How this analysis was created: This summary and feature list are AI-generated from collected project material and can contain mistakes. Stars, license and language are imported from GitHub. Inclusion does not mean that we have tested or audited this project. Check the source documentation for any feature you depend on. Learn more on our About page.
Jadx is a comprehensive Java decompilation suite designed to transform compiled binary application files into readable source code. It functions as a static analysis workbench, providing a graphical interface for navigating, searching, and inspecting the internal logic of complex software packages. By utilizing a bytecode-to-Java pipeline, the project reconstructs high-level logical structures from low-level binary instructions, making it a primary tool for Android application reverse engineering. The project distinguishes itself through a sophisticated control flow reconstruction engine and
StaCoAn is a crossplatform tool which aids developers, bugbounty hunters and ethical hackers performing static code analysis on mobile applications.
Apkleaks is a static analysis tool and security auditor designed to extract hardcoded secrets, API endpoints, and sensitive data from Android application packages. It operates as a secret scanner that analyzes compiled binaries without executing them to identify potential information leaks and insecure endpoints. The tool utilizes a regex-based data extraction engine to identify sensitive strings within decompiled code. It supports customization through JSON-defined search patterns and provides configuration flags to tune the behavior of the underlying disassembler. The analysis pipeline enc
A security focused static analysis tool for Android and Java applications.
Tool to look for several security related Android application vulnerabilities
The main features of linkedin/qark are: Mobile Security Frameworks, Android Static Analysis Tools, App Vulnerability Scanners, Mobile Security, Static Analysis and Scanning, Static Analysis Tools.
Projects with overlapping indexed features include: vincentcox/stacoan — StaCoAn is a crossplatform tool which aids developers, bugbounty hunters and ethical hackers performing static code… dwisiswant0/apkleaks — Apkleaks is a static analysis tool and security auditor designed to extract hardcoded secrets, API endpoints, and… skylot/jadx — Jadx is a comprehensive Java decompilation suite designed to transform compiled binary application files into readable… fsecurelabs/drozer — Drozer is a security testing framework and runtime analyzer for Android applications and devices. It functions as an… find-sec-bugs/find-sec-bugs — The SpotBugs plugin for security audits of Java web applications and Android applications. (Also work with Kotlin,… charles2gan/gda-android-reversing-tool — This project is a comprehensive Android reverse engineering suite that functions as a decompiler, bytecode…