How this analysis was created: This summary and feature list are AI-generated from collected project material and can contain mistakes. Stars, license and language are imported from GitHub. Inclusion does not mean that we have tested or audited this project. Check the source documentation for any feature you depend on. Learn more on our About page.
The Mobile Application Security Testing Guide is a comprehensive manual and compliance framework for verifying the security of mobile applications. It provides a standardized reference for identifying and validating common software security weaknesses and performing reverse engineering based on industry standards. The project provides a structured set of technical processes and checklists used to audit applications against established security weakness enumerations. It encompasses guidance for analyzing application binaries and runtime behavior to identify hidden functionality and security ga
Clutch is a command-line utility designed for security research on jailbroken mobile devices. It functions as a specialized toolkit for identifying, decrypting, and extracting installed mobile application binaries to facilitate manual code inspection and vulnerability assessment. The tool provides capabilities for removing platform-level encryption from protected software, allowing researchers to isolate core executable files from application bundles. By performing memory-mapped file dumping and reconstructing binary headers, it enables the conversion of protected applications into portable,
Frida is a dynamic binary instrumentation toolkit that provides a framework for deep process introspection and live application state manipulation. It enables the injection of custom scripts into running processes to trace function calls, modify memory, and analyze application behavior in real-time across diverse operating systems and processor architectures. The project distinguishes itself by embedding a high-performance JavaScript engine directly within the target process, allowing for the execution of user-defined logic for real-time inspection. It utilizes instruction-level hooking to re
Apktool is an Android APK reverse engineering tool designed to decode application packages into human-readable form and rebuild them after modification. It functions as a Dalvik bytecode disassembler and a resource decoder, transforming binary Android XML and DEX files into editable text and Smali representation. The project serves as an application rebuilder, packing modified resources and Smali code back into a functional Android application package. This capability enables the modification of application logic and resources for testing and deployment. The tool covers a broad surface of an
class-dump
The main features of nygard/class-dump are: Mach-O Analysis, Mobile Security, Reverse Engineering and Decompilation.
Projects with overlapping indexed features include: owasp/owasp-mstg — The Mobile Application Security Testing Guide is a comprehensive manual and compliance framework for verifying the… kjcracks/clutch — Clutch is a command-line utility designed for security research on jailbroken mobile devices. It functions as a… frida/frida — Frida is a dynamic binary instrumentation toolkit that provides a framework for deep process introspection and live… ibotpeaches/apktool — Apktool is an Android APK reverse engineering tool designed to decode application packages into human-readable form… pxb1988/dex2jar — dex2jar is an Android dex decompiler and reverse engineering tool designed to convert Dalvik executable bytecode into… skylot/jadx — Jadx is a comprehensive Java decompilation suite designed to transform compiled binary application files into readable…