A tool to shift-left sensitive changes on your Android deployable archives

PowerAuth - Open-source solution for authentication, secure data storage and transport security in mobile banking.

PowerAuth Push Server repository

Mobile Security Framework (MobSF) is an automated, all-in-one mobile application (Android/iOS/Windows) pen-testing, malware analysis and security assessment framework capable of performing static and dynamic analysis.

APK Vulnerability Scanner (AVS)

Code for paper "Eavesdropping user credentials via GPU side channels on smartphones" (ASPLOS'22)

PowerAuth Mobile SDK for adds capability for authentication and transaction signing into the mobile apps (ios, watchos, android).

Command-line utility for PowerAuth Reference Client

Testowanie oprogramowania - Książka dla początkujących testerów

Android Configuration Checker is a tool designed to ensure the compliance of Android device configuration settings with the CIS (Center for Internet Security) benchmarks. Leveraging ADB (Android Debug Bridge), the tool queries device settings and compares them against predefined CIS benchmarks, reporting any non-compliance.

The Mobile Application Security Testing Guide (MASTG) is a comprehensive manual for mobile app security testing and reverse engineering. It describes the technical processes for verifying the controls listed in the OWASP Mobile Application Security Verification Standard (MASVS).

Django application that performs SAST and Malware Analysis for Android APKs

Kaftejiman's personal space

Scanning APK file for URIs, endpoints & secrets.

Learn practical Mobile and API security techniques: API Key, Static and Dynamic HMAC, Dynamic Certificate Pinning, and Mobile App Attestation.

(WIP) Runtime Application Instruments for iOS. Previously Passionfruit

Flutter Reverse Engineering Framework

Dump's Victim Android Device Entirely to AWS Server. Backend Made in Spring boot. (Educational Purpose only)

Android security insights in full spectrum.

the fastest and most powerful android decompiler(native tool working without Java VM) for the APK, DEX, ODEX, OAT, JAR, AAR, and CLASS file. which supports malicious behavior detection, privacy leaking detection, vulnerability detection, path solving, packer identification, variable tracking, deobfuscation, python&java scripts, device memory ext…