pshocker Goto Github PK

android_bpf_sys

Android eBPF sample

android_executable_draw

可执行文件+skia绘制

android_float_view_draw

draw rect in float view

android_hook_sf_draw_arm64

hook surfaceflinger进程的eglSwapBuffers方式实现绘制,适用arm64 root下的安卓真机

android_hook_sf_draw_x86

hook surfaceflinger进程的eglSwapBuffers方式实现绘制,适用雷电模拟器3.

android_mincore

android_ndk_mem

ndk编译可执行文件跨进程读写app内存

androidkernelpatch

Patching, hooking, and rooting the Android kernel using only a stripped Linux kernel image.

androidptraceinject

Android Ptrace Inject for all ABIs and all APIs

bevy-studyms

blackbox

BlackBox is a virtual engine, it can clone and run virtual application on Android, users don't have to install APK file to run the application on devices. BlackBox control all virtual applications, so you can do anything you want by using BlackBox.

blackobfuscator

Black Obfuscator is an obfuscator for Android APK DexFile, it can help developer to protect source code by control flow flattening, and make it difficult to analyze the actual program control flow.

blackobfuscator-asplugin

This project is an Android Studio plugin version of BlackObfuscator, it supports obfuscating code automatically. More information about this project are in BlackObfuscator.

blackobfuscator-gui

This project is an graphical utility based on BlackObfuscator.

cheatunitygames

How to Cheat Android Games And How to Anti-Cheat

chrome_extensions_js_hook

chrome_extensions_js_hook demo

common-12-5.10

android common kernel 5.10 for android 12, force push warning

de-ollvm

IDA Python Script for anti ollvm

de-ollvm-arm

IDA Python Script for anti ollvm-arm

deepapp

devicedetection

安卓设备检测

dpt-shell

函数抽取壳

fake-linker

Modify Android linker to provide loading module and hook function

find_load_module

本工具用于在无Linux内核源码的情况下，查找出内核函数load_module的位置，确保在无内核源码的情况下，顺利去除所有加载驱动的验证，此工具适用于所有Linux ARM64内核

frida-seccomp

一个Android通用svc跟踪以及hook方案——Frida-Seccomp

frida_dump

frida dump dex, frida dump so

hellokernel

hello world in kernel module

hide-usb-debugging-mode

A Xposed module that is used to hide usb debugging status. Useful for apps such as TWC TV which refuses to run when usb debugging is on

hideapk

修改app包名,实现随机包名,

hwbpapp

hwBreakpoint Test App