6 रिपॉजिटरी
Executing Java code and specialized security modules directly on an Android device to test for systemic weaknesses.
Distinct from Security Testing: Distinct from general Security Testing: specifically targets Android runtime with Java code injection and module execution.
Explore 6 awesome GitHub repositories matching security & cryptography · Android Runtime. Refine with filters or upvote what's useful.
Elder driver Xposed Framework.
Hooks into the Android Runtime (ART) to replace or extend method implementations at runtime using native C/C++ components.
Drozer is a security testing framework and runtime analyzer for Android applications and devices. It functions as an exploit management framework and a security toolset used to identify vulnerabilities, misconfigurations, and leaks within the Android operating system and its installed applications. The framework enables the simulation of application behavior and the interaction with communication endpoints to detect security flaws. It manages the execution, analysis, and sharing of public exploits for mobile security research. The system provides capabilities for application auditing, vulner
Analyzes the Android runtime and device shell to detect vulnerabilities within installed applications.
Drozer is a security testing framework for Android applications that operates through an agent-based remote execution model. It combines a client-server command routing system with a device-side agent, enabling security assessments by mapping inter-process communication (IPC) attack surfaces and running dynamic exploit modules directly on Android devices. The framework distinguishes itself through its ability to discover and enumerate exported Android components by analyzing manifest data and crafting Intents to probe for vulnerabilities. It supports content provider query injection to detect
Executes Java code and specialized security modules directly on an Android device to test for systemic weaknesses.
XposedBridge एक एंड्रॉइड Java हुकिंग फ्रेमवर्क और बाइटकोड इंस्ट्रूमेंटेशन इंजन है। यह एंड्रॉइड ऑपरेटिंग सिस्टम और इंस्टॉल किए गए एप्लिकेशन के भीतर Java मेथड कॉल्स को इंटरसेप्ट और मॉडिफाई करने के लिए एक रनटाइम सिस्टम के रूप में कार्य करता है। यह प्रोजेक्ट ज़ाइगोट (zygote) प्रोसेस इंजेक्शन के लिए एक मैकेनिज्म प्रदान करता है, यह सुनिश्चित करता है कि सभी स्पॉन किए गए एप्लिकेशन इंस्ट्रूमेंटेशन लॉजिक को इनहेरिट करें। यह निजी आंतरिक सिस्टम मेंबर्स तक पहुंचने के लिए मेथड प्रॉक्सीइंग और Java रिफ्लेक्शन के माध्यम से आंतरिक एंड्रॉइड सिस्टम व्यवहारों के संशोधन को सक्षम बनाता है। यह फ्रेमवर्क डायनामिक एंड्रॉइड इंस्ट्रूमेंटेशन और रनटाइम एनालिसिस का समर्थन करता है, जो मेथड एग्जीक्यूशन फ्लो के अवलोकन और हेरफेर की अनुमति देता है। इसकी क्षमताएं एंड्रॉइड एप्लिकेशन मॉडिंग को कवर करती हैं, जिसमें मूल APK फाइलों को संशोधित किए बिना आंतरिक लॉजिक को बदलने की क्षमता शामिल है।
Supports observing and manipulating method execution flows in a live Android environment for research and debugging.
BiliRoamingX is a collection of binary modifications and an application feature unlocker for a mobile client. It functions as a set of patches designed to unlock hidden features, remove regional restrictions, and modify the behavior and appearance of the application. The project utilizes a customization framework to remove unwanted page elements and adjust interface scales. It includes a media playback optimizer that forces default high resolutions and enables custom playback speeds for video streams. The modification suite covers regional restriction bypasses, content feed filtering, and su
Alters the properties and methods of active application objects to enable disabled features.
This project is an Android security analysis toolkit and mobile app runtime manipulator designed for reverse engineering and auditing mobile applications. It provides a system for modifying Java classes and method behavior in active mobile processes to bypass security controls. The toolkit includes a web-based interface for controlling the instrumentation engine and a specialized utility for disabling certificate validation to intercept and inspect encrypted network traffic via SSL pinning bypass. It also features an Android file explorer for browsing and managing files within private data di
Intercepts function calls and alters Java classes in real time to change how a mobile application executes.