runtime-analysis

The OWASP Mobile Application Security Testing Guide (MASTG) is a comprehensive manual for mobile app security testing and reverse engineering. It describes technical processes for verifying the OWASP Mobile Security Weakness Enumeration (MASWE) weaknesses, which are in alignment with the OWASP MASVS.

The Mobile App Pentest cheat sheet was created to provide concise collection of high value information on specific mobile application penetration testing topics.

Hand-crafted Frida examples

Android interception tool for component communication and attack-surface mapping

🩺⚡ Runtime Doctrine ORM analysis integrated into Symfony Web Profiler. Detect N+1 queries, security vulnerabilities, and performance issues during query execution.

Library containing Anti-RE and Anti-Debug methods.

Runtime evidence that helps agents trace, profile, and burn down hotspots in application and native code, GPU kernels, and inference stacks.

A Frida-based utility for dynamically extracting native (.so) libraries from Android applications.

Build embedded applications with the IAR Build Tools on Containers

GitHub Actions CI workflow example with the IAR Build Tools for Arm

Statically compiled binaries for various architectures.

About Essays, and Poc on using runtime evidence to build cleaner code context for AI to reduce hallucinations.

Advanced .NET reflection toolkit for AI-driven scenarios. Dynamically invoke methods with JSON, generate schemas, and serialize complex objects with type preservation. Perfect for automation, testing, and AI integration.

proof of concept of user-mode anti-breakpoint technique

Enable AI-driven automated Android dynamic analysis by controlling Frida through the Model Context Protocol for streamlined reverse engineering.

Live iOS runtime auditor for jailbroken devices. HTTPS dashboard served from the phone.

PCART: Automated repair of Python API parameter compatibility issues

Python API documentation tool supporting the modern PEPs and typing features.

JVM runtime execution analysis - finds hot code paths by frequency, not CPU time

State-of-the-Art Introspection and Debugging System for Elixir/Phoenix Applications