mgeeky/threadstackspooferThread Stack Spoofing - PoC for an advanced In-Memory evasion technique allowing to better hide injected shellcode's memory allocation from scanners…
maaaaz/androwarnYet another static code analyzer for malicious Android applications
pjlantz/droidboxDynamic analysis sandbox for Android apps that monitors network traffic, file operations, cryptographic API usage, permission circumvention, and…
rek7/fireelffireELF - Fileless Linux Malware Framework
decaf-project/decafDECAF (short for Dynamic Executable Code Analysis Framework) is a binary analysis platform based on QEMU. This is also the home of the DroidScope…
cryptax/droidlysisAutomated pre-analysis tool for Android apps that disassembles samples, extracts properties via configurable pattern matching, and organizes output…
yhs0602/android-disassemblerDisassemble ANY files including .so (NDK, JNI), Windows PE(EXE, DLL, SYS, etc), linux binaries, libraries, and any other files such as pictures,…
ablation-tool/ablationReverse engineering framework with disassembly, decompilation, taint analysis, version diffing and semantic search, plus LLM-driven autonomous binary…
sslab-gatech/avpassTool for leaking and bypassing Android malware detection system
calebfenton/dex-oracleA pattern based Dalvik deobfuscator which uses limited execution to improve semantic analysis
droidefense/engineDroidefense: Advance Android Malware Analysis Framework
rogerorr/nttraceAn strace-like program for the Windows 'native' API
mpast/mobileauditDjango application that performs SAST and Malware Analysis for Android APKs
maddiestone/conpresentationsSlide decks from my conference presentations
alexmyg/andropytoolA framework for automated extraction of static and dynamic features from Android applications
santoku/santoku-linuxLinux Distro for Mobile Security, Malware Analysis, and Forensics
1-3-7/disrobeRust CLI suite that statically decompiles, deobfuscates, and unpacks native code, bytecode, scripts, firmware, and app packages across 15+ ecosystems…
