripts and extensions for JEB Decompiler.

oatdump_plus. Extended oatdump from AOSP platform/art repo

ysoserial. A proof-of-concept tool for generating payloads that exploit unsafe Java object deserialization.

PUMA. Programmable UI-Automation Framework for Dynamic App Analysis

fsmon. Filesystem monitor tool for Linux/Android iOS/macOS

marvin-django. Marvin-django is the UI/database part of the Marvin project. Marvin is a platform for security analysis of Android apps.

okhttp. Square’s meticulous HTTP client for the JVM, Android, and GraalVM.

SSLCertificateChecker-PhoneGap-Plugin. :passport_control: Prevent Man in the Middle attacks with this Cordova plugin

ADBI. Android Dynamic Binary Instrumentation tool for tracing Android native layer

substrate. by @saurik, compatible with iOS 5

diva-android. DIVA Android - Damn Insecure and vulnerable App for Android

bytecode-viewer. A Java 8+ Jar & Android APK Reverse Engineering Suite (Decompiler, Editor, Debugger & More)

see. Sandboxed Execution Environment

Android-InsecureBankv2. Vulnerable Android application for developers and security enthusiasts to learn about Android insecurities

custom-tabs-client. Chrome custom tabs examples

frida-presentations. Public presentations given on Frida at conferences

AndroBugs_Framework. AndroBugs Framework is an efficient Android vulnerability scanner that helps developers or hackers find potential security vulnerabilities in Android applications. No need to install on Windows.

ELF-ARM-HOOK-Library. It's very similiar to Substrate. But I give you three methods to do HOOK.

aamo. AAMO: Another Android Malware Obfuscator

android-post-webview. Java

ZjDroid. Android app dynamic reverse tool based on Xposed framework.

jebPlugins. Various Jeb plugins, including obfuscation restore

dexposed. dexposed enable 'god' mode for single application.

AuditDroid. AduitDroid

HelloSwift. Java

AndroidEagleEye. An Xposed and adbi based module which is capable of hooking both Java and Native methods targeting Android OS.

TheSevenWeapons. 安卓动态调试七种武器

enjarify. Python

NoDeviceCheck. [Xposed module] Disable device compatibility check

AndFix. AndFix is a library that offer hot-fix for Android App.

android-lint-checks. Java

dexinfo. A very rudimentary Android DEX file parser

uiautomator. Python wrapper of Android uiautomator test tool.

Xposed. The native part of the Xposed framework (mainly the modified app_process binary).

XposedBridge. The Java part of the Xposed framework.

rootcloak. Open source module for Xposed Framework that hides root from specific apps

training. Training materials crafted and publicly provided by Red Naga members

DexHook. DexHook is a xposed module for capturing dynamically loaded dex files.

DexHunter. General Automatic Unpacking Tool for Android Dex Files

qark. Tool to look for several security related Android application vulnerabilities

fuzz_zone. Fuzzing utility which enables sending arbitrary SCMs to TrustZone

qseecom_modifications. Modifications in the qseecom driver which enable FuzzZone to operate

MSM8974_exploit. Full TrustZone exploit for MSM8974

mate7_TZ_exploit. Huawei mate 7 TrustZone exploit

native-shim. A "shim" for loading native jni files for Android active debugging

seal. SEAndroid Analytics Library for live device analysis

samsung-ime-rce-poc. Samsung Remote Code Execution as System User

preeny. Some helpful preload libraries for pwning stuff.

ldpreloadhook. a quick open/close/ioctl/read/write/free function hooker

JEB-sample-scripts. Sample Scripts for JEB(Android Interactive Decompiler)

myJEBPlugins. Scripts and Plugins for JEB

armhook-core. Core of Linux hooking engine for ARM architecture

armhook. Linux hooking engine for ARM architecture

create_ap. [NOT MAINTAINED] This script creates a NATed or Bridged WiFi Access Point.

hello-pinnedcerts. Example of certificate pinning on Android

AndroidPinning. A standalone library project for certificate pinning on Android.

cert-pinner. Certificate pinning on Android sample

canhazaxs. A tool for enumerating the access to entries in the file system of an Android device.

MonkeyRunner_ApkTest. Python+MonkeyRunner 渠道包测试脚本程序

Shellshock-Vulnerability-Scan. Android app to scan for bash Vulnerability - CVE-2014-6271 also known as Shellshock

apk-signature-verify. jar Signature / APK Signature v2 verify with pure python (support rsa dsa ecdsa)

AndroidZipArbitrage. Exploit for Android Zip bugs: 8219321, 9695860, and 9950697

obfuscator.

AndroidObfuscation-NDK. Example of obfuscating an Android NDK project using O-LLVM

iodine. Official git repo for iodine dns tunnel

AndroidHostileEnvironmentDetection. Contains many different ways to identify hostile environments.

mitmproxy. An interactive TLS-capable intercepting HTTP proxy for penetration testers and software developers.

rootcloak. Open source module for Xposed Framework that hides root from specific apps

AndroidIntentFuzzer. Fork of iSec Partners Android Intent Fuzzer (https://www.isecpartners.com/tools/mobile-security/intent-fuzzer.aspx)

CobraDroidBeta. Source code for the beta release of CobraDroid

JustTrustMe. An xposed module that disables SSL certificate checking for the purposes of auditing an app with cert pinning

dtf. Android Device Testing Framework ("dtf")

oat2dex-python. Extract DEX files from an ART ELF binary

Diaphora_loader. Plugin Loader for Diaphora(Ida Pro)

Frida_For_Ida_Pro. Frida PluginFor Ida Pro

ADB_Helper_QT_Super_version. All You Need For Ida Pro And Android Debugging

wiki.secmobi.com. SecMobi Wiki is a collection of mobile security resources.

androidpatternlock. A little Python tool to crack the Pattern Lock on Android devices

drozer. sniffer and fuzzer modules for drozer

DroidSniff. DroidSniff is an Android app for Security analysis in wireless networks and capturing facebook, twitter, linkedin and other accounts.

VulnApp. A vulnerable Android app

maldrolyzer. Simple framework to extract "actionable" data from Android malware (C&Cs, phone numbers etc.)

android-essentials-toolbox. A set of building blocks for analyzing Android apps with Atlas

AndroidPinning. A standalone library project for certificate pinning on Android.

smalisca. Static Code Analysis for Smali files

honggfuzz-android. An Android port of the general purpose honggfuzz fuzzer

melkor-android. An Android port of the melkor ELF fuzzer

diaphora. Diaphora, the most advanced Free and Open Source program diffing tool.

etna_viv. Etnaviv is a project to build a FOSS driver for the Vivante GCxxx series of embedded GPUs - laanwj's personal fork - upstream is https://github.com/etnaviv/etna_viv

smali. smali/baksmali

flare-ida. IDA Pro utilities from FLARE team

xCon-Issues. public "forum" for xCon requests

MEMSCAN. A memory scanning tool which uses mach_vm* to either dump memory or look for a specific sequence of bytes.

troubleshooter. setroubleshootd xSports

InstallerHijackingVulnerabilityScanner. Java

nexus_5_bootloader_unpacker. A bootloader imgdata unpacker for Nexus 4, 5 and 7 smartphones as well as imgdata tool for Nexus 5.

googleplay-api. Google Play Unofficial Python API - This project was a PoC and is not maintained anymore. Please feel free to fork it and improve it in any way.

cuckoo-droid. CuckooDroid - Automated Android Malware Analysis with Cuckoo Sandbox.

android_external_updateprop. Update Readonly Properties

jadx. Dex to Java decompiler

Mobile-Security-Framework-MobSF. Mobile Security Framework (MobSF) is an automated, all-in-one mobile application (Android/iOS/Windows) pen-testing, malware analysis and security assessment framework capable of performing static and dynamic analysis.

armpwn. Repository to train/learn memory corruption on the ARM platform.

linux-memory-dumper. Script that dumps running process memory from Linux systems using /proc.

Lanmitm. Android中间人攻击测试工具

adbi. Android Dynamic Binary Instrumentation Toolkit

ddi. ddi - Dynamic Dalvik Instrumentation Toolkit

AndBug. Android Debugging Library

drozer-modules. Python

drozer. The Leading Security Assessment Framework for Android.

pscout. Mirror of PScout (http://pscout.csl.toronto.edu/).

sqlcipher. SQLCipher is a standalone fork of SQLite that adds 256 bit AES encryption of database files and other security features.

manifesto. PoC framework for APK obfuscation

samples. Examples of the obfuscated APKs (using manifesto and/or other techniques)

simplify. Android virtual machine and deobfuscator

android-scripts. Collection of Android reverse engineering scripts

anti-emulator. Android Anti-Emulator

VulnWebView. Java

jsif-enumerator. A drozer module built to enumerate JavaScript interface strings in applications and aid low false positive detection of addJavascriptInterface vulnerabilites.

rootadb. restart adbd with root privileges

HexRaysCodeXplorer. Hex-Rays Decompiler plugin for better code navigation

android-backup-extractor. Android backup extractor

mkbreak. Generic exploit for master key vulnerability in Android

Apktool. A tool for reverse engineering Android apk files

android-security-awesome. A collection of android security related resources