Awesome GitHub RepositoriesMobile Application Analysis

Security-101 is a vendor-agnostic, foundational cybersecurity learning curriculum organized into modular, framework-aligned modules. It is designed to build core knowledge across multiple security domains without tying content to specific products or platforms, making it suitable for both beginners and professionals seeking a structured introduction to the field. The curriculum is built around established security frameworks, including the MITRE ATT&CK framework for standardized threat analysis and the NIST Cybersecurity Framework for incident response workflows. It covers a broad range of do

Apkleaks ist ein statisches Analysetool und ein Sicherheits-Auditor, der dazu entwickelt wurde, hartcodierte Secrets, API-Endpunkte und sensible Daten aus Android-Anwendungspaketen (APK) zu extrahieren. Es arbeitet als Secret-Scanner, der kompilierte Binärdateien analysiert, ohne sie auszuführen, um potenzielle Informationslecks und unsichere Endpunkte zu identifizieren. Das Tool verwendet eine regex-basierte Datenextraktions-Engine, um sensible Strings innerhalb von dekompiliertem Code zu identifizieren. Es unterstützt Anpassungen durch JSON-definierte Suchmuster und bietet Konfigurations-Flags, um das Verhalten des zugrunde liegenden Disassemblers anzupassen. Die Analyse-Pipeline umfasst Binär-Dekompilierung, Textextraktion und Mustererkennung. Identifizierte Sicherheitslecks und Anmeldedaten können zur Offline-Überprüfung in Text- oder JSON-Dateien exportiert werden.

APKLab is an integrated security analysis platform and reverse engineering IDE for Android applications. It provides a unified environment for decompiling binaries into source code, repackaging modified applications into signed installers, and performing comprehensive security analysis. The platform distinguishes itself by combining static and dynamic analysis workflows. It enables the injection of runtime hooks and gadget libraries to monitor application behavior, while providing specialized patching capabilities to intercept and decrypt encrypted network traffic via a proxy. The toolkit co

该项目目前仅仅是规划项目中的冰山一角，如果您对此项目感兴趣或者想参与后继项目的开发工作或者翻译工作中，请发送邮件至blsm@vip.qq.com说明你的能力和诉求。

Release v0.5.4: - Tai-e ships with a new frontend, providing faster and more reliable conversion from Java programs to Tai-e IR. - Android app analysis is supported through a PacDroid-powered plugin integrated with pointer analysis. - Spring DI and WEC analysis is supported through the Spring…

APKHunt is a comprehensive static code analysis tool for Android apps that is based on the OWASP MASVS framework. Although APKHunt is intended primarily for mobile app developers and security testers, it can be used by anyone to identify and address potential security vulnerabilities in their code.

Adhrit is an open source Android APK reversing and analysis suite. The tool is an effort to find an efficient solution to all the needs of mobile security testing and automation. Adhrit has been built with a focus on flexibility and mudularization. Adhrit currently uses the Ghera benchmarks to…

Yet another static code analyzer for malicious Android applications

droidefense (originally named atom: a nalysis t hrough o bservation m achine)* is the codename for android apps/malware analysis/reversing tool. It was built focused on security issues and tricks that malware researcher have on they every day work. For those situations on where the malware has…

DroidLysis is a pre-analysis tool for Android apps: it performs repetitive and boring tasks we'd typically do at the beginning of any reverse engineering. It disassembles the Android sample, organizes output in directories, and searches for suspicious spots in the code to look at. The output…