#1Tools focused on penetration testing, reversing, and securing Android apps and the Android OS.
Kitploit recommended
novoda/gradle-static-analysis-pluginEasy setup of static analysis tools for Android and Java projects.
nowsecure/android-forensicsOpen source Android Forensics app and framework
yuuouu/coloros-cve-2025-10184ColorOS短信漏洞，以及用户自救方案
dpnishant/raptorWeb-based Source Code Vulnerability Scanner
1ultimat3/badintentIntercept, modify, repeat and attack Android's Binder transactions using Burp Suite
hahwul/droid-hunter(deprecated) Android application vulnerability analysis and Android pentest tool
certcc/keyfinderA tool for finding and analyzing private (and public) key files, including support for Android APK files.
hyln9/vikirootCVE-2016-5195 (Dirty COW) PoC for Android 6.0.1 Marshmallow
nvisium-jack-mannino/owasp-goatdroid-project*This project is no longer maintained* OWASP GoatDroid is a fully functional and self-contained training environment for educating developers and…
eybisi/kavanozStatically unpacking common android banker malware.
labcif/famaForensic Analysis for Mobile Apps (FAMA) -- module for the Autopsy Forensic Browser
linuxoid-cn/mi8e5-unlocker-by-cve-2026-43499基于 CVE-2026-43499 的 8E5 机型自动化解锁辅助工具，仅限授权安全研究与自有设备使用。
k0mraid3/k0mraid3s-system-shell-prebuiltExploit I discovered in October of 2022 with androids Package manager binary (pm) and the way it handled debugging flags, patched out by march 2023.…
blueskychan-dev/ddospacketUse own Phone to DoS Attack without Termux! (Android 5.1+)
davidbuchanan314/cowrootUniversal Android root tool based on CVE-2016-5195. Watch this space.
liznzn/cve-2019-2215Temproot for Bravia TV via CVE-2019-2215.
ylarod/cve-2023-5521Root takeover via signature spoofing in KernelSU
s1204it/cve-2023-6241CVE-2023-6241 for Pixel 8
