awesome-mobile-security

Maintained by @vaib25vicky with contributions from the security and developer communities.

Android

General - Blogs, Papers, How To's

• Android: Gaining access to arbitrary* Content Providers
• Evernote: Universal-XSS, theft of all cookies from all sites, and more
• Interception of Android implicit intents
• TikTok: three persistent arbitrary code executions and one theft of arbitrary files
• Persistent arbitrary code execution in Android's Google Play Core Library: details, explanation and the PoC - CVE-2020-8913
• Android: Access to app protected components
• Android: arbitrary code execution via third-party package contexts
• Android Pentesting Labs - Step by Step guide for beginners
• An Android Hacking Primer
• Secure an Android Device
• Security tips
• OWASP Mobile Security Testing Guide
• Security Testing for Android Cross Platform Application
• Dive deep into Android Application Security
• Pentesting Android Apps Using Frida
• Mobile Security Testing Guide
• Mobile Application Penetration Testing Cheat Sheet
• Android Applications Reversing 101
• Android Security Guidelines
• Android WebView Vulnerabilities
• OWASP Mobile Top 10
• Practical Android Phone Forensics
• Mobile Reverse Engineering Unleashed
• Android Root Detection Bypass Using Objection and Frida Scripts
• quark-engine - An Obfuscation-Neglect Android Malware Scoring System
• Root Detection Bypass By Manual Code Manipulation.
• Application and Network Usage in Android
• GEOST BOTNET - the discovery story of a new Android banking trojan
• Mobile Pentesting With Frida
• Magisk Systemless Root - Detection and Remediation
• AndrODet: An adaptive Android obfuscation detector
• Hands On Mobile API Security
• Zero to Hero - Mobile Application Testing - Android Platform
• How to use FRIDA to bruteforce Secure Startup with FDE-encryption on a Samsung G935F running Android 8
• Android Malware Adventures
• AAPG - Android application penetration testing guide
• Bypassing Android Anti-Emulation
• Bypassing Xamarin Certificate Pinning
• Configuring Burp Suite With Android Nougat

Books

• SEI CERT Android Secure Coding Standard
• Android Security Internals
• Android Cookbook
• Android Hacker's Handbook
• Android Security Cookbook
• The Mobile Application Hacker's Handbook
• Android Malware and Analysis
• Android Security: Attacks and Defenses

Courses

• Learning-Android-Security
• Mobile Application Security and Penetration Testing
• Advanced Android Development
• Learn the art of mobile app development
• Learning Android Malware Analysis
• Android App Reverse Engineering 101
• Android Pentesting for Beginners

Tools

Static Analysis