Open highlighted repo slot
Put your repository first
Promote a GitHub repo at the top of Awesome repository list views for 7 days.
Awesome List
A collection of android security related resources
GitHub stars and default-branch commits for ashishb/android-security-awesome.
Open highlighted repo slot
Promote a GitHub repo at the top of Awesome repository list views for 7 days.
Dex to Java decompiler
A tool for reverse engineering Android apk files
A Java 8+ Jar & Android APK Reverse Engineering Suite (Decompiler, Editor, Debugger & More)
MVT (Mobile Verification Toolkit) helps with conducting forensics of mobile devices in order to find signs of a potential compromise.
The OWASP Mobile Application Security Testing Guide (MASTG) is a comprehensive manual for mobile app security testing and reverse engineering. It describes technical processes for verifying the OWASP Mobile Security Weakness Enumeration (MASWE) weaknesses, which are in alignment with the OWASP MASVS.
Android and Java bytecode viewer
An all-in-one hacking tool to remotely take over Android devices.
Reverse engineering and pentesting for Android applications
🤖 A CLI application that automatically prepares Android APK files for HTTPS inspection
Android virtual machine and deobfuscator
The Leading Security Assessment Framework for Android.
Android Reverse-Engineering Workbench for VS Code
No description.
A big list of Android Hackerone disclosed reports and other resources.
Documentation:
📱 Andriller - is software utility with a collection of forensic tools for smartphones. It performs read-only, forensically sound, non-destructive acquisition from Android devices.
A runtime mobile application analysis toolkit with a Web GUI, powered by Frida, written in Python.
Full featured multi arch/os debugger built on top of PyQt5 and frida
An automatic obfuscation tool for Android apps that works in a black-box fashion, supports advanced obfuscation features and has a modular architecture easily extensible with new techniques
A command line tool to download Android applications directly from the Google Play Store by specifying their package name (an initial one-time configuration is required)
A Virtual Machine For Assessing Android applications, Reverse Engineering and Malware Analysis
A collection of android Exploits and Hacks
A W.I.P Android Security Ref
A python based tool for exploiting and managing Android devices via ADB
Bluetooth experimentation framework for Broadcom and Cypress chips.
A vulnerable Android application that shows simple examples of vulnerabilities in a ctf style.
Andromeda - Interactive Reverse Engineering Tool for Android Applications
Simplifying encrypted traffic analysis for researchers by making protocol decryption effortless.
Secure, Unified, Powerful and Extensible Rust Android Analyzer
Static Code Analysis for Smali files
Get details and download apps from https://play.google.com by emulating an Android (Nexus 5X) device by default. For a rust version of this library check out https://github.com/dweinstein/rs-google-play
Android Loadable Kernel Modules - mostly used for reversing and debugging on controlled systems/emulators
Android Mobile Device Hardening
A SDK for the creation of analysis tools without obtaining app source code in order to profile runtime performance, examine code coverage, and track high-risk behaviors of a given app on Android 5.0 and above.
Radio frequency scanner with recon and offensive capabilities
A tool for quantitative risk analysis of Android applications based on machine learning techniques
[WIP] Simple mobile applications sandbox file browser tool. Powered with [frida.re](https://www.frida.re).
A flexible playground for Android CTF challenges.
Run arbitrary code by patching OAT files
The MPT (Mobile Pentest Toolkit) is a must-have solution for your android penetration testing workflow.
Python API Monitor for Android apps
Fast detection of repackaged Android applications based on the comparison of resource files included into the package.
Advanced analysis software for APK payloads created by RATs.
NullKia Mobile Security Framework - Tools in Nim, Crystal, V, D, Red, Odin, Haxe, Zig, Kotlin, Lua, PHP, Python | bad-antics | github.com/bad-antics
StaDynA: Addressing the Problem of Dynamic Code Updates in the Security Analysis of Android Applications
📱 Damn Vulnerable Mobile App - a single Flutter codebase that builds real native iOS & Android binaries with 200+ intentionally-vulnerable modules mapped to OWASP MASVS/MASTG, Mobile Top 10, CWE, plus LLM & Agentic AI Top 10. For mobile security training, pentest practice, and scanner validation.
Android app that runs 23 runtime integrity checks: root, Frida, Xposed, tampering, Play Integrity, SSL pinning and more