zypherion-technologies/nemesis.NET process monitor that hooks CLR at the native layer, dumps reflective assemblies from memory, and checks AMSI/ETW integrity vs on disk binaries.
kdbugk/game-of-kingshot-reEducational reverse engineering study of a Unity/IL2CPP Android game. Documents gateway protocol decoding, native anti-tampering SDK analysis, SSL…
professorquantumuniverse/vetoOpen-source Android client for VirusTotal. Scan files, URLs, and installed apps against 70+ antivirus engines. View detailed reports with hashes,…
1ultimat3/badintentIntercept, modify, repeat and attack Android's Binder transactions using Burp Suite
hydradragonantivirus/hydradragonav-mobileAndroid Antivirus which doesn't require root, adb, ca install and cloud with many features and ways to detect more zero-day malware
frida/fridaMain repo for hosting release binaries
gojue/ecaptureCapturing SSL/TLS plaintext without a CA certificate using eBPF. Supported on Linux/Android kernels for amd64/arm64.
yarox24/attack_monitorEndpoint detection & Malware analysis software
h1nayoshi/smalienInformation flow analysis tool for Android applications
ptswarm/reflutterFlutter Reverse Engineering Framework
hluwa/frida-dexdumpA frida tool to dump dex in memory to support security engineers analyzing malware.
cyb3rmx/qu1cksc0peAll-in-One malware analysis tool.
ch0pin/medusaMobile Edge-Dynamic Unified Security Analysis
nccgroup/lazydroidbash script to facilitate some aspects of an Android application assessment
hamz-a/frida-android-libbinderPoC Frida script to view Android libbinder traffic
vichhka-git/renef-skillsAgent Skill for operating renef.io — Android ARM64 dynamic instrumentation: hook native/Java, patch memory, trace syscalls, bypass SSL pinning/root…
go-appsec/toolboxCollaborative application security testing between humans and agents via CLI and MCP
kevoreilly/capev2Malware Configuration And Payload Extraction
