Android security and penetration testing, from first principles to senior practitioner. 81 chapters, ~327 labs, measured rather than recited.
☆62Aug 18, 2026Updated 2 months ago
Alternatives and similar repositories for android-security-handbook
Users that are interested in android-security-handbook are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Zygisk module that intercepts Flutter app traffic — redirects to a proxy and bypasses BoringSSL TLS pinning. Persistent, no Frida session…☆128Aug 7, 2026Updated 2 months ago
- Android virtual camera for security testing. Injects frames into cameraserver so any app sees a video file, desktop stream, or webcam ins…☆37Updated this week
- A poor man's attempt to replicate the shellcode execution technique demo'd by @3lk during STHACK 2026 (https://www.youtube.com/watch?v=al…☆24Updated this week
- Find and assess exposed Google Gemini API keys across web assets and Android apps.☆125Sep 21, 2026Updated 3 weeks ago
- A native APK and DEX decompiler written in Rust☆157Updated this week
- GPU virtual machines on DigitalOcean Gradient AI • AdGet to production fast with high-performance AMD and NVIDIA GPUs you can spin up in seconds. The definition of operational simplicity.
- Live runtime audit for installed Android apps. Runs on the rooted phone, serves a browser dashboard.☆33May 23, 2026Updated 4 months ago
- Undetectable Android library injector powered by eBPF. Zero-ptrace execution via executable caves with automated memory footprint scrubbi…☆39Apr 24, 2026Updated 5 months ago
- Given a list of domains and known IP and buckets that are owned, which might be susceptible to domain hijacking?☆16Sep 20, 2024Updated 2 years ago
- The Open Binary Project full platform including OpenAPK.AI☆66Updated this week
- Native red, blue, and purple security-agent harness for CYBER-FROST☆51Oct 5, 2026Updated last week
- A powerful and efficient Go-based tool for extracting archived URLs from the Wayback Machine with advanced filtering capabilities, rate l…☆13Nov 5, 2025Updated 11 months ago
- Automated DAST for Android Apps☆156Sep 16, 2026Updated last month
- A multi-agent application-security review harness for Claude Code (and, later, other AI agents). One router skill dispatches to a full of…☆43Updated this week
- Automated adversary emulation (Caldera) against an AD lab to validate Sigma detection coverage and map results to MITRE ATT&CK.☆54Sep 25, 2026Updated 3 weeks ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- WebSocket Penetration Testing Toolkit for Burp Suite☆33Mar 5, 2026Updated 7 months ago
- Designed for managing vulnerability discovery at scale with agentic AI and integrates with HackerOne.☆134Sep 2, 2026Updated last month
- Android security tool that scans installed apps bytecode to discover content providers, file providers, and intent interfaces, then gener…☆21Mar 12, 2026Updated 7 months ago
- ☆15Apr 5, 2023Updated 3 years ago
- Vulnerable Windows Application for Pentesters from the house of DarkRelay Security Labs. The project is along the lines of DVWA, AWSGoat …☆15Dec 28, 2023Updated 2 years ago
- Pentest Coverage Tracker is a Burp Suite extension that helps penetration testers monitor testing coverage in real time. It logs discover…☆46Mar 16, 2026Updated 7 months ago
- I was searching for such resource to work as cheat sheet series and guide me through different attack scenarios for API attacks, didn’t f…☆15May 5, 2025Updated last year
- Fast dns resolver☆13May 4, 2024Updated 2 years ago
- This repo offers comprehensive information, necessary tools, and instructional videos for beginners in Android penetration testing, provi…☆26Jun 12, 2023Updated 3 years ago
- Open source password manager - Proton Pass • AdSecurely store, share, and autofill your credentials with Proton Pass, the end-to-end encrypted password manager trusted by millions.
- ☆15Jan 27, 2022Updated 4 years ago
- Android device attestation and fingerprinting tool☆50Aug 20, 2026Updated last month
- ☆13Oct 24, 2024Updated last year
- Flutter SSL Pinning Bypass Tool for Android & iOS — works on any Flutter version without pattern databases☆316Sep 30, 2026Updated 2 weeks ago
- AKCA Advanced Web Security Scanner☆242Oct 10, 2026Updated last week
- KEV-gated continual-learning XSS specialist with execution-authoritative browser verification☆156Sep 28, 2026Updated 2 weeks ago
- DEF CON 34 workshop for redStack: deploy a Mythic/Sliver/Adaptix red team lab on AWS with Terraform and run a full boot-to-breach attack …☆28Oct 1, 2026Updated 2 weeks ago
- As a bug hunter, are your bug bounty reports getting rejected because you don't use a "malicious" Proof of Concept (PoC) app to exploit t…☆154Jul 1, 2026Updated 3 months ago
- English guide + one-command patcher for the vLLM spin-wait bug that overheats NVIDIA DGX Spark / GB10. Credit: nacyot. CPU cores spin at …☆24Aug 17, 2026Updated 2 months ago
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- CVE-85884 POC☆33Updated this week
- shellcode obfuscater and runner in golang☆11Aug 13, 2023Updated 3 years ago
- Intent Runtime Inspection System☆76May 28, 2026Updated 4 months ago
- ☆52Aug 5, 2026Updated 2 months ago
- Two-model debate review of PRs and MRs, plus a babysitter that works the review rounds. Skills for any coding agent.☆147Oct 9, 2026Updated last week
- P³-Shellcode Loader is a loader that implements a code injection technique which leverages the Process Parameters structure as an executi…☆241Jul 8, 2026Updated 3 months ago
- parse ffuf & map endpoints to wordlists☆20Feb 25, 2021Updated 5 years ago