Open highlighted repo slot
Put your repository first
Promote a GitHub repo at the top of Awesome repository list views for 7 days.
Awesome List
A collection of android security related resources
GitHub stars and default-branch commits for ashishb/android-security-awesome.
Open highlighted repo slot
Promote a GitHub repo at the top of Awesome repository list views for 7 days.
Mobile Security Framework (MobSF) is an automated, all-in-one mobile application (Android/iOS/Windows) pen-testing, malware analysis and security assessment framework capable of performing static and dynamic analysis.
Scanning APK file for URIs, endpoints & secrets.
Runtime Mobile Security (RMS) 📱🔥 - is a powerful web interface that helps you to manipulate Android and iOS Apps at Runtime
A big list of Android Hackerone disclosed reports and other resources.
Oversecured Vulnerable Android App
A vulnerable Android application that shows simple examples of vulnerabilities in a ctf style.
Django application that performs SAST and Malware Analysis for Android APKs
Android Mobile Device Hardening
[WIP] Simple mobile applications sandbox file browser tool. Powered with [frida.re](https://www.frida.re).
Zygisk module that intercepts Flutter app traffic — redirects to a proxy and bypasses BoringSSL TLS pinning. Persistent, no Frida session. Installable via MMRL.
Fast detection of repackaged Android applications based on the comparison of resource files included into the package.
Vuldroid is a Vulnerable Android Application made with security issues in order to demonstrate how they can occur in code
StaDynA: Addressing the Problem of Dynamic Code Updates in the Security Analysis of Android Applications
Authorized Android pentest lab, drivable by hand or by AI — Frida bypass chain, live traffic capture with automatic IDOR flagging, full MCP control plane, web dashboard.
Android app that runs 23 runtime integrity checks: root, Frida, Xposed, tampering, Play Integrity, SSL pinning and more