A hook framework for Android Runtime (ART)

A burp for intents wannabe

grep rough audit - source code auditing tool

Convert an APK to an Android Studio Project using multiple open-source decompilers

A security focused static analysis tool for Android and Java applications.

Provides public bug bounty programs in-scope data that offer rewards and monitors public bug bounty programs assets.

This repo contains hourly-updated data dumps of bug bounty platform scopes (like Hackerone/Bugcrowd/Intigriti/etc) that are eligible for reports

APK Downloader for Google Play

Notes about tinkering with Android Project Treble

The Frida Scripts Fetcher & Exploiter tool helps you search and use those scripts to exploit based on the provided search keyword.

A frida tool to dump dex in memory to support security engineers analyzing malware.

🔐 Run frida-server on boot with Magisk, always up-to-date

Python 3.5+ DNS asynchronous brute force utility

The modern Java bytecode editor

FlowDroid Static Data Flow Tracker

Android BugBazaar: Your mobile appsec playground to Explore, Exploit, Excel

The use of this Docker image simplifies the process of running an Android emulator within a Docker container

Email OSINT & Password breach hunting tool, locally or using premium services. Supports chasing down related email

(mirror) Google Play Store Python API

Android in docker solution with noVNC supported and video recording

Launch any application activity

Kernel Address Space Layout Derandomization (KASLD) - A collection of various techniques to infer the Linux kernel base virtual address as an unprivileged local user, for the purpose of bypassing K…

apkInspector is a tool designed to provide detailed insights into the zip structure of APK files, offering the capability to extract content and decode the AndroidManifest.xml file.

The Leading Security Assessment Framework for Android.

Command-line tool that allows searching and downloading app packages (known as ipa files) from the iOS App Store

Universal local privilege escalation Proof-of-Concept exploit for CVE-2024-1086, working on most Linux kernels between v5.14 and v6.6, including Debian, Ubuntu, and KernelCTF. The success rate is 9…

Gourlex is a simple tool that can be used to extract URLs and paths from web pages.

Perfect DLL Proxying using forwards with absolute paths.