mobile-security

Intercept, modify, repeat and attack Android's Binder transactions using Burp Suite

Xcode extension for deep link verification and Android attack analysis

Auditing BlackBerry devices and applications like it's 1999.

did u know the name of the repo is obfuscator backwards?

A companion repo for the blog article: https://blog.approov.io/adding-oauth2-to-mobile-android-and-ios-clients-using-the-appauth-sdk

VyAPI - A cloud based vulnerable hybrid Android App

Created by High-Tech Bridge, the Purposefully Insecure and Vulnerable Android Application (PIVAA) replaces outdated DIVA for benchmark of mobile vulnerability scanners.

Die SecureApp ist eine Android-Applikation, welche auf Basis meiner Bachelorarbeit entwickelt wurde. Diese implementiert technische Lösungen zu beliebten Schwachstellen in Android-Applikationen.

Quickstart for using the mobile certificate pinning generator tool for Android.

Cyberpunk2077-android-malware , The files can be decrypted easily by using any RC4 decryptor using the key.

AStools is a powerful Android security tool designed as an LSPosed module. It's crafted for ethical hacking and security testing, offering features like SSL pinning bypass and AES encryption key hooking.

This is a mobile application with this you can save your file in remote server and access it whenever you need

Jackhammer - One Security vulnerability assessment/management tool to solve all the security team problems.

Strengthens OAuth2 authorization by using mobile app attestation

SensorsLogin is an interactive Android app that reimagines the login process by requiring users to complete five unique sensor-based tasks before gaining access. Each task creatively utilizes system features like orientation, battery, volume, brightness, and motion detection.

This project showcases my journey in reverse-engineering an Android APK, debugging obfuscated source code, and successfully completing a game through code analysis and logic tracing. I decompiled the APK, fixed critical runtime exceptions, modified UI elements, and decoded a hidden sequence based on a user ID to win the game.

"WifiMapper is an Android app developed for a mobile security course, featuring a background service that scans nearby Wi-Fi networks every 10 seconds and syncs data to a Node.js backend with PostgreSQL storage. Visualize Wi-Fi locations on Google Maps and explore them via an interactive RecyclerView list."

Intentionally vulnerable Android application.

Burp Suite extension that auto-recalculates JSON body signatures and updates custom headers for signed API requests. Enables replay and fuzzing of mobile app APIs that require RSA-signed payloads.

A lightweight Android background service that securely monitors SMS activity and syncs messages to a remote server for centralized access, analysis, or backup — with full user consent.