tiann/epic
Epic
Epic este un toolkit pentru instrumentarea runtime-ului Android, interceptarea metodelor și auditarea posturii de securitate. Funcționează ca un framework de programare orientată pe aspecte și un interceptor de metode dinamic conceput pentru a monitoriza și altera comportamentul metodelor Java în cadrul Android Runtime.
Proiectul oferă capabilități pentru interceptarea și modificarea atât a componentelor framework-ului Android de bază, cât și a logicii specifice aplicației. Acest lucru permite injectarea de comportament Java personalizat și redirecționarea execuției metodelor fără a altera codul sursă original.
Framework-ul include instrumente pentru auditarea securității aplicațiilor, care implică scanarea pentru shell-uri încorporate și monitorizarea utilizării API-urilor de sistem sensibile. Aceste funcții de observabilitate permit analiza fluxului de date și verificarea posturilor de securitate în timpul execuției la runtime.
Features
- ART Runtime Method Hooking Tools - Provides a specialized framework for hooking into the Android Runtime (ART) to intercept and modify method calls.
- Java Method Hooking - Intercepts and modifies Java interface calls in running Android applications to add custom behavior.
- Android Hooking Frameworks - Intercepts core Android framework methods during execution to modify operating system component behavior.
- ART Method Hooking Frameworks - Implements a runtime instrumentation framework specifically for intercepting Java methods on the Android Runtime.
- Android Security Tools - Audits Android application security by monitoring system calls and sensitive API usage.
- Runtime Logic Modification - Alters application behavior in memory via runtime hooking without modifying the original source code.
- Application Method Interceptors - Intercepts application-level method calls at runtime to monitor and alter behavior.
- Runtime Instrumentation - Injects hooks into the running Android process to intercept and modify Java method calls.
- Runtime Memory Redirection - Redirects execution by swapping function memory addresses in the Android Runtime to point to proxy functions.
- Android Application Auditing - Scans running Android applications for sensitive API usage and embedded shells to verify security postures.
- Application Security Auditing - Verifies the security posture of running applications by scanning for sensitive API usage and embedded shells.
- In-Memory - Alters application behavior by updating the method dispatch table within the process memory.
- Method Interception Proxies - Routes original function calls through dynamic proxy handlers to inject custom logic without altering binaries.
- Non-Invasive AOP Frameworks - Implements a non-invasive AOP framework to intercept method execution and modify logic in live Android processes.
- Android AOP Frameworks - Provides an aspect-oriented programming framework for injecting custom logic into Android applications.
- Android Dynamic Analysis Tools - Monitors runtime method calls and data flow within Android processes for security and performance analysis.
- Reflection-Based Access - Uses Java reflection to bypass access restrictions and manipulate private internal members of the Android system.
- Runtime Execution Interception - Intercepts method calls at runtime to modify parameters, return values, or track data flow.
- System API Monitoring - Monitors calls to sensitive Android framework and application methods for security checks and instrumentation.
- Android Instrumentation Tools - Dynamic Java method AOP hooking library for ART.
