A collection of android security related resources.

https://github.com/ashishb/android-security-awesome

A lot of work is happening in academia and industry on tools to perform dynamic analysis, static analysis and reverse engineering of android apps.

ONLINE ANALYZERS

7. MobiSec Eacus
11. ApkAnalyser
12. Droid Intent Data Flow Analysis for Information Leakage
14. FlowDroid

DYNAMIC ANALYSIS TOOLS

1. Android DBI frameowork
5. Mercury
6. Drozer
7. Xposed - equivalent of doing Stub based code injection but without any modifications to the binary
8. - custom image
9. CuckooDroid - Android extension for Cuckoo sandbox
11. - not under active development anymore
12. - seems dead now
13. 18.
14. Appie - Appie is a software package that has been pre-configured to function as an Android Pentesting Environment.It is completely portable and can be carried on USB stick or smartphone.This is a one stop answer for all the tools needed in Android Application Security Assessment and an awesome alternative to existing virtual machines.

REVERSE ENGINEERING

8. IntentFuzzer
9. IntentSniffer
12. Procyon - Java decompiler
14. Smali viewer
15. ZjDroid (no longer available),

APP REPACKAGING DETECTORS

2. contagio mini dump
3. Drebin

BOOKS

1. smalihook
4. Dalvik opcodes
6. ExploitMe - for practice
7. Android Labs - for practice

Other Awesome Lists

Other amazingly awesome lists can be found in the 管理员在2009年8月13日编辑了该文章文章。