Tool to look for several security related Android application vulnerabilities
Apkleaks is a static analysis tool and security auditor designed to extract hardcoded secrets, API endpoints, and sensitive data from Android application packages. It operates as a secret scanner that analyzes compiled binaries without executing them to identify potential information leaks and insecure endpoints. The tool utilizes a regex-based data extraction engine to identify sensitive strings within decompiled code. It supports customization through JSON-defined search patterns and provides configuration flags to tune the behavior of the underlying disassembler. The analysis pipeline enc
Checkstyle is a Java static analysis tool and linter designed to identify and enforce coding standards and best practices. It functions as a code quality auditor and Javadoc validation tool, checking source code against configurable rulesets to ensure structural and stylistic consistency. The project allows for the creation of custom linting rules by extending a core API to inspect the abstract syntax tree. It further enables specialized validation through the use of XPath expressions to query the syntax tree for specific code patterns and violations. Capability areas include the enforcement
StaCoAn is a crossplatform tool which aids developers, bugbounty hunters and ethical hackers performing static code analysis on mobile applications.
Principalele funcționalități ale vincentcox/stacoan sunt: Mobile Security Frameworks, Static Analysis and Scanning, Static Analysis Tools.
Alternativele open-source pentru vincentcox/stacoan includ: linkedin/qark — Tool to look for several security related Android application vulnerabilities. find-sec-bugs/find-sec-bugs. dwisiswant0/apkleaks — Apkleaks is a static analysis tool and security auditor designed to extract hardcoded secrets, API endpoints, and… checkstyle/checkstyle — Checkstyle is a Java static analysis tool and linter designed to identify and enforce coding standards and best… detekt/detekt — Detekt is a static analysis tool, code quality linter, and complexity analyzer for Kotlin source code. It functions as… codinggay/blackdex — BlackDex is an Android runtime-level DEX extraction tool that recovers bytecode from protected APK files across…