Awesome GitHub RepositoriesMobile Application Analysis

Security-101 is a vendor-agnostic, foundational cybersecurity learning curriculum organized into modular, framework-aligned modules. It is designed to build core knowledge across multiple security domains without tying content to specific products or platforms, making it suitable for both beginners and professionals seeking a structured introduction to the field. The curriculum is built around established security frameworks, including the MITRE ATT&CK framework for standardized threat analysis and the NIST Cybersecurity Framework for incident response workflows. It covers a broad range of do

Apkleaks es una herramienta de análisis estático y auditoría de seguridad diseñada para extraer secretos hardcodeados, endpoints de API y datos sensibles de paquetes de aplicaciones Android. Opera como un escáner de secretos que analiza binarios compilados sin ejecutarlos para identificar posibles fugas de información y endpoints inseguros. La herramienta utiliza un motor de extracción de datos basado en regex para identificar cadenas sensibles dentro de código descompilado. Soporta la personalización a través de patrones de búsqueda definidos en JSON y proporciona flags de configuración para ajustar el comportamiento del desensamblador subyacente. El pipeline de análisis abarca la descompilación binaria, la extracción de texto y la coincidencia de patrones. Las fugas de seguridad y credenciales identificadas pueden exportarse a archivos de texto o JSON para su revisión offline.

APKLab is an integrated security analysis platform and reverse engineering IDE for Android applications. It provides a unified environment for decompiling binaries into source code, repackaging modified applications into signed installers, and performing comprehensive security analysis. The platform distinguishes itself by combining static and dynamic analysis workflows. It enables the injection of runtime hooks and gadget libraries to monitor application behavior, while providing specialized patching capabilities to intercept and decrypt encrypted network traffic via a proxy. The toolkit co

该项目目前仅仅是规划项目中的冰山一角，如果您对此项目感兴趣或者想参与后继项目的开发工作或者翻译工作中，请发送邮件至blsm@vip.qq.com说明你的能力和诉求。

Release v0.5.4: - Tai-e ships with a new frontend, providing faster and more reliable conversion from Java programs to Tai-e IR. - Android app analysis is supported through a PacDroid-powered plugin integrated with pointer analysis. - Spring DI and WEC analysis is supported through the Spring…

APKHunt is a comprehensive static code analysis tool for Android apps that is based on the OWASP MASVS framework. Although APKHunt is intended primarily for mobile app developers and security testers, it can be used by anyone to identify and address potential security vulnerabilities in their code.

Adhrit is an open source Android APK reversing and analysis suite. The tool is an effort to find an efficient solution to all the needs of mobile security testing and automation. Adhrit has been built with a focus on flexibility and mudularization. Adhrit currently uses the Ghera benchmarks to…

Yet another static code analyzer for malicious Android applications

droidefense (originally named atom: a nalysis t hrough o bservation m achine)* is the codename for android apps/malware analysis/reversing tool. It was built focused on security issues and tricks that malware researcher have on they every day work. For those situations on where the malware has…

DroidLysis is a pre-analysis tool for Android apps: it performs repetitive and boring tasks we'd typically do at the beginning of any reverse engineering. It disassembles the Android sample, organizes output in directories, and searches for suspicious spots in the code to look at. The output…