Awesome GitHub RepositoriesAndroid Runtime

Elder driver Xposed Framework.

Drozer 是一个针对 Android 应用和设备的安全性测试框架及运行时分析器。它作为一个漏洞管理框架和安全工具集，用于识别 Android 操作系统及其已安装应用中的漏洞、错误配置和泄露。 该框架能够模拟应用行为并与通信端点进行交互，以检测安全缺陷。它管理公共移动安全漏洞的执行、分析和共享。 该系统提供了应用审计、漏洞研究和专用安全模块执行的功能。这包括与 Android 运行时和设备 Shell 交互，以评估硬件和软件的安全状况。

Drozer is a security testing framework for Android applications that operates through an agent-based remote execution model. It combines a client-server command routing system with a device-side agent, enabling security assessments by mapping inter-process communication (IPC) attack surfaces and running dynamic exploit modules directly on Android devices. The framework distinguishes itself through its ability to discover and enumerate exported Android components by analyzing manifest data and crafting Intents to probe for vulnerabilities. It supports content provider query injection to detect

XposedBridge 是一个 Android Java Hook 框架和字节码插桩引擎。它作为一个运行时系统，用于拦截和修改 Android 操作系统和已安装应用中的 Java 方法调用。 该项目提供了一种 Zygote 进程注入机制，确保所有生成的应用都继承插桩逻辑。它通过方法代理和 Java 反射访问私有内部系统成员，从而实现对内部 Android 系统行为的修改。 该框架支持动态 Android 插桩和运行时分析，允许观察和操纵方法执行流。其功能涵盖 Android 应用修改，包括在不修改原始 APK 文件的情况下更改内部逻辑的能力。

BiliRoamingX is a collection of binary modifications and an application feature unlocker for a mobile client. It functions as a set of patches designed to unlock hidden features, remove regional restrictions, and modify the behavior and appearance of the application. The project utilizes a customization framework to remove unwanted page elements and adjust interface scales. It includes a media playback optimizer that forces default high resolutions and enables custom playback speeds for video streams. The modification suite covers regional restriction bypasses, content feed filtering, and su

This project is an Android security analysis toolkit and mobile app runtime manipulator designed for reverse engineering and auditing mobile applications. It provides a system for modifying Java classes and method behavior in active mobile processes to bypass security controls. The toolkit includes a web-based interface for controlling the instrumentation engine and a specialized utility for disabling certificate validation to intercept and inspect encrypted network traffic via SSL pinning bypass. It also features an Android file explorer for browsing and managing files within private data di