#1Tools focused on penetration testing, reversing, and securing Android apps and the Android OS.
Kitploit recommended
marcog3/whatsdumpExtract WhatsApp private key from any non-rooted Android device (Android 7+ supported)
0xpwny/apkatshuApkatshu is a Tool for extracting urls , emails , ip address , and interesting data from APK files
yuatemycat/superghidraPython toolkit accelerating Ghidra with a cached daemon, ARM64 P-code lifting, Z3 equivalence proofs, GPU-accelerated scanning, binary diffing, and…
delvinru/apk-infoAPK full-featured parser
sultanahamer/opencontactsAndroid contact manager that stores contacts in an isolated database, preventing other apps from accessing them. Provides call log and caller ID…
botherder/androidqfPortable forensic acquisition tool for Android devices that collects relevant data via USB debugging to identify potential spyware or compromise…
jakev/pyxamstorePython utility for parsing Xamarin AssemblyStore blob files
fi01/cve-2015-3636Proof-of-concept exploit for CVE-2015-3636 targeting 32-bit Android OS kernel privilege escalation.
markakd/bad_io_uringAndroid kernel exploitation for CVE-2022-20409
mzfr/slicerA tool to automate the boring process of APK recon
skorpion96/unisoc-suA method for CVE-2025-31710 and to connect to cmd_skt to obtain a root shell on unisoc unpatched models
1-3-7/disrobeRust CLI suite that statically decompiles, deobfuscates, and unpacks native code, bytecode, scripts, firmware, and app packages across 15+ ecosystems…
retme7/cve-2014-7911_pocLocal root exploit for Nexus5 Android 4.4.4(KTU84P)
ch0pin/rdxA native APK and DEX decompiler written in Rust
plum-umd/redexerThe Redexer binary instrumentation framework for Dalvik bytecode
nettitude/scroungerMobile application testing toolkit
a-yatta/amdhAndroid Mobile Device Hardening
balazsgerlei/androidsecurityevolutionSignificant security enchancements of recent major Android versions.
