v1.0.0 — Android KYC & Biometric Security Assessment

First stable release of Android KYC & Biometric Security Assessment.

What's included

Book

18 chapters across five parts — threat landscape, Android internals, camera/location/sensor assessment, full engagements, advanced techniques (smali, custom hooks, anti-tamper evasion), and defensive countermeasures.

Labs

14 hands-on exercises with self-check scripts and concrete deliverables. Every lab maps to a book chapter. Use only on targets you own or are authorized to test.

Materials kit

• Payload configs (GPS coordinates, sensor profiles, camera frames)
• Automation scripts (recon, batch-patch, deploy)
• Synthetic face frame generator

AI agent skills

Two knowledge files that give any AI coding agent the full authorized assessment methodology:

• skills/android-red-team.md — 41 sections of operational knowledge
• skills/android-red-team-verify.md — 8-phase post-patch verification checklist

Works with Cursor, Windsurf, Cline, GitHub Copilot, Aider, or any LLM.

Documentation site

Live at https://iamjosephmj.github.io/AndroidRedTeam/

License

Code: MIT. Written content: CC BY-NC-SA 4.0. See LICENSE.

---

Authorized use only. For educational purposes and explicitly permitted security assessments. Not legal advice. See Chapter 2 (Rules of Engagement).