安卓渗透和审计工具整理

摘要:
1.cSploit:https://github.com/cSploit/android/releases2.DroidSheephttp://bbs.zhiyoo.com/thread-13249611-1-1.html3.androrathttps://github.com/wszf/androrat4.NetworkSpoofhttps://www.digitalsquid.co.uk/ne

1.cSploit:
https://github.com/cSploit/android/releases

2.DroidSheep
http://bbs.zhiyoo.com/thread-13249611-1-1.html

3.androrat
https://github.com/wszf/androrat

4.Network Spoof
https://www.digitalsquid.co.uk/netspoof/

5.ZanTi
http://www.mz6.net/soft/16726.html

6.幻影pin
http://www.mz6.net/soft/16725.html

7.Wifikill
http://www.mz6.net/soft/15142.html

8.Hackode
http://www.appchina.com/app/com.techfond.hackode

9.FaceNiff
http://www.datafilehost.com/d/b3e19e47

10.Droidbox
https://blog.csdn.net/u012195899/article/details/52814013

11.apkinspector
https://github.com/honeynet/apkinspector/

12.SSHDroid
http://www.onlinedown.net/soft/600656.htm

13.AppUse
https://appsec-labs.com/AppUse/

14.Shark for Root
http://dl.pconline.com.cn/download/1236301.html

15.Android Device Testing Framework
https://github.com/android-dtf/dtf/tree/v1.0.3

16.Neopwn ---手机上第一个渗透工具__未找到使用方法,类似kali

17.ASEF
https://code.google.com/archive/p/asef/downloads

18.Androguard
https://code.google.com/archive/p/androguard/

19.Revenssis
https://sourceforge.net/projects/revenssis/postdownload

20.SPF – Smartphone Pentest Framework
https://github.com/georgiaw/Smartphone-Pentest-Framework

21.Bugtroid
https://pan.baidu.com/s/1kTsrz0r

22.OWASP Droid Fusion
https://www.owasp.org/index.php/OWASP_Droid_Fusion

23.Appie
https://manifestsecurity.com/appie/

24.Android Tamer
https://androidtamer.com/

25.Mobisec
https://sourceforge.net/projects/mobisec/

26.Santoku
https://santoku-linux.com/

27.Androl4b
http://www.freebuf.com/sectool/95243.html

28.Oat2dex
https://blog.csdn.net/xsl1990/article/details/52905418

29.FindBugs
http://findbugs.sourceforge.net/

30.FindSecurityBugs
http://www.docin.com/p-779309481.html

31.YSO-Mobile Security Framework
https://github.com/MobSF/Mobile-Security-Framework-MobSF

32.Qark
https://github.com/linkedin/qark

33.AndroBugs
https://github.com/AndroBugs/AndroBugs_Framework

34.Simplify
https://github.com/CalebFenton/simplify

35.ClassNameDeobfuscator
https://github.com/HamiltonianCycle/ClassNameDeobfuscator

36.Introspy-Android
https://github.com/iSECPartners/Introspy-Android

37.Cydia Substrate
http://www.cydiasubstrate.com/

38.Xposed Framework
https://forum.xda-developers.com/xposed/xposed-installer-versions-changelog-t2714053

39.CatLog
https://github.com/nolanlawson/Catlog

40.Frida
http://www.frida.re/

41.tcpdump for android
https://www.androidtcpdump.com/

42.Canape
https://www.contextis.com/services

43.Mallory
https://intrepidusgroup.com/insight/mallory/

44.Proxydroid
https://play.google.com/store/apps/details?id=org.proxydroid

45.Android SSL Trust Killer
https://github.com/iSECPartners/Android-SSL-TrustKiller

46.Android-ssl-bypass
https://github.com/iSECPartners/android-ssl-bypass

47.RootCoak Plus
https://github.com/devadvance/rootcloakplus

48.PublicKey Pinning
https://www.owasp.org/images/1/1f/Pubkey-pin-android.zip

49.Android Pinning
https://github.com/moxie0/AndroidPinning

50.Java AES Crypto
https://github.com/tozny/java-aes-crypto

51.Proguard
http://proguard.sourceforge.net/

52.SQL Cipher
https://www.zetetic.net/sqlcipher/sqlcipher-for-android/

53.Secure Preferences
https://github.com/scottyab/secure-preferences

54.Trusted Intents
https://github.com/guardianproject/TrustedIntents

注:有的链接可能失效

免责声明:文章转载自《安卓渗透和审计工具整理》仅用于学习参考。如对内容有疑问,请及时联系本站处理。

上篇Java中Double原样输出,取消科学计数法thinkphp数据查询方法总结select ,find,getField,query下篇

宿迁高防,2C2G15M,22元/月;香港BGP,2C5G5M,25元/月 雨云优惠码:MjYwNzM=

相关文章

nodejs 里https的开启

var privateKey = fs.readFileSync('./key/214278976170532.key', 'utf8');var certificate = fs.readFileSync('./key/214278976170532.pem', 'utf8');var credentials = {key: privateKey, ce...

C# https证书通信Post/Get(解决做ssl通道时遇到“请求被中止: 未能创建 SSL/TLS 安全通道”问题)

1 public static string HttpPost(string url, string param = null) 2 { 3 HttpWebRequest request; 4 5 //如果是发送HTTPS请求 6 i...

安装folly库以及folly的ConcurrentHashMap的简单使用

我在写grpc的实例时, 需要使用一个多线程的hash map, C++标准库中没有多线程的hash map, facebook开源的folly中存在大量的基础类, 中间存在一个高性能的hash map,这个正是我所需要的, 所以在这里简介一下folly库, 按照官方说明, folly库安装需要gcc 5.1+ 和支持C++14的编译器编译的boost....

Android 5

activity_main <?xml version="1.0" encoding="utf-8"?> <LinearLayout xmlns:android="http://schemas.android.com/apk/res/android" android:layout_width="match_parent"...

《手把手教你》系列技巧篇(四十四)java+ selenium自动化测试处理https 安全问题或者非信任站点下篇(详解教程) 北京

1.简介     这一篇宏哥主要介绍webdriver在IE、Chrome和Firefox三个浏览器上处理不信任证书的情况,我们知道,有些网站打开是弹窗,SSL证书不可信任,但是你可以点击高级选项,继续打开不安全的链接。举例来说,想必大家都应该用过前几年的12306网站购票,点击新版购票,是不是会出现如下的界面。宏哥又找了一个https的页面,如下图所示:...

.NET跨平台机制一(mono for android配置教程)

    忙完了毕业设计,坐等毕业,终于有时间可以玩玩.NET的跨平台机制了,当然了.NET跨平台主要就是Linux,所以就蛮有心思的去配置了下mono for android的开发环境。       首先,准备工作要做足,运行时,虚拟机,模拟器都要先下载好了。 前期准备,先看看安卓模拟器的配置(已经会配置的略过..)配置教程网络上也很多,我这里就稍微盖过...