A tool that traces system calls using eBPF

A zygisk module that hooks `libdexfile.so` to dump dex

Programmable debugger

Yet another directory buster

Software simulation for Android hardware-backed key pairs with key attestation

Kotlin library for evaluating Android Key Attestation certification chains.

A c++ (jni) implementation of KeyAttestation for Android

Beginner-friendly eBPF hands-on tutorial

hex viewer/editor

Android aarch64 kernel rootkit(driver module)

内核驱动开发工具包 (Kernel Driver Development Kit)

A TUI for controlling and monitoring Framework Computers hardware built in Rust

A collection of android security related resources

🔥 ShadowHook is an Android inline hook library which supports thumb, arm32 and arm64.

A apatch kernel module that helps you hide device environment :)

A demo app to detect Zygote injections

一个自定义注入so的脚手架,现在已经支持了界面化使用。

Obfuscation library based on C++20 and metaprogramming

A tool to detect root on android

A GitHub Action for installing, configuring and running hardware-accelerated Android Emulators on macOS virtual machines.

Attd QBDI Tracer

Weaponizing the Linux Kernel (Hide Files/PID, SSH backdoors, SSL Sniffer, ...) by poking around eBPF/XDP

Android native SO and DEX dumper.

LSPatch: A non-root Xposed framework extending from LSPosed

Spoof bootloader property (Android OS layer only) and Play Integrity verdict

A simple KernelSU fork that aims to support newer and older kernel.

The AI coding agent built for the terminal.

A secure, local-first secrets manager built with Rust, featuring encrypted storage, intuitive terminal UI, and comprehensive import/export capabilities.