awesome-repositories.com
Blog
MCP
awesome-repositories.com

Discover the best open-source repositories with AI-powered search.

ExploreCurated searchesOpen-source alternativesSelf-hosted softwareBlogSitemap
ProjectMCP serverAboutHow we rankPress
LegalPrivacyTerms
© 2026 Bringes Technology SRL·VAT RO45896025·hello@awesome-repositories.com
CreditTone avatar

CreditTone/hooker

0
View on GitHub↗

Hooker

Hooker is a toolkit for the dynamic instrumentation, memory analysis, and deobfuscation of Android applications. It functions as a reverse engineering framework that uses Frida to inject scripts into running processes, monitor native calls, and extract executable DEX files.

The project provides specialized utilities for bypassing security controls, including tools to disable SSL certificate validation and BoringSSL pinning to enable HTTPS traffic interception. It includes capabilities for detecting application packing, extracting cryptographic keys by hooking encryption algorithms, and circumventing root or debugging environment checks.

The framework covers a broad range of analysis capabilities, including memory scanning for active component detection, SOCKS5 proxy configuration for network traffic routing, and UI interaction analysis. It also supports the collection of device fingerprints and the debugging of embedded WebViews.

AI search

Explore more awesome repositories

Describe what you need in plain English — the AI ranks thousands of curated open-source projects by relevance.

Start searching with AI

Features

  • Frida-Based Instrumentation - Utilizes Frida to inject JavaScript agents into running Android processes for memory inspection and function interception.
  • Dynamic Instrumentation Hooks - Frida automates the process of inserting scripts into running apps to monitor behavior and generate custom interceptors.
  • Android DEX Dumpers - Frida dumps memory to retrieve executable files from protected or packed Android applications.
  • Android Application Debugging - Provides tools for inspecting the internal state and monitoring UI interactions of running Android apps.
  • Environment Cloaking - Bypasses root detection and debugging checks to allow instrumentation tools to run on protected applications.
  • Binary Memory Dumping - Extracts executable bytecode from application process memory to recover files from packed or obfuscated binaries.
  • Dynamic Process Instrumentation - Provides a framework for injecting scripts into running Android processes to monitor calls and extract DEX files.
  • Call Tracing - Monitors native method registration and execution flows to analyze interactions between high-level and low-level code.
  • Android Application Reverse Engineering - Analyzes Android applications using Frida to inspect internal functions, map memory, and trace native calls.
  • Certificate Pinning Bypasses - Overrides certificate validation methods in system libraries to circumvent SSL pinning and enable traffic interception.
  • Mobile Binary Decryption - Extracts DEX files from packed applications and captures cryptographic keys by hooking encryption algorithms.
  • Environment Detection Bypasses - Frida circumvents detection for root access and debugging tools to ensure applications run normally during reverse engineering.
  • Memory Component Detection - A toolkit for scanning application memory to detect active services and map component addresses.
  • Instrumentation Script Generation - Creates scripts for specific classes or methods using memory analysis to automate stack trace printing.
  • Android Traffic Analysis Tools - Routes application data through SOCKS5 proxies and captures SSL traffic for offline analysis.
  • Automated Hook Generation - Automates the creation of interceptor scripts by analyzing class structures and method signatures in memory.
  • SOCKS5 Traffic Routings - Configures system-level networking to tunnel application traffic through a SOCKS5 proxy for interception and debugging.
  • App Deobfuscation Utilities - Identifies app packing and dumps internal functions to aid in reverse engineering.
  • Runtime Certificate Extractions - Frida extracts client-side certificates as portable files by hooking keystore methods during bidirectional authentication.
  • Packed Executable Warnings - Frida identifies the hardening technology used in a package by analyzing its runtime behavior.
  • Cryptographic Key Interceptions - Frida intercepts standard encryption functions to capture plaintexts, ciphertexts, and cryptographic keys.
  • SSL Traffic Captures - Frida intercepts and saves SSL/TLS traffic into packet capture files for offline analysis.
5,195 stars·1,264 forks·JavaScript·21 views

Star history

Star history chart for credittone/hookerStar history chart for credittone/hooker

How this analysis was created: This summary and feature list are AI-generated from collected project material and can contain mistakes. Stars, license and language are imported from GitHub. Inclusion does not mean that we have tested or audited this project. Check the source documentation for any feature you depend on. Learn more on our About page.

Projects sharing features with Hooker

These projects share indexed features with Hooker. Shared tags can include platform or build tooling; verify the primary use case before treating a result as a replacement.
  • r0ysue/r0capturer0ysue avatar

    r0ysue/r0capture

    7,674View on GitHub↗

    r0capture is a tool for intercepting network traffic from Android applications. It serves as a traffic interceptor, packet sniffer, and client certificate exporter used to analyze application-layer communication on Android devices. The project provides mechanisms to bypass SSL pinning and certificate validation, allowing the decryption of encrypted traffic without modifying device trust stores. It also enables the extraction of client-side certificates from application memory for saving to local device storage. Captured network data is serialized into PCAP files to support offline protocol a

    Python
    View on GitHub↗7,674
  • hluwa/frida-dexdumphluwa avatar

    hluwa/frida-dexdump

    4,487View on GitHub↗

    frida-dexdump is an Android memory forensics tool that recovers Dalvik Executable (DEX) files from running application processes using the Frida dynamic instrumentation framework. It functions as a Frida-based runtime analyzer and DEX memory dumper, capable of extracting obfuscated or packed DEX files without modifying the Android system. The tool distinguishes itself through its ability to repair corrupted or missing DEX file headers using heuristic analysis and fuzzy matching techniques. It employs fuzzy boundary detection to identify DEX file boundaries in memory even when headers are dama

    Python
    View on GitHub↗4,487
  • charles2gan/gda-android-reversing-toolcharles2gan avatar

    charles2gan/GDA-android-reversing-Tool

    4,778View on GitHub↗

    This project is a comprehensive Android reverse engineering suite that functions as a decompiler, bytecode deobfuscator, and malware analysis tool. It is designed to convert APK, DEX, and OAT binaries into human-readable source code using a native implementation that does not require a Java Virtual Machine. The platform is distinguished by its integration with Frida for dynamic analysis, allowing users to hook methods, inject custom JavaScript, and dump device memory in real time. It also features specialized security engines, including a taint propagation engine and a stack-state machine, to

    Pythondecompilermalware-analysismobile-security
    View on GitHub↗4,778
  • apklab/apklabAPKLab avatar

    APKLab/APKLab

    3,878View on GitHub↗

    APKLab is an integrated security analysis platform and reverse engineering IDE for Android applications. It provides a unified environment for decompiling binaries into source code, repackaging modified applications into signed installers, and performing comprehensive security analysis. The platform distinguishes itself by combining static and dynamic analysis workflows. It enables the injection of runtime hooks and gadget libraries to monitor application behavior, while providing specialized patching capabilities to intercept and decrypt encrypted network traffic via a proxy. The toolkit co

    TypeScript
    View on GitHub↗3,878
Compare all 30 related projects→

Frequently asked questions

What does credittone/hooker do?

Hooker is a toolkit for the dynamic instrumentation, memory analysis, and deobfuscation of Android applications. It functions as a reverse engineering framework that uses Frida to inject scripts into running processes, monitor native calls, and extract executable DEX files.

What are the main features of credittone/hooker?

The main features of credittone/hooker are: Frida-Based Instrumentation, Dynamic Instrumentation Hooks, Android DEX Dumpers, Android Application Debugging, Environment Cloaking, Binary Memory Dumping, Dynamic Process Instrumentation, Call Tracing.

Which projects share features with credittone/hooker?

Projects with overlapping indexed features include: r0ysue/r0capture — r0capture is a tool for intercepting network traffic from Android applications. It serves as a traffic interceptor,… hluwa/frida-dexdump — frida-dexdump is an Android memory forensics tool that recovers Dalvik Executable (DEX) files from running application… charles2gan/gda-android-reversing-tool — This project is a comprehensive Android reverse engineering suite that functions as a decompiler, bytecode… apklab/apklab — APKLab is an integrated security analysis platform and reverse engineering IDE for Android applications. It provides a… ax/apk.sh — apk.sh is a mobile application patching framework and reverse engineering tool designed to inject custom… androguard/androguard — Reverse engineering and pentesting for Android applications.