SQL powered operating system instrumentation, monitoring, and analytics.

The native part of the Xposed framework (mainly the modified app_process binary).

AndFix is a library that offer hot-fix for Android App.

Advanced usermode anti-anti-debugger. Forked from https://bitbucket.org/NtQuery/scyllahide

TCP/IP packet demultiplexer. Download from:

General Automatic Unpacking Tool for Android Dex Files

Mount Android phones on Linux with adb. No root required.

An application to dynamically inject a shared object into a running process on ARM architectures.

Virtualbox, VirtualMachine, Cuckoo, Anubis, ThreatExpert, Sandboxie, QEMU, Analysis Tools Detection Tools

Released in accordance with GPL licensing.

Collection of Android reverse engineering scripts

Android ART with modifications for the Xposed framework.

Yara integrated software to handle archive file data.

Screen capture for Android

A SDK for the creation of analysis tools without obtaining app source code in order to profile runtime performance, examine code coverage, and track high-risk behaviors of a given app on Android 5.…

脱so壳

Extended oatdump from AOSP platform/art repo

tool to inspect, dump, modify, search and inject libraries into Android processes.

I'll submit the poc after blackhat

The slides and exploit of mosec2016

Got Root!

PoC binary file of FakeID,with some source code

POC for CVE-2015-6620, AMessage unmarshal arbitrary write

write-what-where plus heap address leaking in OMX