#1Tools focused on penetration testing, reversing, and securing Android apps and the Android OS.
Kitploit recommended

Ghidra is a software reverse engineering (SRE) framework

Android customization suite providing root access (MagiskSU), systemless module installation, boot image unpacking/repacking, and Zygisk runtime code…

Display and control your Android device

Command-line and GUI tool for decompiling Android Dex and APK files into readable Java source code, with resource decoding, deobfuscation, and Smali…

An interactive TLS-capable intercepting HTTP proxy for penetration testers and software developers.

UNIX-like reverse engineering framework and command-line toolset

A tool for reverse engineering Android apk files

Main repo for hosting release binaries

Automated mobile application security testing framework for Android, iOS, and Windows. Performs static and dynamic analysis, malware detection, and…

AirPods liberated from Apple's ecosystem.

Open-source web application security scanner for automated vulnerability detection, manual penetration testing, and API security testing with a…

A collection of android security related resources

Natural-language Android automation agent that drives real devices via ADB, captures Logcat and screenshots, and exposes an MCP server for AI IDEs…

Comprehensive OWASP guide for mobile app security testing, reverse engineering, and verifying MASVS/MASWE weaknesses through static, dynamic, and…

Forensic collection and analysis toolkit for Android and iOS devices to identify potential compromise by known spyware using public and private…

Capturing SSL/TLS plaintext without a CA certificate using eBPF. Supported on Linux/Android kernels for amd64/arm64.

A Java 8+ Jar & Android APK Reverse Engineering Suite (Decompiler, Editor, Debugger & More)

A free, secure and open source app for Android to manage your 2-step verification tokens.