How this analysis was created: This summary and feature list were written by an AI model that read the project's README and public documentation pages. Each feature links to the documentation it came from; stars, license and language come straight from the GitHub API. The model does not read the source code, and the analysis is refreshed when the project is re-analysed. Learn more on our About page.
APKLab is an integrated security analysis platform and reverse engineering IDE for Android applications. It provides a unified environment for decompiling binaries into source code, repackaging modified applications into signed installers, and performing comprehensive security analysis. The platform distinguishes itself by combining static and dynamic analysis workflows. It enables the injection of runtime hooks and gadget libraries to monitor application behavior, while providing specialized patching capabilities to intercept and decrypt encrypted network traffic via a proxy. The toolkit co
This project is an Android security analysis toolkit and mobile app runtime manipulator designed for reverse engineering and auditing mobile applications. It provides a system for modifying Java classes and method behavior in active mobile processes to bypass security controls. The toolkit includes a web-based interface for controlling the instrumentation engine and a specialized utility for disabling certificate validation to intercept and inspect encrypted network traffic via SSL pinning bypass. It also features an Android file explorer for browsing and managing files within private data di
Hooker is a toolkit for the dynamic instrumentation, memory analysis, and deobfuscation of Android applications. It functions as a reverse engineering framework that uses Frida to inject scripts into running processes, monitor native calls, and extract executable DEX files. The project provides specialized utilities for bypassing security controls, including tools to disable SSL certificate validation and BoringSSL pinning to enable HTTPS traffic interception. It includes capabilities for detecting application packing, extracting cryptographic keys by hooking encryption algorithms, and circum
apk.sh is a mobile application patching framework and reverse engineering tool designed to inject custom instrumentation and logic into compiled Android binaries. It serves as a workflow manager for modifying application packages without requiring access to the original source code. The toolkit focuses on automating the process of injecting the Frida gadget into Android packages, enabling dynamic analysis and function hooking on non-rooted devices. It handles the end-to-end lifecycle of deconstructing, modifying, and resigning binaries to facilitate security research, malware analysis, and be
apk-mitm is a command-line utility designed to modify Android APK files to enable HTTPS traffic inspection via a proxy. It functions as a network security patcher and certificate pinning bypass tool, automating the process of altering application packages to allow man-in-the-middle traffic analysis.
The main features of shroudedcode/apk-mitm are: Certificate Pinning Bypasses, Proxy Certificate Patchers, Android APK Repackaging Tools, Android App Traffic Captures, Non-Root App Patchers, Android Application Reverse Engineering, Android HTTPS Inspection Utilities, Proxy Certificate Injectors.
Open-source alternatives to shroudedcode/apk-mitm include: apklab/apklab — APKLab is an integrated security analysis platform and reverse engineering IDE for Android applications. It provides a… m0bilesecurity/rms-runtime-mobile-security — This project is an Android security analysis toolkit and mobile app runtime manipulator designed for reverse… credittone/hooker — Hooker is a toolkit for the dynamic instrumentation, memory analysis, and deobfuscation of Android applications. It… ax/apk.sh — apk.sh is a mobile application patching framework and reverse engineering tool designed to inject custom… sensepost/objection — Objection is a dynamic instrumentation framework and runtime exploration toolkit for mobile application security… fuzion24/justtrustme — JustTrustMe is an Android security auditing tool and mobile application penetration testing utility. Its primary…