Ch0pin

medusa

Binary instrumentation framework based on FRIDA

AVIator

Antivirus evasion project

uncrackable

A list of bizarre crackmes

log4JFrida

related_work

Slides and videos from my public speeches / conferences

stheno

A burp for intents wannabe

JNIInvocation

TapJacking-Attacks

TapJacking Attacks Demo

AndroidWebDoor

A minimalistic android backdoor

ToolBox

pen testing scripts

zipslip

Reverse-Engineering-Tutorial

A FREE comprehensive reverse engineering course covering x86, x64, 32-bit ARM & 64-bit ARM architectures.

vulnerability-review

寻找公开漏洞进行复盘学习。

Android-Undetectable-Spy-App

This repository contains android application source code which can be imported in Android Studio. Currently it fetches all notifications, whatsapp chats, instagram chats in real time.

CVE20210485

CVE-20210-485

android-fuzzing

security-advisories

Android-Reports-and-Resources

A big list of Android Hackerone disclosed reports and other resources.

AndroidSecurityStudy

安卓应用安全学习

jnitrace

A Frida based tool that traces usage of the JNI API in Android apps.

playstore_request

secret-regex-list

List of regex for scraping secret API keys and juicy information.

WebViews

androguard

Reverse engineering and pentesting for Android applications

Android-Security-Reference

A W.I.P Android Security Ref

Ch0pin

ch0pin.github.io

FFSSDP-MITM

The SSDP engine in Firefox for Android (68.11.0 and below) can be tricked into triggering Android intent URIs with zero user interaction.

jadx

Dex to Java decompiler

jnitrace-engine

Engine used by jnitrace to intercept JNI API calls.