R2frida WikiThis repo aims at providing practical examples on how to use r2frida
Stars: ✭ 168 (-72.46%)
Awesome Reverse EngineeringReverse Engineering Resources About All Platforms(Windows/Linux/macOS/Android/iOS/IoT) And Every Aspect! (More than 3500 open source tools and 2300 posts&videos)
Stars: ✭ 2,954 (+384.26%)
Mobile Security Framework MobsfMobile Security Framework (MobSF) is an automated, all-in-one mobile application (Android/iOS/Windows) pen-testing, malware analysis and security assessment framework capable of performing static and dynamic analysis.
Stars: ✭ 10,212 (+1574.1%)
Mobileapp Pentest CheatsheetThe Mobile App Pentest cheat sheet was created to provide concise collection of high value information on specific mobile application penetration testing topics.
Stars: ✭ 3,051 (+400.16%)
SDASDA is a rich cross-platform tool for reverse engineering that focused firstly on analysis of computer games. I'm trying to create a mix of the Ghidra, Cheat Engine and x64dbg. My tool will combine static and dynamic analysis of programs. Now SDA is being developed.
Stars: ✭ 98 (-83.93%)
MjolnerCycript backend powered by Frida.
Stars: ✭ 11 (-98.2%)
SaferwallA hackable malware sandbox for the 21st Century
Stars: ✭ 419 (-31.31%)
Awesome FridaAwesome Frida - A curated list of Frida resources http://www.frida.re/ (https://github.com/frida/frida)
Stars: ✭ 2,025 (+231.97%)
HabomalhunterHaboMalHunter is a sub-project of Habo Malware Analysis System (https://habo.qq.com), which can be used for automated malware analysis and security assessment on the Linux system.
Stars: ✭ 627 (+2.79%)
ApkleaksScanning APK file for URIs, endpoints & secrets.
Stars: ✭ 2,707 (+343.77%)
Dexcalibur[Official] Android reverse engineering tool focused on dynamic instrumentation automation. Powered by Frida. It disassembles dex, analyzes it statically, generates hooks, discovers reflected methods, stores intercepted data and does new things from it. Its aim is to be an all-in-one Android reverse engineering platform.
Stars: ✭ 512 (-16.07%)
Rms Runtime Mobile SecurityRuntime Mobile Security (RMS) 📱🔥 - is a powerful web interface that helps you to manipulate Android and iOS Apps at Runtime
Stars: ✭ 1,194 (+95.74%)
AmdhAndroid Mobile Device Hardening
Stars: ✭ 95 (-84.43%)
allsafeIntentionally vulnerable Android application.
Stars: ✭ 135 (-77.87%)
EnlightnYour performance & security consultant, an artisan command away.
Stars: ✭ 378 (-38.03%)
tiroTIRO - A hybrid iterative deobfuscation framework for Android applications
Stars: ✭ 20 (-96.72%)
AirspyAirSpy - Frida-based tool for exploring and tracking the evolution of Apple's AirDrop protocol implementation on i/macOS, from the server's perspective. Released during BH USA 2019 Training https://www.nowsecure.com/event/advanced-frida-and-radare-a-hackers-delight/
Stars: ✭ 116 (-80.98%)
CrosshairAn analysis tool for Python that blurs the line between testing and type systems.
Stars: ✭ 586 (-3.93%)
Ruby Type InferenceDynamic definitions and types provider for ruby static analysis
Stars: ✭ 129 (-78.85%)
MutantAutomated code reviews via mutation testing - semantic code coverage.
Stars: ✭ 1,794 (+194.1%)
aparoidStatic and dynamic Android application security analysis
Stars: ✭ 62 (-89.84%)
InsiderStatic Application Security Testing (SAST) engine focused on covering the OWASP Top 10, to make source code analysis to find vulnerabilities right in the source code, focused on a agile and easy to implement software inside your DevOps pipeline. Support the following technologies: Java (Maven and Android), Kotlin (Android), Swift (iOS), .NET Full Framework, C#, and Javascript (Node.js).
Stars: ✭ 216 (-64.59%)
malossTowards Measuring Supply Chain Attacks on Package Managers for Interpreted Languages
Stars: ✭ 46 (-92.46%)
opemOPEM (Open Source PEM Fuel Cell Simulation Tool)
Stars: ✭ 107 (-82.46%)
ethereum-dasmAn ethereum evm bytecode disassembler and static/dynamic analysis tool
Stars: ✭ 121 (-80.16%)
EngineDroidefense: Advance Android Malware Analysis Framework
Stars: ✭ 386 (-36.72%)
r2frida-bookThe radare2 + frida book for Mobile Application assessment
Stars: ✭ 38 (-93.77%)
BapBinary Analysis Platform
Stars: ✭ 1,385 (+127.05%)
IntellidroidA targeted input generator for Android that improves the effectiveness of dynamic malware analysis.
Stars: ✭ 46 (-92.46%)
jitanaA graph-based static-dynamic hybrid DEX code analysis tool
Stars: ✭ 35 (-94.26%)
rair-coreRAIR: RAdare In Rust
Stars: ✭ 63 (-89.67%)
MedusaBinary instrumentation framework based on FRIDA
Stars: ✭ 258 (-57.7%)
FlowdroidFlowDroid Static Data Flow Tracker
Stars: ✭ 471 (-22.79%)
Lazy importerlibrary for importing functions from dlls in a hidden, reverse engineer unfriendly way
Stars: ✭ 544 (-10.82%)
Sonar DotnetCode analyzer for C# and VB.NET projects https://redirect.sonarsource.com/plugins/vbnet.html
Stars: ✭ 466 (-23.61%)
PhanPhan is a static analyzer for PHP. Phan prefers to avoid false-positives and attempts to prove incorrectness rather than correctness.
Stars: ✭ 5,194 (+751.48%)
SvfStatic Value-Flow Analysis Framework for Source Code
Stars: ✭ 540 (-11.48%)
Extracttvpasswordstool to extract passwords from TeamViewer memory using Frida
Stars: ✭ 444 (-27.21%)
Awesome LintersA community-driven list of awesome linters.
Stars: ✭ 439 (-28.03%)
JnitraceA Frida based tool that traces usage of the JNI API in Android apps.
Stars: ✭ 534 (-12.46%)
SalusSecurity scanner coordinator
Stars: ✭ 441 (-27.7%)
Pyre CheckPerformant type-checking for python.
Stars: ✭ 5,716 (+837.05%)
HadolintDockerfile linter, validate inline bash, written in Haskell
Stars: ✭ 6,284 (+930.16%)
FromjsSee where each character on the screen came from in code.
Stars: ✭ 537 (-11.97%)
GosecGolang security checker
Stars: ✭ 5,694 (+833.44%)
PhpmndPHP Magic Number Detector
Stars: ✭ 431 (-29.34%)
JediAwesome autocompletion, static analysis and refactoring library for python
Stars: ✭ 5,037 (+725.74%)
PsalmA static analysis tool for finding errors in PHP applications
Stars: ✭ 4,523 (+641.48%)
Phpdoc ParserNext-gen phpDoc parser with support for intersection types and generics
Stars: ✭ 569 (-6.72%)
Preallocprealloc is a Go static analysis tool to find slice declarations that could potentially be preallocated.
Stars: ✭ 419 (-31.31%)
Frida FuzzerThis experimetal fuzzer is meant to be used for API in-memory fuzzing.
Stars: ✭ 415 (-31.97%)
Security ToolsCollection of small security tools, mostly in Bash and Python. CTFs, Bug Bounty and other stuff.
Stars: ✭ 509 (-16.56%)
SqlvetGo fearless SQL. Sqlvet performs static analysis on raw SQL queries in your Go code base.
Stars: ✭ 410 (-32.79%)