rankalpha

Udex. dump dex for android 14

ZygiskFrida. Injects frida gadget using zygisk to bypass anti-tamper checks.

ptracer. System calls monitor and analyzer for x86_64 and AARCH64 (Android)

proxydroid. 编译版https://github.com/madeye/proxydroid

crdroid_android_prebuilts_clang_host_linux-x86_clang-r536225. C++

DexAnalyze. 解析Dex文件结构

arrow_android_manifest. ArrowOS manifest - your journey starts here! GottaSyncThemAll

arrow_android_packages_apps_ParanoidSense. Kotlin

google-keys.

gdbserver. A tiny debugger implement the GDB Remote Serial Protocol. Can work on i386, x86_64, ARM and PowerPC.

arrow_android_vendor_gapps. Makefile

Manifest_Tester. Test AOSP/git repo manifests

arrow_local_manifest.

dex2c. 🎇 AOT compiler to translate dalvikvm code into cpp code

kernelscript. KernelScript is a modern, type-safe, domain-specific programming language for eBPF-Centric kernel customization

AndroidMethodHook. android art hook like Sophix

AOSP-study. 对AOSP定制 了解原理以及脱壳机制作

crdroid_android_packages_apps_FaceUnlock.

ajeossida. Customized Frida build for bypassing basic detections and helping ajeossideul (guys) test mobile apps with Frida

HookwormForAndroid. 一个基于Magisk&Riru的Module，可以助你用超低成本开发各种Hook插件，无须Xposed

YukiHookAPI. ⛱️ An efficient Hook API and Xposed Module solution built in Kotlin.

crdroid_android. Build crDroid and some general information

urhook. 一个安卓/Linux Arm64的多功能hook库

GlossHook. A simple android NativeHook library.

bpfhacks. eBPF hacks

analysis_claude_code. 本仓库包含对 Claude Code v1.0.33 进行逆向工程的完整研究和分析资料。包括对混淆源代码的深度技术分析、系统架构文档，以及重构 Claude Code agent 系统的实现蓝图。主要发现包括实时 Steering 机制、多 Agent 架构、智能上下文管理和工具执行管道。该项目为理解现代 AI agent 系统设计和实现提供技术参考。

LSPTools. LSPosed模块的两个利器：classmonitor和jnitrace

BPFroid. Trace Android framework API, native libraries, system calls and other events using eBPF

ApkShelling. 脱Apk使用360加固、梆梆加固、腾讯乐固、百度加固免费版加的壳

Jiagu. Android apk jiagu

AlbatrossAndroid. a next-generation hooking and reflection framework built for performance, safety, and extensibility.

kyanos. Kyanos is a networking analysis tool using eBPF. It can visualize the time packets spend in the kernel, capture requests/responses, makes troubleshooting more efficient.

nmmp. dex-vm used to protect the android classes.dex file

DirtyPipe-Android. Dirty Pipe root exploit for Android (Pixel 6)

hello-rootkit. 一个基于LKM的Linux内核级rootkit的实现，包含模块隐藏、提权、文件隐藏、进程隐藏、端口隐藏功能

bpftrace_local_manifest. Local manifest instructing repo to pick bpftrace-related projects from https://github.com/michalgr/

eStrace. A tool that traces system calls using eBPF

aosp-env. 快速搭建aosp（Android源码）的开发环境

retsnoop. Investigate kernel error call stacks

ptrace_do. A ptrace library for easy syscall injection in Linux.

dexbox. A lightweight dex file parsing library

bpf-inside. C

Action-Build. Build OnePlus SukiSU Ultra KPM+VFS+LZ4KD Kernel

HwBpApp. hwBreakpoint Test App

oumi. Easily fine-tune, evaluate and deploy Qwen3, DeepSeek-R1, Llama 4 or any open source LLM / VLM!

AppProtect. 整理一些app常见的加固方法，包括java层、native层和资源文件加固等

RDex. 基于Xposoed的QContainer容器版本脱壳机，目前支持二代填充式类抽取加固

Anti-Anti-Debug. Be able to use developer tools again on user-hostile websites

Skroot-Next. 适用于 Android 的patch内核 root 解决方案

Android_Kernel_hwBreakPoint. C++

VmwareHardenedLoader. Vmware Hardened VM detection mitigation loader (anti anti-vm)

TSBattery. A new way to save your battery avoid cancer apps hacker it.

bpftrace. bpftrace is a kernel live tracing (debugging) tool, similar to dtrace on Illumos. Ubuntu doesn't provide this package.

TimTool. Tim功能性增强XPosed模块，为Tim增加更多趣味功能

UnifiedReward. Official implementation of UnifiedReward & [NeurIPS 2025] UnifiedReward-Think

ResourcePoison. Writeup and exploit for CVE-2025-22441: Privilege escalation from installed app to SystemUI process on Android due to pass of untrusted ApplicationInfo to LoadedApk

ebpf_dev_tool. Rust

LKM. Examples on Linux Kernel Modules Hacking

Build-Mem-Module-Workflow. Workflow file for build memory read kernel module for android.

DexKit. An easy-to-use, high-performance dex deobfuscation library.