移动应用渗透测试

Mobile-Security-Framework-MobSF

mobsf/mobile-security-framework-mobsf

21.6k7天前

frida

frida/frida

21.4k1天前

objection

sensepost/objection

9.3k1个月前

jadx

skylot/jadx

50.0k5天前

Apktool

ibotpeaches/apktool

25.3k3天前

mastg

owasp/mastg

13.1k20天前

androguard

androguard/androguard

6.2k7天前

quark-engine

ev-flow/quark-engine

1.7k3天前

APKiD

rednaga/apkid

2.6k12天前

#10

RMS-Runtime-Mobile-Security

m0bilesecurity/rms-runtime-mobile-security

3.1k3个月前

nmmp

maoabc/nmmp

dex-vm used to protect the android classes.dex file

android-securitystatic-analysisdynamic-analysis-sandboxing+5

1.2k1年前

hexvero

maximilianfeix/hexvero

二进制或应用包的第一印象：静态、免执行分析并附证据。CLI、15 工具 MCP 服务器和本地 Web UI，仅需 Node。

android-securitystatic-analysisvulnerability-analysis+9

35天前

secbox

yv1ing/secbox

Conducting cybersecurity testing using the pi agent in a pre-built sandbox environment.

network-mappingvulnerability-analysismobile-app-pentesting+9

6天前

JURIG

reverserid/jurig

一个用于逆向工程的全自主AI代理

android-securitystatic-analysisdynamic-analysis-sandboxing+9

229天前

jshookmcp

vmoranv/jshookmcp

面向 AI 代理的搜索优先、配置文件感知逆向工程工作区——一个 MCP 服务器中涵盖 36 个领域的 735 款工具。

dynamic-analysis-sandboxingmemory-forensicsweb-proxies-interception+9

2.1k9天前

Vanadium

grapheneos/vanadium

面向 GrapheneOS 的隐私与安全强化 Chromium 构建，提供 WebView 和默认浏览器，并包含操作系统级强化与兼容性修复。

android-securitydefensive-toolsgeneral-purpose-utilities+4

2.2k4天前

ABrake27

vvirei333/abrake27

iOS 27 kernelcache 逆向工程：SEP 调度映射、AMFI 差异、Ghidra 工作流

ios-securityvulnerability-analysisexploitation+8

613天前

Gu3ssWeak

b4sith-sec/gu3ssweak

用于移动安全研究和漏洞赏金练习的故意存在漏洞的 Android 应用 - OWASP Mobile Top 10

android-securityvulnerability-analysismobile-app-pentesting+7

1225天前

ASC

mg1937/asc

Fast Android APK decompiler front-end that queries compiled DEX artifacts directly, extracting classes and cross-references in milliseconds without…

android-securitystatic-analysiscode-analysis+6

2.5k3天前

ghostlock-app

ariyanpegu/ghostlock-app

GhostLock One-Tap Execution App (CVE-2026-43499)

android-securityprivilege-escalationvulnerability-analysis+8

26天前

Lenovo-TB365FC-GhostLock-CVE-2026-43499

wonjj6768/lenovo-tb365fc-ghostlock-cve-2026-43499

GhostLock (CVE-2026-43499) root + KernelSU LKM for the Lenovo TB365FC (ZUXOS / Android 16, kernel 5.15.170)

android-securityprivilege-escalationpersistence-mechanisms+6

119天前

DFRoot

a2333c/dfroot

Android root tool for Samsung Galaxy S25 Ultra (SM-S938B) that chains DirtyFrag CVE-2026-43284 and CVE-2026-43499 to gain root automatically at boot…

android-securityprivilege-escalationpersistence-mechanisms+7

622天前

avdroot

ejfkdev/avdroot

用纯 Go 语言通过 Magisk 修补 ramdisk 来 root Android Studio 模拟器。

android-securityprivilege-escalationweb-proxies-interception+6

71个月前

ddc

ejfkdev/ddc

Android DEX → Java decompiler in Rust, built for speed — full apps in seconds, queries in milliseconds. Progressive analysis, javac-verified output,…

android-securitystatic-analysiscode-analysis+6

3818天前

PAGASUS-PRO

thakur2309/pagasus-pro

基于 Python ADB 的 Android 设备管理与安全审计工具包，提供交互式菜单，用于 root 检测、权限转储、可调试应用扫描、日志与联系人提取。

android-securityvulnerability-scannersmobile-app-pentesting+8

5412个月前

op13-cve-2026-64560

a23bc/op13-cve-2026-64560

针对 OnePlus 13 构建版本上 CVE-2026-64560 的设备特定 Android 内核漏洞利用，通过 ADB shell 提供临时 root 权限，并附带经过验证的载荷与移植工具。