
bytecode-viewer
A Java 8+ Jar & Android APK Reverse Engineering Suite (Decompiler, Editor, Debugger & More)

A Java 8+ Jar & Android APK Reverse Engineering Suite (Decompiler, Editor, Debugger & More)

DeepAudit:人人拥有的 AI 黑客战队,让漏洞挖掘触手可及。国内首个开源的代码漏洞挖掘多智能体系统。小白一键部署运行,自主协作审计 + 自动化沙箱 PoC 验证。支持 Ollama 私有部署 ,一键生成报告。支持中转站。让安全不再昂贵,让审计不再复杂。

The Mobile App Pentest cheat sheet was created to provide concise collection of high value information on specific mobile application penetration…

一款适用于以HW行动/红队/渗透测试团队为场景的移动端(Android、iOS、WEB、H5、静态网站)信息收集扫描工具,可以帮助渗透测试工程师、攻击队成员、红队成员快速收集到移动端或者静态WEB站点中关键的资产信息并提供基本的信息输出,如:Title、Domain、CDN、指纹信息、状态信息等。

A vulnerable version of Rails that follows the OWASP Top 10

Resources related to GitHub Security Lab

A curated list of awesome iOS application security resources.

Cosa Nostra, a FOSS graph based malware clusterization toolkit.


Ninja Reverse Engineering on Android APK packages

Anti-LLM obfuscation via finger counting

The tool is used to analyze the content of the android application in local storage.

Simple framework to extract "actionable" data from Android malware (C&Cs, phone numbers etc.)

A JavaScript Obfuscator based on Cryptographic Indistinguishability Obfuscation techniques

Android reverse engineering entirely on-device. Radare2 binary analysis, 8 Java decompilers, Flutter & Unity il2cpp support.

A pure Rust reimplementation of libxml2

A command line CWE discovery tool based on OWASP / CAPSEC database of Common Weakness Enumeration.

A Common Weakness Enumeration (CWE) Node.js SDK compliant with MITRE / CAPEC