duy-yang

website-evidence-collector

Project moved to https://code.europa.eu/EDPS/website-evidence-collector ! The tool Website Evidence Collector (WEC) automates the website evidence collection of storage and transfer of personal data. https://edps.europa.eu/press-publications/edps-inspection-software_en

MemDumper

Dump Memory of Process in Android

BlackDex

BlackDex is an Android unpack(dexdump) tool, it supports Android 5.0~12 and need not rely to any environment. BlackDex can run on any Android mobile phone or emulator, you can unpack APK File in several seconds.

AndroidSecNotes

some learning notes about Android Security

ollvm-16

Obfuscator-LLVM for LLVM 16.x branch

classinformer-ida8

IDA Class Informer plugin for IDA 8.x

Xposed

The native part of the Xposed framework (mainly the modified app_process binary).

cronet-transport-for-okhttp

This package allows OkHttp and Retrofit users to use Cronet as their transport layer, benefiting from features like QUIC/HTTP3 support or connection migration.

android-chunk-utils

Android Chunk format reader/writer

parserDex

使用python解析dex文件

rxposed

pinduoduo_backdoor_unpacker

Samples and Unpacker of malicious backdoors and exploits developed and used by Pinduoduo

injector

Inject code to process memory, link it and run in a separate thread (ARM/AARCH64 only).

DetectFrida

Detect Frida for Android

bhook

:fire: ByteHook is an Android PLT hook library which supports armeabi-v7a, arm64-v8a, x86 and x86_64.

android-inline-hook

:fire: ShadowHook is an Android inline hook library which supports thumb, arm32 and arm64.

Dobby

a lightweight, multi-platform, multi-architecture hook framework.

elf-dump-fix

Utils use to dump android ELF from memory and do some fix including the ELF section header rebuilding

hook_and_parse_dex2

sperm

浏览过的精彩逆向文章汇总，值得一看

FreeReflection

A library that lets you use reflection without any restriction above Android P

frida-dexdump

A frida tool to dump dex in memory to support security engineers analyzing malware.

xHook

🔥 A PLT hook library for Android native ELF.

Tiktok-SSL-Pinning-Bypass

Bypass Tiktok SSL pinning on Android devices.

NativeDetector

Detect Zygote native injection like Riru and Zygisk