6 dépôts
Executing Java code and specialized security modules directly on an Android device to test for systemic weaknesses.
Distinct from Security Testing: Distinct from general Security Testing: specifically targets Android runtime with Java code injection and module execution.
Explore 6 awesome GitHub repositories matching security & cryptography · Android Runtime. Refine with filters or upvote what's useful.
Elder driver Xposed Framework.
Hooks into the Android Runtime (ART) to replace or extend method implementations at runtime using native C/C++ components.
Drozer est un framework de test de sécurité et un analyseur d'exécution pour les applications et appareils Android. Il fonctionne comme un framework de gestion d'exploits et une suite d'outils de sécurité utilisés pour identifier les vulnérabilités, les mauvaises configurations et les fuites au sein du système d'exploitation Android et de ses applications installées. Le framework permet la simulation du comportement des applications et l'interaction avec les points de terminaison de communication pour détecter les failles de sécurité. Il gère l'exécution, l'analyse et le partage d'exploits publics pour la recherche en sécurité mobile. Le système offre des capacités d'audit d'applications, de recherche de vulnérabilités et d'exécution de modules de sécurité spécialisés. Cela inclut la capacité d'interagir avec le runtime Android et le shell de l'appareil pour évaluer la posture de sécurité du matériel et des logiciels.
Analyzes the Android runtime and device shell to detect vulnerabilities within installed applications.
Drozer is a security testing framework for Android applications that operates through an agent-based remote execution model. It combines a client-server command routing system with a device-side agent, enabling security assessments by mapping inter-process communication (IPC) attack surfaces and running dynamic exploit modules directly on Android devices. The framework distinguishes itself through its ability to discover and enumerate exported Android components by analyzing manifest data and crafting Intents to probe for vulnerabilities. It supports content provider query injection to detect
Executes Java code and specialized security modules directly on an Android device to test for systemic weaknesses.
XposedBridge is an Android Java hooking framework and bytecode instrumentation engine. It functions as a runtime system for intercepting and modifying Java method calls within the Android operating system and installed applications. The project provides a mechanism for zygote process injection, ensuring that all spawned applications inherit the instrumentation logic. It enables the modification of internal Android system behaviors through method proxying and Java reflection to access private internal system members. The framework supports dynamic Android instrumentation and runtime analysis,
Supports observing and manipulating method execution flows in a live Android environment for research and debugging.
BiliRoamingX is a collection of binary modifications and an application feature unlocker for a mobile client. It functions as a set of patches designed to unlock hidden features, remove regional restrictions, and modify the behavior and appearance of the application. The project utilizes a customization framework to remove unwanted page elements and adjust interface scales. It includes a media playback optimizer that forces default high resolutions and enables custom playback speeds for video streams. The modification suite covers regional restriction bypasses, content feed filtering, and su
Alters the properties and methods of active application objects to enable disabled features.
This project is an Android security analysis toolkit and mobile app runtime manipulator designed for reverse engineering and auditing mobile applications. It provides a system for modifying Java classes and method behavior in active mobile processes to bypass security controls. The toolkit includes a web-based interface for controlling the instrumentation engine and a specialized utility for disabling certificate validation to intercept and inspect encrypted network traffic via SSL pinning bypass. It also features an Android file explorer for browsing and managing files within private data di
Intercepts function calls and alters Java classes in real time to change how a mobile application executes.