iSECPartners/Android-OpenDebug

Stars
132
Rank 274,205 (Top 6 %)
Language
Java
License
GNU General Publi...
Created about 11 years ago
Updated almost 11 years ago

iSECPartners/Android-OpenDebug

iSECPartners

There are no reviews yet. Be the first to send feedback to the community and the maintainers!

Make any application debuggable

Android-OpenDebug

Make any application debuggable on a device.

Description

This tool leverages Cydia Substrate to make all applications running on the device debuggable; once installed any application will let a debugger attach to them.

Usage

Ensure that Cydia Substrate has been deployed on your test device. The installer requires a rooted device and can be found on the Google Play store at https://play.google.com/store/apps/details?id=com.saurik.substrate&hl=en
Download the pre-compiled APK available at https://github.com/iSECPartners/Android-OpenDebug/releases
Install the APK package on the device:
```
  adb install Android-OpenDebug.apk
```

Notes

This should only be used on test devices

ios-ssl-kill-switch

Blackbox tool to disable SSL certificate validation - including certificate pinning - within iOS Apps

Introspy-iOS

Security profiling for blackbox iOS

Android-SSL-TrustKiller

Bypass SSL certificate pinning for most applications

sslyze

Current development of SSLyze now takes place on a separate repository

jailbreak

Introspy-Android

Security profiling for blackbox Android

android-ssl-bypass

Black box tool to bypass SSL verification on Android, even when pinning is used.

yontma-mac

You'll Never Take Me Alive!

ssl-conservatory

Sample SSL client code for correct endpoint validation.

Introspy-Analyzer

LibTech-Auditing-Cheatsheet

nano-ecc

A very small ECC implementation for 8-bit microcontrollers

jailbreak-Windows

Certificate extraction tool for Windows

tlspretense

A test framework for testing SSL/TLS client certificate validation.

yontma

You'll never take me alive.

Android-KillPermAndSigChecks

Bypass signature and permission checks for IPCs

publications

iSEC Partners' research publications

RtspFuzzer

RTSP network protocol fuzzer

femtocatcher

manifest-explorer

A tool for viewing Android application Manifests.

fuzzbox

A multi-codec media fuzzing tool.

scout

AWS EC2 and S3 Security Auditing Tool

dnsRedir

R2B2

A brute-forcing delta robot

PeachFarmer

A log collector for Peach fuzzing in the cloud

vtfinder

pykd script to dynamically find vtables on heap (windows x86/x64)

sqlperms

A tool for calculating necessary SQL Server permissions

package-play

Tool for viewing Android package details, including permissions, services, activities, and more.

libshambles

A library for efficient interception of established TCP connections

hiccupy

Jython binding for Burp to facilitate realtime traffic analysis and modification using simple plugins.

ZigTools

ccs-testing-tool

samlpummel

A BeanShell plugin for WebScarab to automate SAML auditing.

gizmo

A graphical web proxy written in Java. It is designed to be speedy, with the user interfaced centered around keyboard use. It should do what you want, and then get out of your way.

extractparam

SecureNSCoder

NSKeyed(Un)ArchiverDelegate implementation to encrypt state prior to preservation and decrypt it when restoring.