#1Cross-platform tools and methodologies for comprehensive security testing of mobile applications.
Kitploit recommended
openbba0/bbaAndroid app-cloning sandbox with a Frida-style CLI that spawns or attaches to cloned apps and injects QuickJS scripts using Gum Interceptor and…
maximilianfeix/hexveroThe first look at a binary or app bundle: static, execution-free analysis with evidence. CLI, 15-tool MCP server and local web UI, Node only.
yv1ing/secboxConducting cybersecurity testing using the pi agent in a pre-built sandbox environment.
reverserid/juriga fully autonomous AI agent for reverse engineering
vmoranv/jshookmcpA search-first, profile-aware reverse-engineering workspace for AI agents — 735 tools across 36 domains in one MCP server.
grapheneos/vanadiumPrivacy and security hardened Chromium build providing the WebView and default browser for GrapheneOS, with OS-level hardening and compatibility…
vvirei333/abrake27iOS 27 kernelcache RE: SEP dispatch map, AMFI diff, Ghidra workflow
b4sith-sec/gu3ssweakDeliberately vulnerable Android app for mobile security research and bug bounty practice - OWASP Mobile Top 10
mg1937/ascFast Android APK decompiler front-end that queries compiled DEX artifacts directly, extracting classes and cross-references in milliseconds without…
ariyanpegu/ghostlock-appGhostLock One-Tap Execution App (CVE-2026-43499)
wonjj6768/lenovo-tb365fc-ghostlock-cve-2026-43499GhostLock (CVE-2026-43499) root + KernelSU LKM for the Lenovo TB365FC (ZUXOS / Android 16, kernel 5.15.170)
a2333c/dfrootAndroid root tool for Samsung Galaxy S25 Ultra (SM-S938B) that chains DirtyFrag CVE-2026-43284 and CVE-2026-43499 to gain root automatically at boot…
ejfkdev/avdrootRoot an Android Studio emulator by patching its ramdisk with Magisk — in pure Go.
ejfkdev/ddcAndroid DEX → Java decompiler in Rust, built for speed — full apps in seconds, queries in milliseconds. Progressive analysis, javac-verified output,…
thakur2309/pagasus-proPython ADB-based Android device management and security audit toolkit with an interactive menu for root detection, permission dumps, debuggable app…
a23bc/op13-cve-2026-64560Device-specific Android kernel exploit for CVE-2026-64560 on OnePlus 13 builds, providing temporary root via ADB shell with verified payloads and…
wangs-official/opace6-cve-2026-64560Temporary root tool for OnePlus Ace 6 that exploits the CVE-2026-64560 Linux kernel POSIX CPU timer use-after-free to gain root until reboot, without…
qingle009/opace6-cve-2026-64560OnePlus Ace 6 temporary root tool (CVE-2026-64560) - device-verified port with corrected bootidParent address
