本项目是记录自己在学习Android移动安全领域遇到的内容，包括优秀的项目或代码等。打破Android的安全壁垒，直至封神！向安迪致敬！作者：0e0w
本项目创建于2021年7月17日，最近的一次更新时间为2024年2月26日。
- 01-Android安全资源
- 02-Android安全测试
- 03-Android安全研究
- 04-Android安全工具
- 05-Android加壳脱壳
- 06-Android开发基础
- 07-Android代码审计
- 08-Android病毒分析
- 09-Android安全产品
一、Android安全书籍
- 《Android安全测试与安全研究》@0e0w
- 《Android应用安全测试与防护》@何能强等
- 《Android移动安全攻防实战》@叶绍琛等
- 《Android软件安全权威指南》@丰生强
- 《Android软件安全与逆向分析》@丰生强
- 《Android应用安全实战》@李岳阳
- 《Android安全攻防实践》@李骏译
- 《Android应用安全防护和逆向分析》@姜维
- 《Android系统安全和反编译实战》@刘云等
二、Android视频课程
三、Android培训演讲
四、Android专利文献
五、Android国家标准
六、Android论坛版块
七、Android其他资源
- https://github.com/Ralireza/Android-Security-Teryaagh
- https://github.com/Simp1er/AndroidSec
- https://github.com/mamenglong/ADBWIFIDEBUG
- https://github.com/plain-dev/ADBWiFi
- https://github.com/feicong/jni_helper
- https://github.com/heyhu/AndroidReverseStudy
- https://github.com/facebook/mariana-trench
- https://github.com/niranjan94/show-java
- https://github.com/kenny67/AndroidReverseEngineering
- https://github.com/aszx826477/AnnhubBS
- https://github.com/dqzg12300/MikRom
- https://github.com/dqzg12300/FartExt
- https://github.com/dqzg12300/MikManager
- https://github.com/topjohnwu/Magisk
- https://github.com/Ba-hub/R3verseBug
- https://github.com/hehonghui/mmat
- https://github.com/weixinbao/ReverseTool
- https://github.com/virjarRatel/ratel-core
- https://github.com/iBotPeaches/Apktool
- https://github.com/APKLab/APKLab
- https://github.com/Konloch/bytecode-viewer
- https://github.com/WuFengXue/android-reverse
- https://github.com/AndnixSH/APKSignReader-Java
- https://github.com/allenymt/PrivacySentry
- https://github.com/TheKingOfDuck/ApkAnalyser
- https://github.com/saucer-man/apkinfo
- https://www.freebuf.com/articles/es/329563.html
- https://github.com/Mocha-L/QuJing
- https://github.com/maddiestone/AndroidAppRE
- https://github.com/dingxiangtech/dx-signer
- https://github.com/sho-luv/mavs
- https://www.secpulse.com/archives/181685.html
- https://github.com/Meituan-Dianping/lyrebird
- https://github.com/hahwul/MobileHackersWeapons
- https://github.com/shankybnl/MobileAutomationFramework
- https://github.com/sulab999/AppMessenger
- https://github.com/WindXaa/Android-Vulnerability-Mining
- https://github.com/mzfr/slicer
- https://github.com/M31N99/Mobile-Security-Checklist
- https://github.com/ByteHackr/AwesomeMobilePentest
- https://github.com/ym2011/MobileApplicationPenetrationTesting
- https://github.com/mirfansulaiman/Command-Mobile-Penetration-Testing-Cheatsheet
- https://github.com/wieerwill/MobilePenBerry
- https://bbs.pediy.com/thread-275634.htm
- https://www.secpulse.com/archives/195484.html
- https://github.com/getActivity/AndroidIndex
- https://github.com/zhengjim/camille
- https://github.com/krizzsk/HackersCave4StaticAndroidSec
- https://github.com/liangjingkanji/Net
- https://github.com/RajQureshi/APK-Penetration-testing-Guide
- https://github.com/inferjay/AndroidDevTools
- https://github.com/crifan/android_app_security_crack
- https://bbs.kanxue.com/thread-278112.htm
- https://github.com/ZJ595/AndroidReverse
一、测试项目汇总
二、公司测试文档
- 绿盟Android安全测试指南
- 奇安信Android安全测试指南
- 知道创宇Android安全测试指南
- 平安科技Android应用漏洞Wiki
九、测试方法论
一、综合工具
二、抓包工具
三、HooK
九、其他工具
- https://github.com/ax/apk.sh
- https://ibotpeaches.github.io/Apktool
- https://github.com/kelvinBen/AppInfoScanner
- https://github.com/20000s/android-detector
- https://github.com/sh4hin/Androl4b
- https://github.com/mzlogin/awesome-adb
- https://github.com/cxf-boluo/magisk_All
- https://github.com/rev1si0n/lamda
- https://github.com/HelloKittyNII/soot-android-static-analysis
- https://github.com/CalebFenton/simplify
- https://github.com/zxvzxv/ApkParse
- https://github.com/HadesNull123/AndroidHooking
- https://github.com/themalwarenews/Garuda
- https://github.com/axhlzy/UnpackShellScripts
- https://github.com/hanbinglengyue/FART
- https://github.com/vincentcox/StaCoAn
- https://github.com/ernw/AndroTickler
- https://github.com/SmartPack/PackageManager
- https://github.com/bytedance/appshark
- https://github.com/gwen001/apk-analyzer
- https://github.com/androguard/androguard
- https://github.com/honeynet/apkinspector
- https://github.com/wrlu/SecMobile
- https://github.com/yangchong211/YCToolLib
- https://github.com/REAndroid/APKEditor
- https://github.com/CreditTone/hooker
- https://github.com/dwisiswant0/apkleaks
- https://github.com/WithSecureLabs/drozer
- https://github.com/Genymobile/scrcpy
- https://github.com/nfcgate/nfcgate
- https://github.com/iBotPeaches/Apktool
- https://www.pnfsoftware.com/jeb/
- https://github.com/androguard/androguard
- https://github.com/muellerberndt/apkx
- https://github.com/bytedance/btrace
- https://github.com/Konloch/bytecode-viewer
- https://github.com/pxb1988/dex2jar
- https://github.com/java-decompiler/jd-gui
- https://github.com/mstrobel/procyon
- https://github.com/zwc456baby/RebootShell
- https://github.com/LSPosed/LSPosed
- https://github.com/zhuotong/Android_InlineHook
- https://github.com/tegal1337/CiLocks
- https://github.com/simplepeng/HeGuiChecker
- https://github.com/ensody/androidmanifest-changer
- https://github.com/codeskyblue/apkdig
- https://github.com/jakubd/apkreport
- https://github.com/attacker-codeninja/apkron
- https://github.com/follyxing/appfile-info
- https://github.com/MCeley/bitrise-step-zipalign-apk
- https://github.com/wunderwuzzi23/appheist
- https://github.com/kamushadenes/apkrash
- https://github.com/githubXiaowangzi/NP-Manager
- https://github.com/phplaber/canine
- https://github.com/SeeFlowerX/estrace
- https://github.com/abcz316/linuxKernelRoot
- https://github.com/w296488320/XposedJniTrace
- https://github.com/ufologist/onekey-decompile-apk
- https://github.com/RightMesh/awdb
- https://github.com/HadessCS/Artemis
- https://github.com/rednaga/APKiD
- https://github.com/moyuwa/ApkCheckPack
- https://github.com/Simp1er/MobileSec
一、程序加壳
二、程序脱壳
- Android漏洞程序
- https://github.com/romanzaikin/ITsafe_Mobile_Penetration
- https://github.com/prateek147/DVIA-v2
一、程序加固
二、渠道监测
React
Typescript
Django
Laravel
Facebook
Microsoft
Google
Alibaba
D3
Tencent