dweinstein Goto Github PK

followers: 702.0 following: 1.2K repos: 286.0 gists: 77.0

Name: David Weinstein

Type: User

Company: @nowsecure

Bio: making dreams a reality

Location: Florida (mainly), DC and Boston

Blog: insitusec.com

CTO (currently @NowSecure), Developer, Early Adopter, Collaborator, and Entrepreneur

Hi there! I'm David, a passionate developer, early adopter, and team builder. I'm enthusiastic about entrepreneurship and always eager to chat about solving hard problems.

🔧 My Current Projects & Contributions

📱 At NowSecure, I work with the product development, engineering, and mobile research teams to enable automated mobile app security solutions at scale
🎩 Although a significant portion of my work remains private, I enjoy contributing while hacking on hobby projects. Recently I experimented with the openapi-generator project, with a focus on enhancing and fixing the Erlang client generation. In the past, I developed a Node.js API client for the Google Play Store to download APKs. I rewrote that client in Rust here, which was forked by EFF.
🚀 As someone with a lot of experience with mobile technologies, reverse engineering, security, privacy, and technology teams, I love collaborating on all sorts of challenging problems and projects.
🛠️ You'll often find me using tools like Frida, Radare, and working on projects involving iOS or Android, mitmproxy, and more.
🐳 I've been an early adopter of many technologies, including Docker and some handy articles back in the early days.
🧠 Recently I was exploring the potential of OpenAI's ChatGPT in various applications and also toying around with GitHub Codespaces and GitHub CoPilot.

🛡️ Resources & Blog Posts

🔗 awesome-frida: A curated list of awesome projects, libraries, and tools powered by Frida.
📖 OWASP Crackme Solution solved with Frida: A comprehensive guide on solving a OWASP Crackme challenge for mobile app security enthusiasts.
🌩️ Cloudbleed Vulnerability and its Impact on Mobile App Security: A deep dive into the Cloudbleed vulnerability and its implications for mobile app security at the time.
Post-Quantum Cryptography: Security in Mobile Apps

🌟 My Skills & Expertise

📈 Passionate about entrepreneurship and exploring new business opportunities.
🚀 Proficient in TypeScript/JavaScript/Node.js, Rust, Erlang, Python, C/C++, and other languages with a REPL, hot code loading, and convenient FFI.
🤖 Experienced with various development tools and platforms, always eager to learn and adopt or adapt old and new technologies.
🌉 Skilled in fostering collaboration and building strong relationships with team members and stakeholders.

David Weinstein's Projects

adagio

Structural Analysis and Detection of Android Malware

adbkit

A pure Node.js client for the Android Debug Bridge.

adbkit-logcat

A Node.js interface for working with Android's logcat output.

adbkit-monkey

A Node.js interface to the Android monkey tool.

adbwireless

Android adbWireless enable ADB wireless connection to connect to the phone as if connected by USB.

androbugs_framework

AndroBugs Framework is an efficient Android vulnerability scanner that helps developers or hackers find potential security vulnerabilities in Android applications. No need to install on Windows.

androguard

Reverse engineering, Malware and goodware analysis of Android applications ... and more (ninja !)

android-censustaker

Client-side collector for the Android Census

android-checkin

Pretends to be a phone to get a legit android_id

android-permissions

utilities for searching android permissions

android-security-awesome

A collection of android security related resources

Automated provisioning and configuration of an Ubuntu VM containing the Android development environment, including Android ADT Bundle with SDK, Eclipse & the Android NDK using the Vagrant DevOps tool with Chef and shell-scripts.

android-vts

Android Vulnerability Test Suite - In the spirit of open data collection, and with the help of the community, let's take a pulse on the state of Android security. NowSecure presents an on-device app to test for recent device vulnerabilities.