Projects

Things I've built

Tools for mobile security, reverse engineering and fuzzing. Most came out of a job that was too slow to do by hand twice.

Tools

6 projects

soxtract

Dynamically extracts native .so libraries from running Android apps with Frida and repairs the dumps into valid ELF binaries, ready for Ghidra, Binary Ninja or IDA Pro.

  • Python
  • Frida
  • Android
PyPI

afl-android-emulator-kernel

A reproducible, AFL++-ready Android emulator kernel. Rebuilds the goldfish kernel with SysV IPC enabled so stock AVDs can run coverage-guided fuzzing with a single -kernel swap.

  • AFL++
  • Shell
  • Docker
  • Android

CLI-MD

A terminal-native Markdown workspace: renders, watches, searches and link-checks documentation. Built as the human-readable layer for notes and reports produced alongside AI coding agents.

  • JavaScript
  • Node.js
npm

AI security automation

Claude Code skills with specialised subagents that orchestrate Android pentest workflows (manifest/IPC analysis, native-code tracing, on-device verification) and JNI fuzzing with AFL++ frida-mode.

  • LLM agents
  • Claude Code
  • Python

Api-Mapper

Visualises API endpoints from Burp Suite history.

  • Python
  • Burp Suite

Contributions

OWASP MASTG

Contributed test cases on Android code security, SSL pinning bypass, IPC hardening and cryptographic flaws.