Mobile Security Framework (MobSF) is an automated, all-in-one mobile application (Android/iOS/Windows) pen-testing, malware analysis and security assessment framework capable of performing static and dynamic analysis.
Phan is a static analyzer for PHP. Phan prefers to avoid false-positives and attempts to prove incorrectness rather than correctness.
🚀Optimizer for mobile applications
- optimizer
- android
- gradle-plugin
- bytecode-manipulation
A tool to help eliminate NullPointerExceptions (NPEs) in your Java code with low build-time overhead
TranslatedDesktop Android leak audit: permissions, endpoints, data flows, reversible fixes. Phone privacy audit: uses adb to scan an Android app's permissions, reporting endpoints, and data flows, and provides reversible remediation.
The SpotBugs plugin for security audits of Java web applications and Android applications. (Also work with Kotlin, Groovy and Scala projects)
Hunt every Endpoint in your code, expose Shadow APIs, map the Attack Surface.
The tool to avoid various issues due to inconsistencies and inefficiencies between a database schema and application models.
Static Application Security Testing (SAST) engine focused on covering the OWASP Top 10, to make source code analysis to find vulnerabilities right in the source code, focused on a agile and easy to implement software inside your DevOps pipeline. Support the following technologies: Java (Maven and Android), Kotlin (Android), Swift (iOS), .NET Full Framework, C#, and Javascript (Node.js).
Chronos - A static race detector for the go language
- analysis
- golang
- synchronization
- detection
Dependency analysis and optimization toolkit for modern JavaScript and TypeScript codebases. Enforce dependency graph hygiene and remove unused code with a very fast CLI.
- dependency-analysis
- reverse-dependencies
- dependency-resolution
- file-dependencies
Django application that performs SAST and Malware Analysis for Android APKs
gcc-poison
A tool for quantitative risk analysis of Android applications based on machine learning techniques
- android
- risk
- android-permissions
- quantitative-risk-analysis
Taming Reflection to Support Whole-Program Analysis of Android Apps
StaDynA: Addressing the Problem of Dynamic Code Updates in the Security Analysis of Android Applications