#1Tools focused on penetration testing, reversing, and securing Android apps and the Android OS.
Kitploit recommended

⚡️An awesome list of the best Termux hacking tools
Ghost Framework is an Android post-exploitation framework that exploits the Android Debug Bridge to remotely access an Android device.

Flutter Mobile Application Reverse Engineering Tool

Android APK unpacker that dumps DEX files from running or installed apps on Android 5.0–12 without root, Xposed, or Frida, supporting deep unpacking…

一款适用于以HW行动/红队/渗透测试团队为场景的移动端(Android、iOS、WEB、H5、静态网站)信息收集扫描工具,可以帮助渗透测试工程师、攻击队成员、红队成员快速收集到移动端或者静态WEB站点中关键的资产信息并提供基本的信息输出,如:Title、Domain、CDN、指纹信息、状态信息等。

GhostLock One-Tap Execution App (CVE-2026-43499)

Android Application Identifier for Packers, Protectors, Obfuscators and Oddities - PEiD for Android

Graphical forensic toolkit for parsing, decrypting, and extracting WhatsApp data from Android and iOS devices, including Google Drive and iCloud…

Malwoverview is a first response tool for threat hunting across VirusTotal, Hybrid Analysis, URLHaus, Polyswarm, Malshare, Alien Vault, Malpedia,…

An effort to build a single place for all useful android and iOS security related stuff. All references and tools belong to their respective owners.…

cSploit - The most complete and advanced IT security professional toolkit on Android.

Android Chromium fork with built-in ad blocking, anti-fingerprinting mitigations, DNS-over-HTTPS, and hardened privacy and security defaults.

A curated list of Android Security materials and resources For Pentesters and Bug Hunters

A rootless Android app that boots Alpine Linux: run containers (Podman/Docker/LXC) and GUI desktop apps.

Scanning APK file for URIs, endpoints & secrets.

The Leading Security Assessment Framework for Android.

backdoor-apk is a shell script that simplifies the process of adding a backdoor to any Android APK file. Users of this shell script should have…