A Zygisk module to hide root for KernelSU, Magisk and APatch, designed to work on Android 5.0 and above.

btrace：binder_transaction+eBPF+Golang实现通用的Android APP动态行为追踪工具

主要用来收集/学习爬虫相关技术如：js逆向、app逆向、抓包、验证码、加密技术、自动化技术、机器学习。

瑞数 bypass all

Geetest v4 slider captcha solver

An application for detecting the runtime environment on the Android platform.

基本实现ES5语法被翻译成VMP，ES6语法的一部分也被实现The basic implementation ES5 syntax is translated into VMP, and part of the ES6 syntax is also implemented

Node补环境框架

A fork of Hikari Obfuscator [WIP]

js补环境框架

Yet another llvm based obfuscator based on goron.

frida runtime resolves smali

Single-step debugging of native code using frida, stalker, and semaphore

Frida-Sigaction-Seccomp实现对Android APP系统调用的拦截

A Linux kernel IPC firewall and logger for Android and Binder

frida dump android elf, support spawn and attach mode

瑞数vmp纯算法逆向，补环境框架sdenv的灵感来源

a poc implementation arm64 tracer based on simulation

some_projects/一些项目.京东/JD.云片/yunpian.极验/geetest.数美/shumei

基于Cache的Android模拟器检测

A binder interceptor framework for Android

A PoC that exploits a vulnerability to bypass the Xiaomi HyperOS community restrictions of BootLoader unlocked account bindings.

Remap a library to avoid detection

Seccomp + Signal Intercept SVC

研究内核改机策略

关于Magisk生态的研究

常用的加密算法理解以及魔改、对抗思路

this is frida trace assemble and register change tools

通过inotify机制监听文件夹內是否有文件被创建,修改,并复制到本地目录.

💻 A complete plan for better android developers.（continuous updating ...）