Web developer getting started with hacking android

This page summarizes the projects mentioned and recommended in the original post on /r/Hacking_Tutorials

InfluxDB - Power Real-Time Data Analytics at Scale
Get real-time insights from all types of time series data with InfluxDB. Ingest, query, and analyze billions of data points in real-time with unbounded cardinality.
www.influxdata.com
featured
SaaSHub - Software Alternatives and Reviews
SaaSHub helps you find the best software and product alternatives
www.saashub.com
featured
  • owasp-mastg

    The Mobile Application Security Testing Guide (MASTG) is a comprehensive manual for mobile app security testing and reverse engineering. It describes the technical processes for verifying the controls listed in the OWASP Mobile Application Security Verification Standard (MASVS).

  • Here's the Open Web Application Security Project's Mobile Security Testing Guide. Detailed guides for multiple aspects of mobile security testing for both Android & iOS https://github.com/OWASP/owasp-mstg

  • smali

    smali/baksmali

  • If interested in reversing, you’ll need tools such as (https://ibotpeaches.github.io/Apktool/ ) and dex2jar (https://github.com/pxb1988/dex2jar) and jd-GUI (http://java-decompiler.github.io/) and I also highly recommend using smali (https://github.com/JesusFreke/smali) rather than trying to analyze the machine code if jd-GUI fails to recompile something back to the pseudo-Java. There’s actually a very good LinkedIn learning video on how to use all these tools together called Learning Android Malware Analysis, just get the trial or w/e and do the course then cancel.

  • InfluxDB

    Power Real-Time Data Analytics at Scale. Get real-time insights from all types of time series data with InfluxDB. Ingest, query, and analyze billions of data points in real-time with unbounded cardinality.

    InfluxDB logo
  • Leesons-Modding-Instructions

    The recordings of my 2 and 1/2 week journey to get a setup running for dynamic testing of Android malware

  • For dynamic testing, I recommend building your own OS so you can write out logs, here’s a guide https://github.com/n0x-L/Leesons-Modding-Instructions Good luck

NOTE: The number of mentions on this list indicates mentions on common posts plus user suggested alternatives. Hence, a higher number means a more popular project.

Suggest a related project

Related posts

  • Google Play rolls out an "Independent security review" badge for apps

    2 projects | news.ycombinator.com | 3 Nov 2023
  • Need Help on Patching

    1 project | /r/REGames | 18 Feb 2023
  • The Mobile Application Security Testing Guide (MASTG) is a comprehensive manual for mobile app security testing and reverse engineering. It describes the technical processes for verifying the controls listed in the OWASP Mobile Application Security Verification Standard (MASVS).

    1 project | /r/redteamsec | 2 Jan 2023
  • Mobile game security - how to?

    1 project | /r/Unity2D | 16 Oct 2022
  • Are android bugs mostly api and web ?

    1 project | /r/bugbounty | 30 Sep 2022