Android Package Inspector - dynamic analysis with api hooks, start unexported activities and more. (Xposed Module)
- android-application
- security-analysis
- dynamic-analysis
- xposed
47,133 repositories indexed
25–48 of 87 · Most stars
Android Package Inspector - dynamic analysis with api hooks, start unexported activities and more. (Xposed Module)
A p2p, secure file storage, social network and application protocol
Security engine for Java (authentication, authorization, multi frameworks): OpenID Connect, SAML2, CAS, OAuth, LDAP, JWT...
The SpotBugs plugin for security audits of Java web applications and Android applications. (Also work with Kotlin, Groovy and Scala projects)
Free database schema discovery and comprehension tool
Automated testing to find logic and performance bugs in database systems
🦎 A lightweight, streaming-native, multi-protocol gateway for AI, APIs, and real-time data. Route LLM requests across providers, govern MCP tools, and connect Kafka, MQTT, and HTTP through one high-performance engine with shared security and observability.
Vulnerable Android application for developers and security enthusiasts to learn about Android insecurities
Simple API, Complex Emails (Jakarta Mail smtp wrapper)
Freenet REference Daemon
SirixDB is an an embeddable, bitemporal, append-only database system and event store, storing immutable lightweight snapshots. It keeps the full history of each resource. Every commit stores a space-efficient snapshot through structural sharing. It is log-structured and never overwrites data. SirixDB uses a novel page-level versioning approach.
:coffee: SonarSource Static Analyzer for Java Code Quality and Security
轻量级DDD正向/逆向业务建模框架,支撑复杂业务系统的架构演化!
Android Vulnerability Test Suite - In the spirit of open data collection, and with the help of the community, let's take a pulse on the state of Android security. NowSecure presents an on-device app to test for recent device vulnerabilities.
🔐 A CLI tool to extract server certificates
Ephemeral root via the CVE-2026-43284 page-cache exploit
OpenAM is an open-source access management solution for identity authentication, authorization, and federation. It provides single sign-on, adaptive authentication, and centralized policy control, enabling secure access to web, mobile, and cloud applications
Zero-allocation hashing for Java
A free, open-source alternative to Burp Suite: an intercepting proxy and web app security testing suite with Repeater, Intruder, Collaborator and a built-in OWASP ZAP scanner. Linux, AGPL-3.0.
Oversecured Vulnerable Android App
Google OAuth Client Library for Java
API Gateway bridging modern and legacy APIs with WSDL-to-OpenAPI, SOAP-to-REST, XML, OAuth2, and GraphQL.
🔐 Tutorial of setting up Security for your API with one way authentication with TLS/SSL and mutual authentication for a java based web server and a client with both Spring Boot. Different clients are provided such as Apache HttpClient, OkHttp, Spring RestTemplate, Spring WebFlux WebClient Jetty and Netty, the old and the new JDK HttpClient, the old and the new Jersey Client, Google HttpClient, Unirest, Retrofit, Feign, Methanol, vertx, Scala client Finagle, Featherbed, Dispatch Reboot, AsyncHttpClient, Sttp, Akka, Requests Scala, Http4s Blaze, Kotlin client Fuel, http4k, Kohttp and ktor. Also other server examples are available such as jersey with grizzly. Also gRPC, WebSocket and ElasticSearch examples are included
Custom ImageView to generate captcha image.