James

Awesome-Android-Reverse-Engineering. A curated list of awesome Android Reverse Engineering training, resources, and tools.

Obfu-DE-Scate. Obfu[DE]scate is a de-obfuscation tool for Android APKs that uses fuzzy comparison logic to identify similarities between functions, even if they have been renamed as part of obfuscation. It compares two versions of an APK and generates a mapping text file and an interactive HTML file as outputs!

AutoDroid. A tool for automating interactions with Android devices - including ADB, AndroGuard, and Frida interactivity.

DroidDetective. A machine learning malware analysis framework for Android apps.

Awesome-LLM-Red-Teaming. A curated list of awesome LLM Red Teaming training, resources, and tools.

Tomato. LLM steganography with minimum-entropy coupling - Hiding encrypted messages in natural language.

PocketSmali. A modular and extendable Python tool for emulating simple SMALI code.

DISintegrity. A tool for analysing Android APKs and extracting root, integrity, and tamper detection checks.

AutoCorpus. AutoCorpus is a tool backed by a large language model (LLM) for automatically generating corpus files for fuzzing.

Awesome-Binary-Analysis-Automation. A curated list of awesome binary analysis automation training, resources, and tools.

Oversight. A Completely Modular LLM Reverse Engineering, Red Teaming, and Vulnerability Research Framework.

Broken-Droid-Factory. BDF is a Python tool designed to spin-up pseudo random vulnerable Android applications for training when it comes to vulnerability research, ethical hacking, and pen testing on Android apps.

ThingFinder. ThingFinder is a tool designed to facilitate searching and analysing code, whether it's source code or compiled binary executables. It provides a modular interface for adding new parsers for identifying new 'things'.

Folly. Open-source LLM Prompt-Injection and Jailbreaking Playground

WargamesAI. Professional Wargaming LLM Toolbox

RUNIC. 📱 RUNIC tamper detection demo - designed to serve as a parallel for understanding more complex tamper detection and integrity systems such as Google Play SafetyNet and Huawei Safety Detect.

Tamper. An Android application, designed as a reference point, that implements an array of tamper and root detection methods - inspired by Google Play Safety Net.

CyberTruck-2019-Android-CTF-Writeup. This is a write-up for the Now Secure Android reverse engineering CTF based on analysing a car key-less application. ... It has nothing to do with the Tesla CyberTruck.

GhidraBridge. A Python interface for automating Ghidra tasks.

Just-Another-Differ. 🔎 Function Change Differ | A diffing tool for binary files when comparing obfuscated and changed function contents between versions 🛠️

Would-You-Kindly. A security testing tool designed to evaluate the effectiveness of large language models (LLMs) in protecting secrets and preventing security breaches. With customisable LLM options, the tool allows you to simulate attacks on LLMs using various techniques and observe their defence capabilities.

Hunch. A Predictive Policing and Threat Aggregation toolset. This modular toolset, powered by Natural Language Processing and Open Source Intelligence, is designed to provide the user with actionable data including: signals, pivots, and risk levels.

user1342.

DamnVulnerableShoppingLLM. A Purposely Vulnerable LLM Shopping List Tool

Secure-App-Demo. An Android application designed to demonstrate insecure application security issues.

APK-Hoarder. Primarily designed to pull all APKs from an Android device. APK Hoarder is a lightweight Python program that aggregates all applications on an Android device and performs configurable tasking on them (e.g. pull, configure, push, etc).

LLM-itM. A machine-in-the-middle tool for proxying, inspecting, and modifying traffic sent to and from an OpenAI-compliant endpoint

Oversight-Plugins. A repo for working Oversight Plugins.

SFC. Simple Folder Comparison

One_List. A basic list making application written for Android. Saves list items to external storage as filenames and makes use of run time permissions.

conjecture. Evaluating the likelihood of data points in a LLM's training set

Android-Messenger-App-CTF-Writeup. A write-up and guide on the Android CTF challenge created by Mason CC.

OWASP-MSTG-Android-CrackMe-Walkthrough. The OWASP MSTG Android CrackMe is a series of Android applications with hidden flags designed to develop Java and Native reverse engineering skills.

jailbreakbench. JailbreakBench: An Open Robustness Benchmark for Jailbreaking Language Models [NeurIPS 2024 Datasets and Benchmarks Track]

easyLLM. A simple wrapper around hugging face for asking LLMs questions in a debug environment

Virtual-Distancing. Virtual Distancing is a simple Android geo-location based game and educational tool designed around infection. The game has one aim... don't get infected.

mec. Code for minimum-entropy coupling.

Storage. A simple file explorer app for viewing and sharing files on android external storage.

transformers. 🤗 Transformers: State-of-the-art Machine Learning for Pytorch, TensorFlow, and JAX.