Android Security Awesome

Dex to Java decompiler

An interactive TLS-capable intercepting HTTP proxy for penetration testers and software developers.

A tool for reverse engineering Android apk files

UNIX-like reverse engineering framework and command-line toolset

Mobile Security Framework (MobSF) is an automated, all-in-one mobile application (Android/iOS/Windows) pen-testing, malware analysis and security assessment framework capable of performing static and dynamic analysis.

A Java 8+ Jar & Android APK Reverse Engineering Suite (Decompiler, Editor, Debugger & More)

MVT (Mobile Verification Toolkit) helps with conducting forensics of mobile devices in order to find signs of a potential compromise.

A standalone Java Decompiler GUI

The OWASP Mobile Application Security Testing Guide (MASTG) is a comprehensive manual for mobile app security testing and reverse engineering. It describes technical processes for verifying the OWASP Mobile Security Weakness Enumeration (MASWE) weaknesses, which are in alignment with the OWASP MASVS.

Tools to work with android .dex and java .class files

Android and Java bytecode viewer

Static code analysis for Kotlin

smali/baksmali

An all-in-one hacking tool to remotely take over Android devices.

Reverse engineering and pentesting for Android applications

Scanning APK file for URIs, endpoints & secrets.

The Mobile App Pentest cheat sheet was created to provide concise collection of high value information on specific mobile application penetration testing topics.

🤖 A CLI application that automatically prepares Android APK files for HTTPS inspection

Android virtual machine and deobfuscator

The Leading Security Assessment Framework for Android.

Decompiler from Java bytecode to Java, used in IntelliJ IDEA.

Android Reverse-Engineering Workbench for VS Code

Security oriented software fuzzer. Supports evolutionary, feedback-driven fuzzing based on code coverage (SW and HW based)

Tool to look for several security related Android application vulnerabilities

Runtime Mobile Security (RMS) 📱🔥 - is a powerful web interface that helps you to manipulate Android and iOS Apps at Runtime

Android Package Inspector - dynamic analysis with api hooks, start unexported activities and more. (Xposed Module)

An on-path blackbox network traffic security testing tool

No description.

Java decompiler, assembler, and disassembler

The new bridge between Burp Suite and Frida!

No description.

A big list of Android Hackerone disclosed reports and other resources.

Documentation:

📱 Andriller - is software utility with a collection of forensic tools for smartphones. It performs read-only, forensically sound, non-destructive acquisition from Android devices.

Vulnerable Android application for developers and security enthusiasts to learn about Android insecurities

A runtime mobile application analysis toolkit with a Web GUI, powered by Frida, written in Python.

Full featured multi arch/os debugger built on top of PyQt5 and frida

An automatic obfuscation tool for Android apps that works in a black-box fashion, supports advanced obfuscation features and has a modular architecture easily extensible with new techniques

Collection of android malware samples

AndroBugs Framework is an efficient Android vulnerability scanner that helps developers or hackers find potential security vulnerabilities in Android applications. No need to install on Windows.

A command line tool to download Android applications directly from the Google Play Store by specifying their package name (an initial one-time configuration is required)

A Virtual Machine For Assessing Android applications, Reverse Engineering and Malware Analysis

DIVA Android - Damn Insecure and vulnerable App for Android

No description.

Android Vulnerability Test Suite - In the spirit of open data collection, and with the help of the community, let's take a pulse on the state of Android security. NowSecure presents an on-device app to test for recent device vulnerabilities.

A collection of android Exploits and Hacks

A W.I.P Android Security Ref

A python based tool for exploiting and managing Android devices via ADB

Google Play Unofficial Python API - This project was a PoC and is not maintained anymore. Please feel free to fork it and improve it in any way.

Android App Security Checklist