ch0ic3/android-security-awesome
1
0
Fork 0
mirror of https://github.com/ashishb/android-security-awesome.git synced 2024-12-18 19:46:09 +00:00
Code Issues Actions Packages Projects Releases Wiki Activity
b10fd7e688
android-security-awesome/README.md

300 lines
24 KiB
Markdown
Raw Normal View History

Added backers and sponsors on the README
2017-05-29 20:55:59 +00:00
android-security-awesome [![Backers on Open Collective](https://opencollective.com/android-security-awesome/backers/badge.svg)](#backers) [![Sponsors on Open Collective](https://opencollective.com/android-security-awesome/sponsors/badge.svg)](#sponsors) [![Awesome](https://cdn.rawgit.com/sindresorhus/awesome/d7305f38d29fed78fa85652e3a63e154dd8e8829/media/badge.svg)](https://github.com/sindresorhus/awesome)
Initial commit
2014-07-22 19:30:51 +00:00
========================
First version.
2014-07-22 19:53:10 +00:00
A collection of android security related resources.
Formatted ReadMe Converted ReadMe into 3 main sections. Transfer READING MATERIAL & TUTORIALS sections to ACADEMIC / RESEARCH / PUBLICATIONS / BOOKS section.
2017-02-16 10:23:58 +00:00
1. [TOOLS](#tools)
2. [ACADEMIC / RESEARCH / PUBLICATIONS / BOOKS](#academic)
3. [EXPLOITS / VULNERABILITIES / BUGS](#exploits)
First version.
2014-07-22 19:53:10 +00:00
Formatted ReadMe Converted ReadMe into 3 main sections. Transfer READING MATERIAL & TUTORIALS sections to ACADEMIC / RESEARCH / PUBLICATIONS / BOOKS section.
2017-02-16 10:23:58 +00:00
----
Header formatting
2017-03-20 14:53:41 +00:00
# <a name="tools"></a>TOOLS
First version.
2014-07-22 19:53:10 +00:00
Formatted ReadMe Converted ReadMe into 3 main sections. Transfer READING MATERIAL & TUTORIALS sections to ACADEMIC / RESEARCH / PUBLICATIONS / BOOKS section.
2017-02-16 10:23:58 +00:00
Online Analyzers
----
First version.
2014-07-22 19:53:10 +00:00
1. [AndroTotal](http://andrototal.org/)
Update README.md
2016-03-26 21:20:28 +00:00
* [Dexter](https://dexter.dexlabs.org/)
format sequence number
2015-12-28 03:49:38 +00:00
* [Tracedroid](http://tracedroid.few.vu.nl/)
* [Visual Threat](http://www.visualthreat.com/)
* [Mobile Malware Sandbox](http://www.mobilemalware.com.br/analysis/index_en.php)
* [MobiSec Eacus](http://www.mobiseclab.org/eacus.jsp)
Update README URLs based on HTTP redirects
2017-07-18 16:04:07 +00:00
* [Appknox](https://www.appknox.com/) - not free
format sequence number
2015-12-28 03:49:38 +00:00
* [IBM Security AppScan Mobile Analyzer](https://appscan.bluemix.net/mobileAnalyzer) - not free
Cleanup
2016-03-26 22:07:42 +00:00
* [NVISO ApkScan](https://apkscan.nviso.be/)
Update README URLs based on HTTP redirects
2017-07-18 16:04:07 +00:00
* [AVC UnDroid](http://undroid.av-comparatives.info/)
add limit of habo and fire eye
2015-12-28 07:37:07 +00:00
* [Fireeye](https://fireeye.ijinshan.com/)- max 60MB 15/day
Cleanup
2016-03-26 22:07:42 +00:00
* [habo](https://habo.qq.com/) 10/day
format sequence number
2015-12-28 03:49:38 +00:00
* [Virustotal](https://www.virustotal.com/)-max 128MB
Update README URLs based on HTTP redirects
2017-07-18 16:04:07 +00:00
* [Fraunhofer App-ray](http://app-ray.co/) - not free
* [AppCritique](https://appcritique.boozallen.com) - Upload your Android APKs and receive comprehensive free security assessments.
CopperDroid and Sandroid are dead
2016-08-13 19:42:09 +00:00
* ~~[CopperDroid](http://copperdroid.isg.rhul.ac.uk/copperdroid/)~~
* ~~[SandDroid](http://sanddroid.xjtu.edu.cn/)~~
Moved defunct links to the bottom of list
2016-04-01 08:22:12 +00:00
* ~~[Stowaway](http://www.android-permissions.org/)~~
* ~~[Anubis](http://anubis.iseclab.org/)~~
* ~~[Mobile app insight](http://www.mobile-app-insight.org)~~
* ~~[Mobile-Sandbox](http://mobile-sandbox.com)~~
* ~~[Ijiami](http://safe.ijiami.cn/)~~
* ~~[Comdroid](http://www.comdroid.org/)~~
* ~~[Android Sandbox](http://www.androidsandbox.net/)~~
* ~~[Foresafe](http://www.foresafe.com/scan)~~
format sequence number
2015-12-28 03:49:38 +00:00
Formatted ReadMe Converted ReadMe into 3 main sections. Transfer READING MATERIAL & TUTORIALS sections to ACADEMIC / RESEARCH / PUBLICATIONS / BOOKS section.
2017-02-16 10:23:58 +00:00
Static Analysis Tools
----
First version.
2014-07-22 19:53:10 +00:00
Update README.md
2015-10-23 02:05:02 +00:00
1. [Androwarn](https://github.com/maaaaz/androwarn/) - detect and warn the user about potential malicious behaviours developped by an Android application.
* [ApkAnalyser](https://github.com/sonyxperiadev/ApkAnalyser)
* [APKInspector](https://github.com/honeynet/apkinspector/)
* [Droid Intent Data Flow Analysis for Information Leakage](https://www.cert.org/secure-coding/tools/didfail.cfm)
Add DroidLegacy
2016-07-08 08:17:07 +00:00
* [DroidLegacy](https://bitbucket.org/srl/droidlegacy)
Update README.md
2015-10-23 02:05:02 +00:00
* [Several tools from PSU](http://siis.cse.psu.edu/tools.html)
Fix some urls
2015-12-28 08:12:42 +00:00
* [Smali CFG generator](https://github.com/EugenioDelfa/Smali-CFGs)
Cleanup
2016-03-26 22:07:42 +00:00
* [FlowDroid](https://blogs.uni-paderborn.de/sse/tools/flowdroid/)
Fix some urls
2015-12-28 08:12:42 +00:00
* [Android Decompiler](https://www.pnfsoftware.com/) – not free
Update README.md
2015-10-23 02:05:02 +00:00
* [PSCout](http://pscout.csl.toronto.edu/) - A tool that extracts the permission specification from the Android OS source code using static analysis
* [Amandroid](http://amandroid.sireum.org/)
* [SmaliSCA](https://github.com/dorneanu/smalisca) - Smali Static Code Analysis
* [CFGScanDroid](https://github.com/douggard/CFGScanDroid) - Scans and compares CFG against CFG of malicious applications
* [Madrolyzer](https://github.com/maldroid/maldrolyzer) - extracts actionable data like C&C, phone number etc.
Update README URLs based on HTTP redirects
2017-07-18 16:04:07 +00:00
* [SPARTA](https://www.cs.washington.edu/sparta) - verifies (proves) that an app satisfies an information-flow security policy; built on the [Checker Framework](https://types.cs.washington.edu/checker-framework/)
Update README.md
2016-02-29 06:17:46 +00:00
* [ConDroid](https://github.com/JulianSchuette/ConDroid) - Performs a combination of symoblic + concrete execution of the app
Add DroidRA to the list of static analysis tools
2017-03-12 09:15:45 +00:00
* [DroidRA](https://github.com/serval-snt-uni-lu/DroidRA)
First version.
2014-07-22 19:53:10 +00:00
Formatted ReadMe Converted ReadMe into 3 main sections. Transfer READING MATERIAL & TUTORIALS sections to ACADEMIC / RESEARCH / PUBLICATIONS / BOOKS section.
2017-02-16 10:23:58 +00:00
App Vulnerability Scanners
----
Capitalized all headings Also some minor changes done
2016-07-03 10:06:01 +00:00
Put back APP VULNERABILITY SCANNERS
2015-11-15 02:07:34 +00:00
1. [QARK](https://github.com/linkedin/qark/) - QARK by LinkedIn is for app developers to scan app for security issues
Move devknox to number 4
2016-12-05 07:25:33 +00:00
* [AndroBugs](https://github.com/AndroBugs/AndroBugs_Framework)
* [Nogotofail](https://github.com/google/nogotofail)
* [Devknox](https://devknox.io/) - Autocorrect security issues as if it was spell check from your IDE
Added JAADAS Added JAADAS in APP VULNERABILITY SCANNERS entry. Thanks.
2017-01-24 13:48:49 +00:00
* [JAADAS](https://github.com/flankerhqd/JAADAS) - Joint intraprocedure and interprocedure program analysis tool to find vulnerabilities in Android apps, built on Soot and Scala
fix conflict
2015-12-28 07:45:42 +00:00
Formatted ReadMe Converted ReadMe into 3 main sections. Transfer READING MATERIAL & TUTORIALS sections to ACADEMIC / RESEARCH / PUBLICATIONS / BOOKS section.
2017-02-16 10:23:58 +00:00
Dynamic Analysis Tools
----
First version.
2014-07-22 19:53:10 +00:00
1. [Android DBI frameowork](http://www.mulliner.org/blog/blosxom.cgi/security/androiddbiv02.html)
updated links
2017-02-03 00:41:31 +00:00
2. [Androl4b](https://github.com/sh4hin/Androl4b)- A Virtual Machine For Assessing Android applications, Reverse Engineering and Malware Analysis
Some more dead urls cleaned up
2016-08-13 19:52:56 +00:00
* [Android Malware Analysis Toolkit](http://www.mobilemalware.com.br/amat/download.html) - (linux distro) Earlier it use to be an [online analyzer](http://dunkelheit.com.br/amat/analysis/index_en.php)
Update README URLs based on HTTP redirects
2017-07-18 16:04:07 +00:00
* [Mobile-Security-Framework MobSF](https://github.com/MobSF/Mobile-Security-Framework-MobSF) - Mobile Security Framework is an intelligent, all-in-one open source mobile application (Android/iOS) automated pen-testing framework capable of performing static, dynamic analysis and web API testing.
Cleanup
2016-03-26 22:07:42 +00:00
* [AppUse](https://appsec-labs.com/AppUse/) – custom build for pentesting
* [Cobradroid](https://thecobraden.com/projects/cobradroid/) – custom image for malware analysis
Update ViaLab Community Edition link
2016-11-03 15:24:56 +00:00
* [ViaLab Community Edition](https://www.nowsecure.com/blog/2014/09/09/introducing-vialab-community-edition/)
Cleanup
2016-03-26 22:07:42 +00:00
* [Droidbox](https://github.com/pjlantz/droidbox)
Fix a link and mark others as dead
2017-02-03 12:51:22 +00:00
* ~~[Mercury](https://labs.mwrinfosecurity.com/tools/2012/03/16/mercury/)~~
updated links
2017-02-03 00:41:31 +00:00
* [Drozer](https://github.com/mwrlabs/drozer)
* [Xposed](https://forum.xda-developers.com/xposed/xposed-installer-versions-changelog-t2714053) - equivalent of doing Stub based code injection but without any modifications to the binary
Added 'Inspeckage' (Xposed Module)
2016-12-04 23:30:27 +00:00
* [Inspeckage](https://github.com/ac-pm/Inspeckage) - Android Package Inspector - dynamic analysis with api hooks, start unexported activities and more. (Xposed Module)
Add ProbeDroid
2016-07-23 09:31:33 +00:00
* [Android Hooker](https://github.com/AndroidHooker/hooker) - Dynamic Java code instrumentation (requires the Substrate Framework)
* [ProbeDroid](https://github.com/ZSShen/ProbeDroid) - Dynamic Java code instrumentation
Updated Android Tamer
2016-07-03 09:59:43 +00:00
* [Android Tamer](https://androidtamer.com/) - Virtual / Live Platform for Android Security Professionals
Replaced 'Droidscope' by 'DECAF'
2016-08-28 19:17:57 +00:00
* [DECAF](https://github.com/sycurelab/DECAF) - Dynamic Executable Code Analysis Framework based on QEMU (DroidScope is now an extension to DECAF)
format sequence number
2015-12-28 03:49:38 +00:00
* [CuckooDroid](https://github.com/idanr1986/cuckoo-droid) - Android extension for Cuckoo sandbox
* [Mem](https://github.com/MobileForensicsResearch/mem) - Memory analysis of Android (root required)
* [Crowdroid](http://www.ida.liu.se/labs/rtslab/publications/2011/spsm11-burguera.pdf) – unable to find the actual tool
* [AuditdAndroid](https://github.com/nwhusted/AuditdAndroid) – android port of auditd, not under active development anymore
* [Android Security Evaluation Framework](https://code.google.com/p/asef/) - not under active development anymore
* [Android Reverse Engineering](https://redmine.honeynet.org/projects/are/wiki) – ARE (android reverse engineering) not under active development anymore
* [Aurasium](https://github.com/xurubin/aurasium) – Practical security policy enforcement for Android apps via bytecode rewriting and in-place reference monitor.
* [Android Linux Kernel modules](https://github.com/strazzere/android-lkms)
Cleanup
2016-03-26 22:07:42 +00:00
* [Appie](https://manifestsecurity.com/appie/) - Appie is a software package that has been pre-configured to function as an Android Pentesting Environment.It is completely portable and can be carried on USB stick or smartphone.This is a one stop answer for all the tools needed in Android Application Security Assessment and an awesome alternative to existing virtual machines.
format sequence number
2015-12-28 03:49:38 +00:00
* [StaDynA](https://github.com/zyrikby/StaDynA) - a system supporting security app analysis in the presence of dynamic code update features (dynamic class loading and reflection). This tool combines static and dynamic analysis of Android applications in order to reveal the hidden/updated behavior and extend static analysis results with this information.
* [DroidAnalytics](https://github.com/zhengmin1989/DroidAnalytics) - incomplete
Moved 'MARA' to 'DYNAMIC ANALYSIS TOOLS'
2016-08-11 10:00:12 +00:00
* [Vezir Project](https://github.com/oguzhantopgul/Vezir-Project) - Virtual Machine for Mobile Application Pentesting and Mobile Malware Analysis
* [MARA](https://github.com/xtiankisutsa/MARA_Framework) - Mobile Application Reverse engineering and Analysis Framework
Add NowSecure Lab Automated
2016-11-07 15:30:02 +00:00
* [NowSecure Lab Automated](https://www.nowsecure.com/blog/2016/09/19/announcing-nowsecure-lab-automated/) - Enterprise tool for mobile app security testing both Android and iOS mobile apps. Lab Automated features dynamic and static analysis on real devices in the cloud to return results in minutes.
Move link
2016-11-16 15:11:22 +00:00
* ~~[Taintdroid](https://appanalysis.org/download.html)~~ - requires AOSP compilation
First version.
2014-07-22 19:53:10 +00:00
Formatted ReadMe Converted ReadMe into 3 main sections. Transfer READING MATERIAL & TUTORIALS sections to ACADEMIC / RESEARCH / PUBLICATIONS / BOOKS section.
2017-02-16 10:23:58 +00:00
Reverse Engineering
----
First version.
2014-07-22 19:53:10 +00:00
Cleanup
2016-03-26 22:07:42 +00:00
1. [Smali/Baksmali](https://github.com/JesusFreke/smali) – apk decompilation
format sequence number
2015-12-28 03:49:38 +00:00
* [emacs syntax coloring for smali files](https://github.com/strazzere/Emacs-Smali)
* [vim syntax coloring for smali files](http://codetastrophe.com/smali.vim)
* [AndBug](https://github.com/swdunlop/AndBug)
* [Androguard](https://github.com/androguard/androguard) – powerful, integrates well with other tools
Cleanup
2016-03-26 22:07:42 +00:00
* [Apktool](https://ibotpeaches.github.io/Apktool/) – really useful for compilation/decompilation (uses smali)
Fix info lost from merge
2015-12-28 08:05:55 +00:00
* [Android Framework for Exploitation](https://github.com/appknox/AFE)
format sequence number
2015-12-28 03:49:38 +00:00
* [Bypass signature and permission checks for IPCs](https://github.com/iSECPartners/Android-KillPermAndSigChecks)
* [Android OpenDebug](https://github.com/iSECPartners/Android-OpenDebug) – make any application on device debuggable (using cydia substrate).
* [Dare](http://siis.cse.psu.edu/dare/index.html) – .dex to .class converter
Fix info lost from merge
2015-12-28 08:05:55 +00:00
* [Dex2Jar](https://github.com/pxb1988/dex2jar) - dex to jar converter
format sequence number
2015-12-28 03:49:38 +00:00
* [Enjarify](https://github.com/google/enjarify) - dex to jar converter from Google
* [Dedexer](http://dedexer.sourceforge.net)
* [Fino](https://github.com/sysdream/fino)
Update README URLs based on HTTP redirects
2017-07-18 16:04:07 +00:00
* [Frida](https://www.frida.re/) - inject javascript to explore applications and a [GUI tool](https://github.com/antojoseph/diff-gui) for it
format sequence number
2015-12-28 03:49:38 +00:00
* [Indroid](https://bitbucket.org/aseemjakhar/indroid) – thread injection kit
Fix info lost from merge
2015-12-28 08:05:55 +00:00
* [IntentSniffer](https://www.nccgroup.trust/us/about-us/resources/intent-sniffer/)
format sequence number
2015-12-28 03:49:38 +00:00
* [Introspy](https://github.com/iSECPartners/Introspy-Android)
Update README URLs based on HTTP redirects
2017-07-18 16:04:07 +00:00
* [Jad]( https://varaneckas.com/jad/) - Java decompiler
format sequence number
2015-12-28 03:49:38 +00:00
* [JD-GUI](https://github.com/java-decompiler/jd-gui) - Java decompiler
* [CFR](http://www.benf.org/other/cfr/) - Java decompiler
* [Krakatau](https://github.com/Storyyeller/Krakatau) - Java decompiler
* [Procyon](https://bitbucket.org/mstrobel/procyon/wiki/Java%20Decompiler) - Java decompiler
* [FernFlower](https://github.com/fesh0r/fernflower) - Java decompiler
* [Redexer](https://github.com/plum-umd/redexer) – apk manipulation
* [Smali viewer](http://blog.avlyun.com/wp-content/uploads/2014/04/SmaliViewer.zip)
Some more dead urls cleaned up
2016-08-13 19:52:56 +00:00
* ~~[ZjDroid](https://github.com/BaiduSecurityLabs/ZjDroid)~~, ~~[fork/mirror](https://github.com/yangbean9/ZjDroid)~~
format sequence number
2015-12-28 03:49:38 +00:00
* [Simplify Android deobfuscator](https://github.com/CalebFenton/simplify)
* [Bytecode viewer](https://github.com/Konloch/bytecode-viewer)
add radare2 add radare2
2016-04-10 06:33:54 +00:00
* [Radare2](https://github.com/radare/radare2)
First version.
2014-07-22 19:53:10 +00:00
Formatted ReadMe Converted ReadMe into 3 main sections. Transfer READING MATERIAL & TUTORIALS sections to ACADEMIC / RESEARCH / PUBLICATIONS / BOOKS section.
2017-02-16 10:23:58 +00:00
Fuzz Testing
----
New FUZZ TESTING category * Move existing tools * Add Honggfuzz & MFFA tools * Fixed typo in "radamsa" name Signed-off-by: Anestis Bechtsoudis <anestis@census-labs.com>
2015-10-06 23:15:41 +00:00
Fix info lost from merge
2015-12-28 08:05:55 +00:00
1. [IntentFuzzer](https://www.nccgroup.trust/us/about-us/resources/intent-fuzzer/)
format sequence number
2015-12-28 03:49:38 +00:00
* [Radamsa Fuzzer](https://github.com/anestisb/radamsa-android)
* [Honggfuzz](https://github.com/google/honggfuzz)
* [An Android port of the melkor ELF fuzzer](https://github.com/anestisb/melkor-android)
* [Media Fuzzing Framework for Android](https://github.com/fuzzing/MFFA)
Add AndroFuzz
2016-07-16 01:24:39 +00:00
* [AndroFuzz](https://github.com/jonmetz/AndroFuzz)
New FUZZ TESTING category * Move existing tools * Add Honggfuzz & MFFA tools * Fixed typo in "radamsa" name Signed-off-by: Anestis Bechtsoudis <anestis@census-labs.com>
2015-10-06 23:15:41 +00:00
Formatted ReadMe Converted ReadMe into 3 main sections. Transfer READING MATERIAL & TUTORIALS sections to ACADEMIC / RESEARCH / PUBLICATIONS / BOOKS section.
2017-02-16 10:23:58 +00:00
App Repackaging Detectors
----
Updated the link, added new links, corrected a typo 1. Updated link to the AndroGuard project 2. Added link to the StaDynA open-source tool 3. Added section APP REPACKAGING DETECTORS 4. Added link to the FSquaDRA tool 5. Added link to the samples provided by Drebin project 6. Added section BOOKS 7. Added link to the download page of the book Android Security (and Not) Internals 8. Added paired square bracket
2015-02-10 15:49:37 +00:00
1. [FSquaDRA](https://github.com/zyrikby/FSquaDRA) - a tool for detection of repackaged Android applications based on app resources hash comparison.
Formatted ReadMe Converted ReadMe into 3 main sections. Transfer READING MATERIAL & TUTORIALS sections to ACADEMIC / RESEARCH / PUBLICATIONS / BOOKS section.
2017-02-16 10:23:58 +00:00
Market Crawlers
----
add market crawlers section
2015-08-08 14:48:19 +00:00
1. [Google play crawler (Java)](https://github.com/Akdeniz/google-play-crawler)
format sequence number
2015-12-28 03:49:38 +00:00
* [Google play crawler (Python)](https://github.com/egirault/googleplay-api)
* [Google play crawler (Node) ](https://github.com/dweinstein/node-google-play) - get app details and download apps from official Google Play Store.
* [Aptoide downloader (Node)](https://github.com/dweinstein/node-aptoide) - download apps from Aptoide third-party Android market
* [Appland downloader (Node)](https://github.com/dweinstein/node-appland) - download apps from Appland third-party Android market
add market crawlers section
2015-08-08 14:48:19 +00:00
Formatted ReadMe Converted ReadMe into 3 main sections. Transfer READING MATERIAL & TUTORIALS sections to ACADEMIC / RESEARCH / PUBLICATIONS / BOOKS section.
2017-02-16 10:23:58 +00:00
Misc Tools
----
First version.
2014-07-22 19:53:10 +00:00
1. [smalihook](http://androidcracking.blogspot.com/2011/03/original-smalihook-java-source.html)
format sequence number
2015-12-28 03:49:38 +00:00
* [APK-Downloader](http://codekiem.com/2012/02/24/apk-downloader/)
* [AXMLPrinter2](http://code.google.com/p/android4me/downloads/detail?name=AXMLPrinter2.jar) - to convert binary XML files to human-readable XML files
Some more dead urls cleaned up
2016-08-13 19:52:56 +00:00
* [adb autocomplete](https://github.com/mbrubeck/android-completion)
format sequence number
2015-12-28 03:49:38 +00:00
* [Dalvik opcodes](http://pallergabor.uw.hu/androidblog/dalvik_opcodes.html)
Update README URLs based on HTTP redirects
2017-07-18 16:04:07 +00:00
* [Opcodes table for quick reference](http://ww38.xchg.info/corkami/opcodes_tables.pdf)
Cleanup
2016-03-26 22:07:42 +00:00
* [ExploitMe Android Labs](http://securitycompass.github.io/AndroidLabs/setup.html) - for practice
format sequence number
2015-12-28 03:49:38 +00:00
* [GoatDroid](https://github.com/jackMannino/OWASP-GoatDroid-Project) - for practice
* [mitmproxy](https://github.com/mitmproxy/mitmproxy)
* [dockerfile/androguard](https://github.com/dweinstein/dockerfile-androguard)
Update Android VTS url
2016-08-13 19:58:00 +00:00
* [Android Vulnerability Test Suite](https://github.com/AndroidVTS/android-vts) - android-vts scans a device for set of vulnerabilities
add AppMon tool
2017-08-10 03:07:26 +00:00
* [AppMon](https://github.com/dpnishant/appmon)- AppMon is an automated framework for monitoring and tampering system API calls of native macOS, iOS and android apps. It is based on Frida.
Formatted ReadMe Converted ReadMe into 3 main sections. Transfer READING MATERIAL & TUTORIALS sections to ACADEMIC / RESEARCH / PUBLICATIONS / BOOKS section.
2017-02-16 10:23:58 +00:00
----
Header formatting
2017-03-20 14:53:41 +00:00
# <a name="academic"></a>ACADEMIC / RESEARCH / PUBLICATIONS / BOOKS
Formatted ReadMe Converted ReadMe into 3 main sections. Transfer READING MATERIAL & TUTORIALS sections to ACADEMIC / RESEARCH / PUBLICATIONS / BOOKS section.
2017-02-16 10:23:58 +00:00
Research Papers
----
added Exploit Database links
2017-02-20 10:33:03 +00:00
1. [Exploit Database](https://www.exploit-db.com/papers/)
* [Android security related presentations](https://github.com/jacobsoo/AndroidSlides)
Formatted ReadMe Converted ReadMe into 3 main sections. Transfer READING MATERIAL & TUTORIALS sections to ACADEMIC / RESEARCH / PUBLICATIONS / BOOKS section.
2017-02-16 10:23:58 +00:00
* [A good collection of static analysis papers](https://tthtlc.wordpress.com/2011/09/01/static-analysis-of-android-applications/)
Books
----
1. [SEI CERT Android Secure Coding Standard](https://www.securecoding.cert.org/confluence/display/android/Android+Secure+Coding+Standard)
added Open Web Application Security Project added links related to OWASP
2017-02-20 07:09:50 +00:00
Others
Formatted ReadMe Converted ReadMe into 3 main sections. Transfer READING MATERIAL & TUTORIALS sections to ACADEMIC / RESEARCH / PUBLICATIONS / BOOKS section.
2017-02-16 10:23:58 +00:00
----
added Open Web Application Security Project added links related to OWASP
2017-02-20 07:09:50 +00:00
1. [OWASP Mobile Security Testing Guide Manual](https://github.com/OWASP/owasp-mstg)
* [Android Reverse Engineering 101 by Daniele Altomare](http://www.fasteque.com/android-reverse-engineering-101-part-1/)
Added Android-Security-Reference repo
2017-03-20 14:54:38 +00:00
* [doridori/Android-Security-Reference](https://github.com/doridori/Android-Security-Reference)
add android app security checklist
2017-08-03 07:49:14 +00:00
* [android app security checklist](https://github.com/b-mueller/android_app_security_checklist)
Update README.md
2016-04-09 22:30:35 +00:00
Formatted ReadMe Converted ReadMe into 3 main sections. Transfer READING MATERIAL & TUTORIALS sections to ACADEMIC / RESEARCH / PUBLICATIONS / BOOKS section.
2017-02-16 10:23:58 +00:00
----
Header formatting
2017-03-20 14:53:41 +00:00
# <a name="exploits"></a>EXPLOITS / VULNERABILITIES / BUGS
added EXPLOITS / VULNERABILITIES / BUGS section Details of all the android related security issue that includes latest reported issue, how to report an issue, bounty programs etc
2017-02-16 06:21:00 +00:00
List
----
added AOSP - Issue tracker added AOSP - Issue tracker strikeout depreciated Vulnerability Google Doc removed Root Exploits (from Drozer issue #56)
2017-02-17 18:36:30 +00:00
1. [Android Security Bulletins](https://source.android.com/security/bulletin/)
Formatted ReadMe Converted ReadMe into 3 main sections. Transfer READING MATERIAL & TUTORIALS sections to ACADEMIC / RESEARCH / PUBLICATIONS / BOOKS section.
2017-02-16 10:23:58 +00:00
* [Android's reported security vulnerabilities](https://www.cvedetails.com/vulnerability-list/vendor_id-1224/product_id-19997/Google-Android.html)
added Android Devices Security Patch link added Android Devices Security Patch link as mentioned by Chan9390
2017-02-16 10:28:46 +00:00
* [Android Devices Security Patch Status](https://kb.androidtamer.com/Device_Security_Patch_tracker/)
added AOSP - Issue tracker added AOSP - Issue tracker strikeout depreciated Vulnerability Google Doc removed Root Exploits (from Drozer issue #56)
2017-02-17 18:36:30 +00:00
* [AOSP - Issue tracker](https://code.google.com/p/android/issues/list?can=2&q=priority=Critical&sort=-opened)
added Open Web Application Security Project added links related to OWASP
2017-02-20 07:09:50 +00:00
* [OWASP Mobile Top 10 2016](https://www.owasp.org/index.php/Mobile_Top_10_2016-Top_10)
added Exploit Database links
2017-02-20 10:36:15 +00:00
* [Exploit Database](https://www.exploit-db.com/search/?action=search&q=android) - click search
removed strike-through from Vulnerability Google Doc
2017-02-21 05:09:09 +00:00
* [Vulnerability Google Doc](https://docs.google.com/spreadsheet/pub?key=0Am5hHW4ATym7dGhFU1A4X2lqbUJtRm1QSWNRc3E0UlE&single=true&gid=0&output=html)
Update README URLs based on HTTP redirects
2017-07-18 16:04:07 +00:00
* [Google Android Security Team’s Classifications for Potentially Harmful Applications (Malware)](https://source.android.com/security/reports/Google_Android_Security_PHA_classifications.pdf)
updated Google Android Security Team’s Classifications for Potentially Harmful Applications (Malware)
2017-03-06 06:38:26 +00:00
added EXPLOITS / VULNERABILITIES / BUGS section Details of all the android related security issue that includes latest reported issue, how to report an issue, bounty programs etc
2017-02-16 06:21:00 +00:00
replace Sample Source with Malware section moved to Bugs category
2017-02-21 11:48:08 +00:00
Malware
----
updated Google Android Security Team’s Classifications for Potentially Harmful Applications (Malware)
2017-03-06 06:38:26 +00:00
1. [androguard - Database Android Malwares wiki](https://code.google.com/p/androguard/wiki/DatabaseAndroidMalwares)
replace Sample Source with Malware section moved to Bugs category
2017-02-21 11:48:08 +00:00
* [Android Malware Github repo](https://github.com/ashishb/android-malware)
* [Android Malware Genome Project](http://www.malgenomeproject.org/policy.html) - contains 1260 malware samples categorized into 49 different malware families, free for research purpose.
* [Contagio Mobile Malware Mini Dump](http://contagiominidump.blogspot.com)
* [VirusTotal Malware Intelligence Service](https://www.virustotal.com/en/about/contact/) - powered by VirusTotal, not free
* [Admire](http://admire.necst.it/)
* ~~[Drebin](http://user.informatik.uni-goettingen.de/~darp/drebin/)~~
added EXPLOITS / VULNERABILITIES / BUGS section Details of all the android related security issue that includes latest reported issue, how to report an issue, bounty programs etc
2017-02-16 06:21:00 +00:00
Bounty Programs
----
Formatted ReadMe Converted ReadMe into 3 main sections. Transfer READING MATERIAL & TUTORIALS sections to ACADEMIC / RESEARCH / PUBLICATIONS / BOOKS section.
2017-02-16 10:23:58 +00:00
1. [Android Security Reward Program](https://www.google.com/about/appsecurity/android-rewards/)
added EXPLOITS / VULNERABILITIES / BUGS section Details of all the android related security issue that includes latest reported issue, how to report an issue, bounty programs etc
2017-02-16 06:21:00 +00:00
How to report
----
1. [Android - reporting security issues](https://source.android.com/security/overview/updates-resources.html#report-issues)
Formatted ReadMe Converted ReadMe into 3 main sections. Transfer READING MATERIAL & TUTORIALS sections to ACADEMIC / RESEARCH / PUBLICATIONS / BOOKS section.
2017-02-16 10:23:58 +00:00
----
Add link to all awesome lists.
2014-07-29 08:07:02 +00:00
# Other Awesome Lists
Other amazingly awesome lists can be found in the
[awesome-awesomeness](https://github.com/bayandin/awesome-awesomeness) list.
# Contributing
Your contributions are always welcome!
Added backers and sponsors on the README
2017-05-29 20:55:59 +00:00
## Backers
Support us with a monthly donation and help us continue our activities. [[Become a backer](https://opencollective.com/android-security-awesome#backer)]
<a href="https://opencollective.com/android-security-awesome/backer/0/website" target="_blank"><img src="https://opencollective.com/android-security-awesome/backer/0/avatar.svg"></a>
<a href="https://opencollective.com/android-security-awesome/backer/1/website" target="_blank"><img src="https://opencollective.com/android-security-awesome/backer/1/avatar.svg"></a>
<a href="https://opencollective.com/android-security-awesome/backer/2/website" target="_blank"><img src="https://opencollective.com/android-security-awesome/backer/2/avatar.svg"></a>
<a href="https://opencollective.com/android-security-awesome/backer/3/website" target="_blank"><img src="https://opencollective.com/android-security-awesome/backer/3/avatar.svg"></a>
<a href="https://opencollective.com/android-security-awesome/backer/4/website" target="_blank"><img src="https://opencollective.com/android-security-awesome/backer/4/avatar.svg"></a>
<a href="https://opencollective.com/android-security-awesome/backer/5/website" target="_blank"><img src="https://opencollective.com/android-security-awesome/backer/5/avatar.svg"></a>
<a href="https://opencollective.com/android-security-awesome/backer/6/website" target="_blank"><img src="https://opencollective.com/android-security-awesome/backer/6/avatar.svg"></a>
<a href="https://opencollective.com/android-security-awesome/backer/7/website" target="_blank"><img src="https://opencollective.com/android-security-awesome/backer/7/avatar.svg"></a>
<a href="https://opencollective.com/android-security-awesome/backer/8/website" target="_blank"><img src="https://opencollective.com/android-security-awesome/backer/8/avatar.svg"></a>
<a href="https://opencollective.com/android-security-awesome/backer/9/website" target="_blank"><img src="https://opencollective.com/android-security-awesome/backer/9/avatar.svg"></a>
<a href="https://opencollective.com/android-security-awesome/backer/10/website" target="_blank"><img src="https://opencollective.com/android-security-awesome/backer/10/avatar.svg"></a>
<a href="https://opencollective.com/android-security-awesome/backer/11/website" target="_blank"><img src="https://opencollective.com/android-security-awesome/backer/11/avatar.svg"></a>
<a href="https://opencollective.com/android-security-awesome/backer/12/website" target="_blank"><img src="https://opencollective.com/android-security-awesome/backer/12/avatar.svg"></a>
<a href="https://opencollective.com/android-security-awesome/backer/13/website" target="_blank"><img src="https://opencollective.com/android-security-awesome/backer/13/avatar.svg"></a>
<a href="https://opencollective.com/android-security-awesome/backer/14/website" target="_blank"><img src="https://opencollective.com/android-security-awesome/backer/14/avatar.svg"></a>
<a href="https://opencollective.com/android-security-awesome/backer/15/website" target="_blank"><img src="https://opencollective.com/android-security-awesome/backer/15/avatar.svg"></a>
<a href="https://opencollective.com/android-security-awesome/backer/16/website" target="_blank"><img src="https://opencollective.com/android-security-awesome/backer/16/avatar.svg"></a>
<a href="https://opencollective.com/android-security-awesome/backer/17/website" target="_blank"><img src="https://opencollective.com/android-security-awesome/backer/17/avatar.svg"></a>
<a href="https://opencollective.com/android-security-awesome/backer/18/website" target="_blank"><img src="https://opencollective.com/android-security-awesome/backer/18/avatar.svg"></a>
<a href="https://opencollective.com/android-security-awesome/backer/19/website" target="_blank"><img src="https://opencollective.com/android-security-awesome/backer/19/avatar.svg"></a>
<a href="https://opencollective.com/android-security-awesome/backer/20/website" target="_blank"><img src="https://opencollective.com/android-security-awesome/backer/20/avatar.svg"></a>
<a href="https://opencollective.com/android-security-awesome/backer/21/website" target="_blank"><img src="https://opencollective.com/android-security-awesome/backer/21/avatar.svg"></a>
<a href="https://opencollective.com/android-security-awesome/backer/22/website" target="_blank"><img src="https://opencollective.com/android-security-awesome/backer/22/avatar.svg"></a>
<a href="https://opencollective.com/android-security-awesome/backer/23/website" target="_blank"><img src="https://opencollective.com/android-security-awesome/backer/23/avatar.svg"></a>
<a href="https://opencollective.com/android-security-awesome/backer/24/website" target="_blank"><img src="https://opencollective.com/android-security-awesome/backer/24/avatar.svg"></a>
<a href="https://opencollective.com/android-security-awesome/backer/25/website" target="_blank"><img src="https://opencollective.com/android-security-awesome/backer/25/avatar.svg"></a>
<a href="https://opencollective.com/android-security-awesome/backer/26/website" target="_blank"><img src="https://opencollective.com/android-security-awesome/backer/26/avatar.svg"></a>
<a href="https://opencollective.com/android-security-awesome/backer/27/website" target="_blank"><img src="https://opencollective.com/android-security-awesome/backer/27/avatar.svg"></a>
<a href="https://opencollective.com/android-security-awesome/backer/28/website" target="_blank"><img src="https://opencollective.com/android-security-awesome/backer/28/avatar.svg"></a>
<a href="https://opencollective.com/android-security-awesome/backer/29/website" target="_blank"><img src="https://opencollective.com/android-security-awesome/backer/29/avatar.svg"></a>
## Sponsors
Become a sponsor and get your logo on our README on Github with a link to your site. [[Become a sponsor](https://opencollective.com/android-security-awesome#sponsor)]
<a href="https://opencollective.com/android-security-awesome/sponsor/0/website" target="_blank"><img src="https://opencollective.com/android-security-awesome/sponsor/0/avatar.svg"></a>
<a href="https://opencollective.com/android-security-awesome/sponsor/1/website" target="_blank"><img src="https://opencollective.com/android-security-awesome/sponsor/1/avatar.svg"></a>
<a href="https://opencollective.com/android-security-awesome/sponsor/2/website" target="_blank"><img src="https://opencollective.com/android-security-awesome/sponsor/2/avatar.svg"></a>
<a href="https://opencollective.com/android-security-awesome/sponsor/3/website" target="_blank"><img src="https://opencollective.com/android-security-awesome/sponsor/3/avatar.svg"></a>
<a href="https://opencollective.com/android-security-awesome/sponsor/4/website" target="_blank"><img src="https://opencollective.com/android-security-awesome/sponsor/4/avatar.svg"></a>
<a href="https://opencollective.com/android-security-awesome/sponsor/5/website" target="_blank"><img src="https://opencollective.com/android-security-awesome/sponsor/5/avatar.svg"></a>
<a href="https://opencollective.com/android-security-awesome/sponsor/6/website" target="_blank"><img src="https://opencollective.com/android-security-awesome/sponsor/6/avatar.svg"></a>
<a href="https://opencollective.com/android-security-awesome/sponsor/7/website" target="_blank"><img src="https://opencollective.com/android-security-awesome/sponsor/7/avatar.svg"></a>
<a href="https://opencollective.com/android-security-awesome/sponsor/8/website" target="_blank"><img src="https://opencollective.com/android-security-awesome/sponsor/8/avatar.svg"></a>
<a href="https://opencollective.com/android-security-awesome/sponsor/9/website" target="_blank"><img src="https://opencollective.com/android-security-awesome/sponsor/9/avatar.svg"></a>
Reference in New Issue Copy Permalink