一行代码检测XP/调试/多开/模拟器/root

LSPosed模块的两个利器：classmonitor和jnitrace

My changes to LSPosed

安卓绕过ptrace反调试

btrace：binder_transaction+eBPF+Golang实现通用的Android APP动态行为追踪工具

自己收集与编写的常用IDA脚本，通常用于反混淆

a simple project that uses Frida+QBDI to do tricks like JNI_OnLoad tracing on Android(AArch64).

The Decompilation Wiki: info on all things decompilation

A Zygisk module to hide root for KernelSU, Magisk and APatch, designed to work on Android 5.0 and above.

frida-based libil2cpp.so runtime parsing script

(NDSS 2024) Optimizing Decompiler Output with LLM

frida runtime resolves smali

A simple Android ARM Hook Library.

Using system APIs directly with adb/root privileges from normal apps through a Java process started with app_process.

基础反检测 frida-server / Basic anti-detection frida-server

Flutter Mobile Application Reverse Engineering Tool

基于eBPF的syscall追踪工具，适用于安卓平台

🔥免root实现 Android改机（一键新机）技术解密，微信无限多开等。

无限期停更，请移步 https://5ec1cff.github.io/my-blog

Code Scanner For Android Privacy

简悦导入文章

XMachOViewer is a Mach-O viewer for Windows, Linux and MacOS

Android Memory Editor/Scanner (MemoryTools)

Tool to decompile & extract Android Dex bytecode from Vdex files

基于 frida 可监控 native 方法调用

A tool that traces system calls using eBPF

Make system partition become read-write. Kernel must support overlayfs!