Repositories list

• proguard-core

  Public
  Library to read, write, analyze, and process java bytecode

  kotlinjavaparser+ 5bytecodecompilercode-analysisbuild-tooljvm-bytecode

  Java

  •

  Apache License 2.0

  •67•320•8•4•Updated Jul 11, 2025Jul 11, 2025

• proguard

  Public
  ProGuard, Java optimizer and obfuscator

  javabuild-tooloptimiser+ 3androidobfuscatorproguard

  Java

  •

  GNU General Public License v2.0

  •449•3.2k•175•10•Updated Jun 13, 2025Jun 13, 2025

• appsweep-gradle

  Public
  [DEPRECATED] Replaced by the Guardsquare CLI: https://help.guardsquare.com/en/articles/161270-using-the-guardsquare-cli

  android-developmentsecurity-toolsapp-testing

  Kotlin

  •

  Apache License 2.0

  •3•47•5•0•Updated May 20, 2025May 20, 2025

• bitrise-steplib

  Public
  New Bitrise StepLib

  MIT License

  •378•0•0•0•Updated Mar 13, 2025Mar 13, 2025

• bitrise-step-scan-with-appsweep

  Public
  Shell

  •

  Apache License 2.0

  •3•1•1•0•Updated Mar 7, 2025Mar 7, 2025

• kotlin-metadata-printer

  Public
  Prints the Kotlin metadata attached to Java class files

  kotlinjavaproguard+ 3pretty-printerkotlin-metadataproguard-core

  Java

  •

  Apache License 2.0

  •6•59•1•1•Updated Feb 27, 2025Feb 27, 2025

• appsweep-action

  Public
  GitHub action for AppSweep can be used to continuously integrate app scanning using AppSweep into your Android app build process

  android-developmentsecurity-toolsapp-testing

  Apache License 2.0

  •5•19•0•0•Updated Feb 5, 2025Feb 5, 2025

• proguard-assembler

  Public
  Assembler and disassembler for Java class files

  Java

  •

  Apache License 2.0

  •14•67•3•1•Updated Jun 16, 2024Jun 16, 2024

• basic-device-binding-example

  Public
  Kotlin

  •3•34•0•0•Updated Dec 5, 2023Dec 5, 2023

• pivaa

  Public
  Created by High-Tech Bridge, the Purposefully Insecure and Vulnerable Android Application (PIVAA) replaces outdated DIVA for benchmark of mobile vulnerability scanners.

  Java

  •

  GNU General Public License v3.0

  •63•1•0•1•Updated Oct 20, 2023Oct 20, 2023

• strandhogg-detection

  Public
  A POC for detecting StrandHogg attacks

  Java

  •0•4•0•0•Updated Oct 9, 2023Oct 9, 2023

• android-overlay-detection

  Public
  A set of techniques to protect against overlays on Android

  Java

  •4•29•1•1•Updated Oct 5, 2023Oct 5, 2023

• flutter-re-demo

  Public
  Experiments on the feasibility of Flutter application reverse engineering

  Python

  •37•164•5•1•Updated May 2, 2023May 2, 2023

• swift-comm-client-demo

  Public
  An example "hackme" application accompanying the "4 phases of application attack" blog

  Swift

  •

  Apache License 2.0

  •1•3•0•0•Updated Nov 10, 2022Nov 10, 2022

• mocxx

  Public
  A versatile C++ function mocking framework.

  testingcppmocking+ 2instrumentationfrida

  C++

  •

  GNU General Public License v3.0

  •14•132•1•3•Updated Oct 17, 2022Oct 17, 2022

• log4shell-detector

  Public
  A log4shell detector using ProGuardCORE

  Kotlin

  •

  Apache License 2.0

  •4•10•0•0•Updated Aug 5, 2022Aug 5, 2022

• android-insecure-tls-demo

  Public
  Hands-on experiments to demonstrate the exploitability of insecure TLS configurations in Android apps

  androidtlsdocker-compose+ 3httpsman-in-the-middleappsec

  Kotlin

  •2•15•0•0•Updated Jan 18, 2022Jan 18, 2022

• LibEBC

  Public
  C++ Library and Tool for Extracting Embedded Bitcode

  toolmachollvm+ 2elfbitcode

  C++

  •

  Apache License 2.0

  •40•164•4•3•Updated Feb 20, 2021Feb 20, 2021