Hooker is a toolkit for the dynamic instrumentation, memory analysis, and deobfuscation of Android applications. It functions as a reverse engineering framework that uses Frida to inject scripts into running processes, monitor native calls, and extract executable DEX files. The project provides specialized utilities for bypassing security controls, including tools to disable SSL certificate validation and BoringSSL pinning to enable HTTPS traffic interception. It includes capabilities for detecting application packing, extracting cryptographic keys by hooking encryption algorithms, and circum
frida-dexdump is an Android memory forensics tool that recovers Dalvik Executable (DEX) files from running application processes using the Frida dynamic instrumentation framework. It functions as a Frida-based runtime analyzer and DEX memory dumper, capable of extracting obfuscated or packed DEX files without modifying the Android system. The tool distinguishes itself through its ability to repair corrupted or missing DEX file headers using heuristic analysis and fuzzy matching techniques. It employs fuzzy boundary detection to identify DEX file boundaries in memory even when headers are dama
apk.sh is a mobile application patching framework and reverse engineering tool designed to inject custom instrumentation and logic into compiled Android binaries. It serves as a workflow manager for modifying application packages without requiring access to the original source code. The toolkit focuses on automating the process of injecting the Frida gadget into Android packages, enabling dynamic analysis and function hooking on non-rooted devices. It handles the end-to-end lifecycle of deconstructing, modifying, and resigning binaries to facilitate security research, malware analysis, and be
GEF is a Python-based extension for GDB that serves as a framework for binary analysis, exploit development, and low-level debugging. It functions as a dynamic analysis extension designed to assist in reverse engineering workflows and malware analysis by enhancing the debugger's ability to inspect process state and memory. The project is distinguished by its specialized heap analysis tools, which allow for the inspection of glibc heap arenas, bins, and chunks to detect memory corruption. It also provides a dedicated toolkit for exploit development, including cyclic pattern generation for offs
frida-ios-dump is a tool that extracts decrypted IPA files from jailbroken iOS devices using the Frida instrumentation framework. It functions as a memory dumper and extraction utility to obtain application binaries directly from device memory.
Die Hauptfunktionen von alonemonkey/frida-ios-dump sind: Frida Process Injections, Binary Memory Dumping, Live Memory Dumpers, Library Function Hooking, Frida-Based Instrumentation, iOS Dynamic Instrumentation, Mobile Application Decrypters, iOS IPA Packers.
Open-Source-Alternativen zu alonemonkey/frida-ios-dump sind unter anderem: credittone/hooker — Hooker is a toolkit for the dynamic instrumentation, memory analysis, and deobfuscation of Android applications. It… hluwa/frida-dexdump — frida-dexdump is an Android memory forensics tool that recovers Dalvik Executable (DEX) files from running application… ax/apk.sh — apk.sh is a mobile application patching framework and reverse engineering tool designed to inject custom… hugsy/gef — GEF is a Python-based extension for GDB that serves as a framework for binary analysis, exploit development, and… chichou/bagbak — [deprecated] Yet another frida based iOS dumpdecrypted. Also decrypts app extensions. kjcracks/clutch — Clutch is a command-line utility designed for security research on jailbroken mobile devices. It functions as a…