#1Tools focused on penetration testing, reversing, and securing Android apps and the Android OS.
Kitploit recommended

Android remote administration tool

MARA is a Mobile Application Reverse engineering and Analysis Framework. It is a toolkit that puts together commonly used mobile application reverse…

ES File Explorer Open Port Vulnerability - CVE-2019-6447

CuckooDroid - Automated Android Malware Analysis with Cuckoo Sandbox.

Filesystem monitor tool for Linux/Android iOS/macOS

Find your device and control it remotely. Works over SMS, instant messengers, or FMD Server's web interface. A secure open source alternative to…

Android Remote Access Trojan

Bluetooth keystroke injection exploit PoCs for CVE-2023-45866, CVE-2024-21306, and CVE-2024-0230 targeting Android, Linux, macOS, and iOS via…

Repository for the Smartphone Pentest Framework (SPF)

Yet another static code analyzer for malicious Android applications

Dynamic analysis sandbox for Android apps that monitors network traffic, file operations, cryptographic API usage, permission circumvention, and…

Android security guides, roadmap, docs, courses, write-ups, and teryaagh.

Analysis of public exploits or my 1day exploits

Unofficial frida extension for VSCode

DECAF (short for Dynamic Executable Code Analysis Framework) is a binary analysis platform based on QEMU. This is also the home of the DroidScope…

Model Context Protocol server for Firefox DevTools - enables AI assistants to inspect and control Firefox browser through WebDriver BiDi

Hands-on workshop for learning Android kernel vulnerability analysis and exploitation, with Docker-based build environment and practical exercises.

An intelligence gathering tool for hacking Bluetooth