ch0ic3/android-security-awesome
1
0
Fork 0
mirror of https://github.com/ashishb/android-security-awesome.git synced 2024-12-18 19:46:09 +00:00
Code Issues Actions Packages Projects Releases Wiki Activity

More markdown clean and automated linting

Browse Source
This commit is contained in:
Ashish Bhatia 2019-07-28 12:15:58 -07:00
parent 4bbc1acf40
commit d3da697ff7
2 changed files with 14 additions and 19 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

3
.travis.yml
View File

@ -3,6 +3,9 @@ rvm:
- 2.2 - 2.2
before_script: before_script:
- gem install awesome_bot - gem install awesome_bot
- gem install mdl
script: script:
# Lint - disable some rules - https://github.com/markdownlint/markdownlint/blob/master/docs/RULES.md
- mdl -r ~MD013,~MD029,~MD033 README.md
# Some URLs could be flaky, try twice in case the first execution fails. # Some URLs could be flaky, try twice in case the first execution fails.
- bash run_awesome_bot.sh || bash run_awesome_bot.sh - bash run_awesome_bot.sh || bash run_awesome_bot.sh

18
README.md
View File

@ -1,6 +1,4 @@
android-security-awesome ![Awesome](https://cdn.rawgit.com/sindresorhus/awesome/d7305f38d29fed78fa85652e3a63e154dd8e8829/media/badge.svg) <a href="https://travis-ci.org/ashishb/android-security-awesome"><img src="https://img.shields.io/travis/ashishb/android-security-awesome/master.svg?label=URL%20Check" alt="URL Check"></a> # android-security-awesome ![Awesome](https://cdn.rawgit.com/sindresorhus/awesome/d7305f38d29fed78fa85652e3a63e154dd8e8829/media/badge.svg) <a href="https://travis-ci.org/ashishb/android-security-awesome"><img src="https://img.shields.io/travis/ashishb/android-security-awesome/master.svg?label=URL%20Check" alt="URL Check"></a>
========================
A collection of android security related resources. A collection of android security related resources.
@ -12,7 +10,6 @@ A collection of android security related resources.
### Online Analyzers ### Online Analyzers
1. [AndroTotal](http://andrototal.org/) 1. [AndroTotal](http://andrototal.org/)
5. [Appknox](https://www.appknox.com/) - not free 5. [Appknox](https://www.appknox.com/) - not free
7. [NVISO ApkScan](https://apkscan.nviso.be/) 7. [NVISO ApkScan](https://apkscan.nviso.be/)
@ -21,7 +18,7 @@ A collection of android security related resources.
11. [Fraunhofer App-ray](http://app-ray.co/) - not free 11. [Fraunhofer App-ray](http://app-ray.co/) - not free
12. [AppCritique](https://appcritique.boozallen.com) - Upload your Android APKs and receive comprehensive free security assessments. 12. [AppCritique](https://appcritique.boozallen.com) - Upload your Android APKs and receive comprehensive free security assessments.
13. [NowSecure Lab Automated](https://www.nowsecure.com/blog/2016/09/19/announcing-nowsecure-lab-automated/) - Enterprise tool for mobile app security testing both Android and iOS mobile apps. Lab Automated features dynamic and static analysis on real devices in the cloud to return results in minutes. Not free 13. [NowSecure Lab Automated](https://www.nowsecure.com/blog/2016/09/19/announcing-nowsecure-lab-automated/) - Enterprise tool for mobile app security testing both Android and iOS mobile apps. Lab Automated features dynamic and static analysis on real devices in the cloud to return results in minutes. Not free
14. [AMAaaS](https://amaaas.com) - Android Malware Analysis as a Service. A baremetal service features static and dynamic analysis for Android applications. A product of MalwarePot (https://malwarepot.com/index.php/AMAaaS) - Free. 14. [AMAaaS](https://amaaas.com) - Android Malware Analysis as a Service. A baremetal service features static and dynamic analysis for Android applications. A product of [MalwarePot](https://malwarepot.com/index.php/AMAaaS).Free
4. ~~[Mobile Malware Sandbox](http://www.mobilemalware.com.br/analysis/index_en.php)~~ 4. ~~[Mobile Malware Sandbox](http://www.mobilemalware.com.br/analysis/index_en.php)~~
6. ~~[IBM Security AppScan Mobile Analyzer](https://appscan.bluemix.net/mobileAnalyzer) - not free~~ 6. ~~[IBM Security AppScan Mobile Analyzer](https://appscan.bluemix.net/mobileAnalyzer) - not free~~
15. ~~[Visual Threat](https://www.visualthreat.com/) - no longer an Android app analyzer~~ 15. ~~[Visual Threat](https://www.visualthreat.com/) - no longer an Android app analyzer~~
@ -43,7 +40,6 @@ A collection of android security related resources.
### Static Analysis Tools ### Static Analysis Tools
1. [Androwarn](https://github.com/maaaaz/androwarn/) - detect and warn the user about potential malicious behaviours developed by an Android application. 1. [Androwarn](https://github.com/maaaaz/androwarn/) - detect and warn the user about potential malicious behaviours developed by an Android application.
2. [ApkAnalyser](https://github.com/sonyxperiadev/ApkAnalyser) 2. [ApkAnalyser](https://github.com/sonyxperiadev/ApkAnalyser)
3. [APKInspector](https://github.com/honeynet/apkinspector/) 3. [APKInspector](https://github.com/honeynet/apkinspector/)
@ -69,7 +65,6 @@ A collection of android security related resources.
### App Vulnerability Scanners ### App Vulnerability Scanners
1. [QARK](https://github.com/linkedin/qark/) - QARK by LinkedIn is for app developers to scan app for security issues 1. [QARK](https://github.com/linkedin/qark/) - QARK by LinkedIn is for app developers to scan app for security issues
2. [AndroBugs](https://github.com/AndroBugs/AndroBugs_Framework) 2. [AndroBugs](https://github.com/AndroBugs/AndroBugs_Framework)
3. [Nogotofail](https://github.com/google/nogotofail) 3. [Nogotofail](https://github.com/google/nogotofail)
@ -108,7 +103,6 @@ A collection of android security related resources.
31. ~~[ViaLab Community Edition](https://www.nowsecure.com/blog/2014/09/09/introducing-vialab-community-edition/)~~ 31. ~~[ViaLab Community Edition](https://www.nowsecure.com/blog/2014/09/09/introducing-vialab-community-edition/)~~
32. ~~[Mercury](https://labs.mwrinfosecurity.com/tools/2012/03/16/mercury/)~~ 32. ~~[Mercury](https://labs.mwrinfosecurity.com/tools/2012/03/16/mercury/)~~
### Reverse Engineering ### Reverse Engineering
1. [Smali/Baksmali](https://github.com/JesusFreke/smali) – apk decompilation 1. [Smali/Baksmali](https://github.com/JesusFreke/smali) – apk decompilation
@ -161,7 +155,7 @@ A collection of android security related resources.
1. [Google play crawler (Java)](https://github.com/Akdeniz/google-play-crawler) 1. [Google play crawler (Java)](https://github.com/Akdeniz/google-play-crawler)
2. [Google play crawler (Python)](https://github.com/egirault/googleplay-api) 2. [Google play crawler (Python)](https://github.com/egirault/googleplay-api)
3. [Google play crawler (Node) ](https://github.com/dweinstein/node-google-play) - get app details and download apps from official Google Play Store. 3. [Google play crawler (Node)](https://github.com/dweinstein/node-google-play) - get app details and download apps from official Google Play Store.
4. [Aptoide downloader (Node)](https://github.com/dweinstein/node-aptoide) - download apps from Aptoide third-party Android market 4. [Aptoide downloader (Node)](https://github.com/dweinstein/node-aptoide) - download apps from Aptoide third-party Android market
5. [Appland downloader (Node)](https://github.com/dweinstein/node-appland) - download apps from Appland third-party Android market 5. [Appland downloader (Node)](https://github.com/dweinstein/node-appland) - download apps from Appland third-party Android market
6. [Apkpure](https://apkpure.com/) - Online apk downloader. Provides also an own app for downloading. 6. [Apkpure](https://apkpure.com/) - Online apk downloader. Provides also an own app for downloading.
@ -203,12 +197,10 @@ A collection of android security related resources.
5. ~~[Mobile Security Reading Room](https://mobile-security.zeef.com) - A reading room which contains well categorised technical reading material about mobile penetration testing, mobile malware, mobile forensics and all kind of mobile security related topics~~ 5. ~~[Mobile Security Reading Room](https://mobile-security.zeef.com) - A reading room which contains well categorised technical reading material about mobile penetration testing, mobile malware, mobile forensics and all kind of mobile security related topics~~
6. ~~[Android Reverse Engineering 101 by Daniele Altomare](http://www.fasteque.com/android-reverse-engineering-101-part-1/)~~ 6. ~~[Android Reverse Engineering 101 by Daniele Altomare](http://www.fasteque.com/android-reverse-engineering-101-part-1/)~~
## <a name="exploits"/></a>Exploits/Vulnerabilities/Bugs
## <a name="exploits"></a>Exploits/Vulnerabilities/Bugs
### List ### List
1. [Android Security Bulletins](https://source.android.com/security/bulletin/) 1. [Android Security Bulletins](https://source.android.com/security/bulletin/)
2. [Android's reported security vulnerabilities](https://www.cvedetails.com/vulnerability-list/vendor_id-1224/product_id-19997/Google-Android.html) 2. [Android's reported security vulnerabilities](https://www.cvedetails.com/vulnerability-list/vendor_id-1224/product_id-19997/Google-Android.html)
3. [Android Devices Security Patch Status](https://kb.androidtamer.com/Device_Security_Patch_tracker/) 3. [Android Devices Security Patch Status](https://kb.androidtamer.com/Device_Security_Patch_tracker/)
@ -218,7 +210,6 @@ A collection of android security related resources.
7. [Vulnerability Google Doc](https://docs.google.com/spreadsheet/pub?key=0Am5hHW4ATym7dGhFU1A4X2lqbUJtRm1QSWNRc3E0UlE&single=true&gid=0&output=html) 7. [Vulnerability Google Doc](https://docs.google.com/spreadsheet/pub?key=0Am5hHW4ATym7dGhFU1A4X2lqbUJtRm1QSWNRc3E0UlE&single=true&gid=0&output=html)
8. [Google Android Security Team’s Classifications for Potentially Harmful Applications (Malware)](https://source.android.com/security/reports/Google_Android_Security_PHA_classifications.pdf) 8. [Google Android Security Team’s Classifications for Potentially Harmful Applications (Malware)](https://source.android.com/security/reports/Google_Android_Security_PHA_classifications.pdf)
### Malware ### Malware
1. [androguard - Database Android Malwares wiki](https://code.google.com/p/androguard/wiki/DatabaseAndroidMalwares) 1. [androguard - Database Android Malwares wiki](https://code.google.com/p/androguard/wiki/DatabaseAndroidMalwares)
@ -239,4 +230,5 @@ A collection of android security related resources.
2. [Android Reports and Resources](https://github.com/B3nac/Android-Reports-and-Resources) - List of Android Hackerone disclosed reports and other resources 2. [Android Reports and Resources](https://github.com/B3nac/Android-Reports-and-Resources) - List of Android Hackerone disclosed reports and other resources
## Contributing ## Contributing
Your contributions are always welcome! Your contributions are always welcome!