Ryan Welton

JustTrustMe. An xposed module that disables SSL certificate checking for the purposes of auditing an app with cert pinning

AndroidKernelExploitationPlayground. C

AndroidObfuscation-NDK. Example of obfuscating an Android NDK project using O-LLVM

AndroidZipArbitrage. Exploit for Android Zip bugs: 8219321, 9695860, and 9950697

OSX_Swizzler. Demonstrates cracking an app without modifying it using SIMBL + method swizzling

AndroidHostileEnvironmentDetection. Contains many different ways to identify hostile environments.

WebAPKCrawler. Uses Google to search for .apks hosted on websites and downloads them

KindleXposed. Xposed module for Android that will remove DRM from your Kindle books

AndroidIntentFuzzer. Fork of iSec Partners Android Intent Fuzzer (https://www.isecpartners.com/tools/mobile-security/intent-fuzzer.aspx)

CardLibrary. Read Magnetic stripe data using square card reader

Permission-Control. Viewing and revocation of Android permissions

LLVM-Linux-Kernel. C

teamviewerpoc. Java

vUSBf. Python

AndroidPermissionWebScraper. A real quick ruby script to scrape Androids permission website and export permission name, since API, and description to a .csv file

BroadcastAnywhere. Java

obfuscator.

Newz4Droid. A usenet client for android

SafetyNetTestApp. Java

SM-G900V_NA_KK_Opensource-S5-Kernel-. C

android-bins.

boot-unlocker. Automatically exported from code.google.com/p/boot-unlocker-gnex

MinMinGuard. Cancelled

secure-mobile-development. Secure Mobile Development - A collection of best practices

rootcloak. Open source module for Xposed Framework that hides root from specific apps

magspoof. MagSpoof is a portable device that can spoof/emulate any magnetic stripe or credit card "wirelessly", even on standard magstripe readers.

drozer. The Leading Security Assessment Framework for Android.

fuzzer-android. Unnamed repository; edit this file 'description' to name the repository.

HipChatXSSExploit. %3C%73%63%72%69%70%74%3E%61%6C%65%72%74%28%22%43%72%6F %73%73%53%69%74%65%53%63%72%69%70%74%69%6E%67%32%22%29%3C%2F %73%63%72%69%70%74%3E

googleplay-api. Google Play Unofficial Python API

Node-Password-Manager. A (not quite functional) password manager written in coffescript

mitmproxy. An interactive SSL-capable intercepting HTTP proxy for penetration testers and software developers

smali. smali/baksmali

android-vts. In the spirit of open data collection, and with the help of the community, let's take a pulse on the state of Android security. NowSecure presents Android VTS

samsung-ime-rce-poc. Samsung Remote Code Execution as System User

Nexus-5-4.4.2-Local-DOS. Causes a reboot with 0 permissions on a Nexus 5 <= 4.4.2

Signal-Android. A private messenger for Android.

AndroidViewClient. Android ViewServer client

SuperPoster. yenc NNTP poster in java

bootimg-tools. Android boot.img creation and extraction tools (also MinGW compatible)

androguard. Reverse engineering, Malware and goodware analysis of Android applications ... and more (ninja !)

httpswatch. https://httpswatch.com

Xposed. The native part of the Xposed framework (mainly the modified app_process binary).

syzkaller. syzkaller is a distributed, unsupervised, coverage-guided Linux syscall fuzzer

freebsd. FreeBSD src tree (read-only mirror)

libping_unhash_exploit_POC. CVE-2015-3636 exploit

iodine. Official iodine git repo

cve-2015-1538-2. An exploit for CVE-2015-1538-1 - Google Stagefright ‘stsc’ MP4 Atom Integer Overflow Remote Code Execution

drozer-agent. The Android Agent for the Mercury Security Assessment Framework.

PlayAppInstaller. Java

google-play-crawler. Play with Google Play API :)

android-cluster-toolkit. The Android Cluster Toolkit helps organize and manipulate a collection of Android devices.

unfiltered. A toolkit for servicing HTTP requests in Scala

maven.

platform_dalvik. C++

S3Client. An Scala S3 Library that uses finagle for evented, asynchronous IO.

DrawSomethingHelper. This game allows you to play CUSTOM WORDS on Draw Something. It also allows you to overlay and image to trace out.

img4tool. image4

evilarc. Create tar/zip archives that can exploit directory traversal vulnerabilities