Android Security Awesome

Mobile Security Framework (MobSF) is an automated, all-in-one mobile application (Android/iOS/Windows) pen-testing, malware analysis and security assessment framework capable of performing static and dynamic analysis.

The OWASP Mobile Application Security Testing Guide (MASTG) is a comprehensive manual for mobile app security testing and reverse engineering. It describes technical processes for verifying the OWASP Mobile Security Weakness Enumeration (MASWE) weaknesses, which are in alignment with the OWASP MASVS.

An all-in-one hacking tool to remotely take over Android devices.

Scanning APK file for URIs, endpoints & secrets.

The Leading Security Assessment Framework for Android.

Tool to look for several security related Android application vulnerabilities

An on-path blackbox network traffic security testing tool

No description.

Documentation:

📱 Andriller - is software utility with a collection of forensic tools for smartphones. It performs read-only, forensically sound, non-destructive acquisition from Android devices.

Vulnerable Android application for developers and security enthusiasts to learn about Android insecurities

A runtime mobile application analysis toolkit with a Web GUI, powered by Frida, written in Python.

Full featured multi arch/os debugger built on top of PyQt5 and frida

An automatic obfuscation tool for Android apps that works in a black-box fashion, supports advanced obfuscation features and has a modular architecture easily extensible with new techniques

A python based tool for exploiting and managing Android devices via ADB

StaCoAn is a crossplatform tool which aids developers, bugbounty hunters and ethical hackers performing static code analysis on mobile applications.

DECAF (short for Dynamic Executable Code Analysis Framework) is a binary analysis platform based on QEMU. This is also the home of the DroidScope dynamic Android malware analysis platform. DroidScope is now an extension to DECAF.

Bluetooth experimentation framework for Broadcom and Cypress chips.

MARA is a Mobile Application Reverse engineering and Analysis Framework. It is a toolkit that puts together commonly used mobile application reverse engineering and analysis tools to assist in testing mobile applications against the OWASP mobile security threats.

Android Debugging Library

Simplifying encrypted traffic analysis for researchers by making protocol decryption effortless.

Yet another static code analyzer for malicious Android applications

Hooker is an opensource project for dynamic analyses of Android applications. This project provides various tools and applications that can be use to automaticaly intercept and modify any API calls made by a targeted application.

A framework for automated extraction of static and dynamic features from Android applications

ARMv7 payload that provides arbitrary code execution on MediaTek bootloaders

Static Code Analysis for Smali files

Android Malware Sandbox

Django application that performs SAST and Malware Analysis for Android APKs

Android Mobile Device Hardening

GUI for Frida -Scripts

The tool is used to analyze the content of the android application in local storage.

A tool for quantitative risk analysis of Android applications based on machine learning techniques

Mobile runtime detection workbench for AI (iOS and Android)

The MPT (Mobile Pentest Toolkit) is a must-have solution for your android penetration testing workflow.

Python API Monitor for Android apps

docker file for use with androguard python android app analysis tool