radare2
radareorg/radare2UNIX-like reverse engineering framework and command-line toolset
ai-assisted-reversingandroid-securitybinary-analysis+16
radareorg/radare2UNIX-like reverse engineering framework and command-line toolset
nationalsecurityagency/ghidraGhidra is a software reverse engineering (SRE) framework
ablation-tool/ablationReverse engineering framework with disassembly, decompilation, taint analysis, version diffing and semantic search, plus LLM-driven autonomous binary…
mobsf/mobile-security-framework-mobsfAutomated mobile application security testing framework for Android, iOS, and Windows. Performs static and dynamic analysis, malware detection, and…
iqsec-lab/freemocaMemory-free continual learning framework for malware classification using mode connectivity-based interpolation. Supports class-incremental and…
syscallx-18113/apkx-hunterC-based Android static analysis framework for decompilation, secret detection, endpoint discovery, permission analysis, and native library scanning…
zhengxr930/malevalOfficial code for the ISSTA 2026 paper: Is "Knowing It’s Malicious" Enough? Evaluating LLMs for Fine-Grained Malware Behavior Auditing
kaisonox/apiscopeAn API hooking framework for intercepting and monitoring Windows applications
whatishope/bidoImage-based Android malware detection framework tackling obfuscation and concept drift. Includes curated datasets and Python code for training…
google/permhashFramework for hashing declared permissions in Chromium extensions and APKs, enabling clustering, hunting, and pivoting across potentially malicious…
stefan2200/aparoidStatic and dynamic Android application security analysis
user1342/droiddetectiveA machine learning malware analysis framework for Android apps.
jacobsoo/amtrackerAndroid Malware Tracker
jbaines-r7/cisco_asa_researchCisco ASA Software and ASDM Security Research
mgeeky/threadstackspooferThread Stack Spoofing - PoC for an advanced In-Memory evasion technique allowing to better hide injected shellcode's memory allocation from scanners…
thisislibra/m3A simple and scalable Android bot emulation framework, as presented at Black Hat Europe 2021's Arsenal, as well as atHack 2021's Arsenal
decaf-project/decafDECAF (short for Dynamic Executable Code Analysis Framework) is a binary analysis platform based on QEMU. This is also the home of the DroidScope…
sh4hin/androl4bA Virtual Machine For Assessing Android applications, Reverse Engineering and Malware Analysis