Android Security
233 items from ashishb/android-security-awesome ★9,747
-
Android Devices Security Patch Status kb.androidtamer.com
-
Droid Intent Data Flow Analysis for Information Leakage insights.sei.cmu.edu
-
Immuniweb immuniweb.com
. Does an "OWASP Mobile Top 10 Test", "Mobile App Privacy Check", and an application permissions test. The free tier is 4 tests per day, including a report after registration
-
Crowdroid ida.liu.se
unable to find the actual tool
-
habo habo.qq.com
10/day
-
Android Security Reward Program google.com
-
Smali CFG generator github.com
-
ZjDroid github.com
, fork/mirror
-
Frida frida.re
inject JavaScript to explore applications and a GUI tool for it
-
Xposed forum.xda-developers.com
equivalent of doing Stub-based code injection but without any modifications to the binary
-
Foresafe foresafe.com
-
Fireeye fireeye.ijinshan.com
max 60MB 15/day
-
Exploit Database exploit-db.com
click search
-
Exploit Database exploit-db.com
-
Vulnerability Google Doc docs.google.com
-
Dexter dexter.dexlabs.org
-
Devknox devknox.io
IDE plugin to build secure Android apps. Not maintained anymore.
-
Android's reported security vulnerabilities cvedetails.com
-
SPARTA cs.washington.edu
verifies (proves) that an app satisfies an information-flow security policy; built on the Checker Framework
-
CopperDroid copperdroid.isg.rhul.ac.uk
-
Contagio Mobile Malware Mini Dump contagiominidump.blogspot.com
-
Comdroid comdroid.org
-
vim syntax coloring for smali files codetastrophe.com
-
APK-Downloader codekiem.com
seems dead now
-
Android Security Evaluation Framework code.google.com
not under active development anymore
-
AXMLPrinter2 code.google.com
to convert binary XML files to human-readable XML files
-
androguard - Database Android Malware wiki code.google.com
-
FlowDroid blogs.uni-paderborn.de
-
Smali viewer blog.avlyun.com
-
DroidLegacy bitbucket.org
-
Indroid bitbucket.org
thread injection kit
-
Pithus beta.pithus.org
Open-Source APK analyzer. Still in Beta and limited to static analysis for the moment. It is possible to hunt malware with YARA rules. More here.
-
ARTist artist.cispa.saarland
a flexible open-source instrumentation and hybrid analysis framework for Android apps and Android's Java middleware. It is based on the Android Runtime's (ART) compiler and modifies code during on-device compilation.
-
AppSweep by Guardsquare appsweep.guardsquare.com
Free, fast Android application security testing for developers
-
AppUse appsec-labs.com
custom build for penetration testing
-
IBM Security AppScan Mobile Analyzer appscan.bluemix.net
not free
-
approver approver.talos-sec.com
Approver is a fully automated security analysis and risk assessment platform for Android and iOS apps. Not free.
-
Appknox appknox.com
not free
-
App Detonator appdetonator.run
Detonate APK binary to provide source code-level details, including app author, signature, build, and manifest information. 3 Analysis/day free quota.
-
AppCritique appcritique.boozallen.com
Upload your Android APKs and receive comprehensive free security assessments
-
Taintdroid appanalysis.org
requires AOSP compilation
-
Fraunhofer App-ray app-ray.co
expired domain
-
NVISO ApkScan apkscan.nviso.be
sunsetting on Oct 31, 2019
-
Apkpure apkpure.com
Online apk downloader. Also, it provides its own app for downloading.
-
APK Downloader apkcombo.com
Online Service to download APK from the Play Store for a specific Android Device Configuration
-
Anubis anubis.iseclab.org
-
Android Sandbox androidsandbox.net
-
smalihook androidcracking.blogspot.com
-
Stowaway android-permissions.org
-
Android Device Security Database android-device-security.org
Database of security features of Android devices
- next page of items loading…