Android security and penetration testing, from first principles to senior practitioner. 81 chapters, ~327 labs, measured rather than recited.
☆64Aug 18, 2026Updated 2 months ago
Alternatives and similar repositories for android-security-handbook
Users that are interested in android-security-handbook are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Claude Code skill + 18 AI agents for Android & iOS mobile app security audits. OWASP MASVS/MASTG-aligned, with adversarial exploitation c…☆21Oct 8, 2026Updated 3 weeks ago
- This repo offers comprehensive information, necessary tools, and instructional videos for beginners in Android penetration testing, provi…☆26Jun 12, 2023Updated 3 years ago
- A biweekly secure code review challenge series, full working apps, based on real-world vulnerabilities.☆13Oct 31, 2026Updated last week
- Automated DAST for Android Apps☆162Sep 16, 2026Updated last month
- Config files for my GitHub profile.☆10Jan 13, 2024Updated 2 years ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- 🦋 Glasswing — See through Flutter's TLS. Bypass BoringSSL SSL pinning on Android: static libflutter.so patching + Frida runtime hooks. N…☆23Oct 18, 2026Updated 2 weeks ago
- The most comprehensive Android & iOS security reference — tools, research papers, exploit techniques, platform internals, CTFs, and more.…☆24Apr 12, 2026Updated 6 months ago
- ☆11Mar 25, 2026Updated 7 months ago
- ☆15Jan 27, 2022Updated 4 years ago
- ☆16Sep 4, 2025Updated last year
- A tool for automating reconnaissance in bug bounty hunting, streamlining tasks like asset discovery, enumeration, and vulnerability check…☆12Jan 12, 2026Updated 9 months ago
- Zygisk module that intercepts Flutter app traffic — redirects to a proxy and bypasses BoringSSL TLS pinning. Persistent, no Frida session…☆128Aug 7, 2026Updated 3 months ago
- Jadx with native decompiler support☆18Oct 8, 2026Updated 3 weeks ago
- Attack Simulation Platform (ASP) for detection testing☆13Updated this week
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- LSPosed module for disabling SSL certificate pinning on Android. Covers Java-layer pinning (OkHttp, TrustManager, Conscrypt, WebView, Cor…☆45Aug 20, 2026Updated 2 months ago
- CVE lookup + Wappalyzer☆39Oct 24, 2026Updated 2 weeks ago
- Repository of various scripts related to Mobile PT. Copyrights and Licensing terms belong to respective owners.☆11Nov 4, 2019Updated 7 years ago
- Collection of all the resources published by Payatu.☆11May 14, 2026Updated 5 months ago
- PayloadsAllTheThings Skills Plugin for Claude Code☆21Jan 3, 2026Updated 10 months ago
- LLM-driven reverse engineering knowledge base custodian — ingests blogs, pentest findings, and malware write-ups into a structured, anti-…☆15Updated this week
- AD related packs are here!☆17Feb 16, 2023Updated 3 years ago
- offsec-ai is a Python library and CLI that combines classic network reconnaissance with modern AI/LLM security testing.☆34Oct 10, 2026Updated 3 weeks ago
- Mobile app security auditing tool focused on automating SAST analysis, identifying underlying technologies (React Native, Flutter, Xamari…☆16Sep 18, 2026Updated last month
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- CVE-2026-97798 Windows Error Reporting - Command Injection TO SYSTEM☆63Oct 30, 2026Updated last week
- Complete Frida script that bypasses 19 layers of Android security including Talsec, freeRASP, PairIP, SSL pinning, root detection, emulat…☆21Oct 8, 2026Updated 3 weeks ago
- AI-optimized query engine for Burp Suite Pro HTTP traffic data. Ingests Burp XML exports into a fast, searchable SQLite database with a R…☆13Mar 17, 2026Updated 7 months ago
- An python script that use apkleaks to scan the android application over web☆11Jun 2, 2022Updated 4 years ago
- A curated learning map for AI + Cybersecurity — 16 topics, 4 reading paths, every link hand-picked.☆16May 1, 2026Updated 6 months ago
- frida-server binary patcher that defeats string/port/thread anti-Frida detection☆21Aug 11, 2026Updated 2 months ago
- Given a list of domains and known IP and buckets that are owned, which might be susceptible to domain hijacking?☆16Sep 20, 2024Updated 2 years ago
- A brief list of all the red teaming scenarios that can be easily used to validate your current company infrastructure. Scenarios are comp…☆18Jul 26, 2024Updated 2 years ago
- An automated exploit for CVE-2026-0073 (Android ADB TLS Auth Bypass). Features a built-in mDNS/Zeroconf scanner to instantly discover ran…☆29May 20, 2026Updated 5 months ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- CVE-2026-25262 applicability to Snapdragon 8 Gen 1 — experimental results☆34Jul 12, 2026Updated 3 months ago
- ☆17Jul 11, 2025Updated last year
- GitHub Shortname Scanner is a tool that searches for filenames in public GitHub repositories based on a given keyword and generates a wor…☆12Feb 18, 2025Updated last year
- WebSocket Penetration Testing Toolkit for Burp Suite☆32Mar 5, 2026Updated 8 months ago
- A powerful and efficient Go-based tool for extracting archived URLs from the Wayback Machine with advanced filtering capabilities, rate l…☆13Nov 5, 2025Updated last year
- AutoAR is an automated security reconnaissance tool, ASM and Discord bot for bug bounty hunters and penetration testers. It automates gat…☆380Oct 8, 2026Updated 3 weeks ago
- ☆16Feb 5, 2026Updated 9 months ago