🛠️ Zygisk Recon Modules:

This repository is a collection of Zygisk modules for Android security research. Use these modules to dump runtime components, such as .so loadeds, trace DEX function calls, dump loaded bytecodes or dump memory

---

✨ Core Capabilities

• Anti-Defense: Bypass anti-LSPosed, anti-Frida and some anti-tampering checks.
• Dumping: Extract dynamic DEX files and SO libraries from packers.
• Tracing: Perform function call tracing on DEX side.
• Instrumentation: Hook early Java classes and native library functions (libc.so, libart.so).

---

📜 Key modules example

Module Folder	Primary Function
dexDump	Dumps dynamic DEX files from memory.
soEnum	Dumps native SO libraries via android_dlopen_ext.
traceDexCalls	Hooks DEX functions called by the interpreter in the early context (libart.so).
memDumpModule	Dumps process memory from zygote perspective to find MTLS certificates.

---

🚀 Usage Example

To run a module, install on your root solution and check logs in logcat! :)