Awesome GitHub RepositoriesMobile Application Security

The OWASP Cheat Sheet Series is a comprehensive, community-driven repository of concise security best practices and defensive coding patterns. It serves as a centralized knowledge base for developers and security professionals, providing actionable guidance to secure applications across the entire software development lifecycle. The project covers a vast array of security domains, ranging from fundamental web application hardening and authentication protocols to specialized controls for modern infrastructure and artificial intelligence systems. What distinguishes this project is its decentral

Fingerprint is a visitor identification and fraud detection platform that generates persistent, unique identifiers by analyzing browser and device attributes. By extracting technical signals from the client environment, it enables reliable user tracking across sessions without relying on traditional cookies. The platform distinguishes itself through its focus on high-accuracy identification and security-first architecture. It employs edge-side proxying to bypass ad-blockers and privacy restrictions, ensuring consistent data collection. To maintain data integrity, it uses cryptographic payload

This project is a curated directory and catalog of privacy-respecting software and security-focused services. It serves as a structured resource for finding alternatives to corporate services, focusing on tools that prioritize data sovereignty, end-to-end encryption, and user anonymity. The directory is maintained as a markdown-based resource list and rendered via a static site generator. It further extends its utility through a CORS-enabled public API and a JSON-based data schema, allowing the curated catalog of tools and providers to be retrieved programmatically. The collection covers a w

Bottles is a Wine compatibility manager and prefix manager that provides a graphical interface for running Windows applications on Linux. It functions as a Windows application sandbox and dependency manager, organizing isolated environments to prevent dependency conflicts and protect the host operating system. The project acts as a Wine runner orchestrator, allowing users to download, install, and switch between different compatibility layers and graphics renderers. It distinguishes itself by using community-driven scripts for automated software installation and dependency management, alongsi

FairEmail ist ein Open-Source-E-Mail-Client für Android, der Standard-IMAP- und SMTP-Protokolle unterstützt. Er dient als datenschutzorientiertes Kommunikationstool, das mehrere Konten über einen einheitlichen Posteingang verwaltet und PGP-Verschlüsselung sowie -Entschlüsselung für sichere Nachrichtenübermittlung bietet. Die Anwendung priorisiert den Datenschutz, indem sie Tracking-Pixel blockiert und eine manuelle Bestätigung erfordert, bevor externe Bilder geladen werden. Sie sichert sensible Informationen durch biometrische Authentifizierung und persönliche Identifikationsnummern, um unbefugten Zugriff auf das Gerät zu beschränken. Der Client enthält eine Suite von Organisations- und Automatisierungstools, einschließlich benutzerdefinierter Filterregeln, zeitgesteuertem Senden und konfigurierbaren Wischgesten für die Posteingangsverwaltung. Er behält ein Local-First-Datenmodell mit geräteinterner Suchindizierung, Offline-Nachrichtenzugriff und der Möglichkeit, Besprechungseinladungen mit dem Gerätekalender zu synchronisieren.

FingerprintPay is an Android biometric payment bridge and credential manager that replaces manual password entry with biometric verification for checkout processes in compatible mobile applications. It functions as a tool to authorize payment transactions and automate credential entry through fingerprint verification. The system utilizes hardware-backed security to decrypt stored payment credentials and map biometric identities to encrypted data blobs stored within the device hardware security module. The project covers mobile payment security and automated credential entry by combining hard

This is a PHP native application framework used to build standalone desktop and mobile applications. It functions as a cross-platform app wrapper and binary application bundler, encapsulating PHP codebases into native binaries and installers for macOS, Windows, Linux, iOS, and Android. The project provides a native device API bridge and OS integration layer, allowing PHP application logic to connect directly to host operating system services. This enables the execution of applications as local binaries without the requirement of a remote web server. The framework covers several high-level ca

Island is an Android work profile manager and application sandbox. It provides a system for running parallel instances of the same application to support multiple user accounts and creates isolated environments to limit application access to the rest of the system. The project incorporates a device policy controller to manage system-level settings and restrictions. It includes utilities to halt all background activity for specific applications to conserve system resources and allows for the removal of application visibility from the user interface. The system also handles independent network

Obfuscar is a .NET assembly obfuscator and managed code protector designed to prevent reverse engineering of compiled binaries. It functions as a binary metadata compressor and security tool that renames symbols and encodes strings to protect intellectual property. The project distinguishes itself by altering the Common Intermediate Language structure and modifying assembly metadata tables to hide implementation details. It provides string-to-buffer encoding to prevent plain-text analysis of constants and includes a strong-name re-signing mechanism to ensure modified assemblies remain valid a

This project provides a collection of type-safe wrappers designed to bridge web-based applications with native mobile hardware and system services. It functions as a cross-platform framework that normalizes disparate native plugin behaviors into a unified interface, allowing developers to access device sensors and system capabilities consistently across multiple mobile operating systems. The framework distinguishes itself by wrapping asynchronous native callbacks into reactive streams, simplifying the management of continuous hardware events and data updates. It includes robust mocking capabi

This project provides a comprehensive technical framework for developers building software applications that handle protected health information. It serves as a guide for navigating the legal and technical requirements necessary to ensure that applications and their underlying infrastructure adhere to mandatory health data privacy standards. The guide distinguishes itself by addressing the full spectrum of compliance, from identifying regulatory obligations and business associate requirements to implementing specific technical and physical safeguards. It offers detailed strategies for securin