Open highlighted repo slot
Put your repository first
Promote a GitHub repo at the top of Awesome repository list views for 7 days.
Awesome List
A collection of android security related resources
GitHub stars and default-branch commits for ashishb/android-security-awesome.
Open highlighted repo slot
Promote a GitHub repo at the top of Awesome repository list views for 7 days.
A tool for reverse engineering Android apk files
UNIX-like reverse engineering framework and command-line toolset
The OWASP Mobile Application Security Testing Guide (MASTG) is a comprehensive manual for mobile app security testing and reverse engineering. It describes technical processes for verifying the OWASP Mobile Security Weakness Enumeration (MASWE) weaknesses, which are in alignment with the OWASP MASVS.
Reverse engineering and pentesting for Android applications
Scanning APK file for URIs, endpoints & secrets.
🤖 A CLI application that automatically prepares Android APK files for HTTPS inspection
Android virtual machine and deobfuscator
Decompiler from Java bytecode to Java, used in IntelliJ IDEA.
Android Reverse-Engineering Workbench for VS Code
Runtime Mobile Security (RMS) 📱🔥 - is a powerful web interface that helps you to manipulate Android and iOS Apps at Runtime
Documentation:
Full featured multi arch/os debugger built on top of PyQt5 and frida
A Virtual Machine For Assessing Android applications, Reverse Engineering and Malware Analysis
Andromeda - Interactive Reverse Engineering Tool for Android Applications
Static Code Analysis for Smali files
Android Loadable Kernel Modules - mostly used for reversing and debugging on controlled systems/emulators
A SDK for the creation of analysis tools without obtaining app source code in order to profile runtime performance, examine code coverage, and track high-risk behaviors of a given app on Android 5.0 and above.
[WIP] Simple mobile applications sandbox file browser tool. Powered with [frida.re](https://www.frida.re).
Zygisk module that intercepts Flutter app traffic — redirects to a proxy and bypasses BoringSSL TLS pinning. Persistent, no Frida session. Installable via MMRL.
Mobile runtime detection workbench for AI (iOS and Android)
Advanced analysis software for APK payloads created by RATs.
Authorized Android pentest lab, drivable by hand or by AI — Frida bypass chain, live traffic capture with automatic IDOR flagging, full MCP control plane, web dashboard.