#1Cross-platform tools and methodologies for comprehensive security testing of mobile applications.
Kitploit recommended
amd2g2zz/kunglao-agentThe reverse-engineering expert agent: plans its own analysis path, derives every fact from raw evidence, and converges under mechanical verification…
dingo97/cve-2026-20516Write-up and ADB proof of concept for CVE-2026-20516, a confused deputy flaw in MediaTek Android TV MiracastService allowing local Wi-Fi Direct state…
zhubaohe123/ghostlock-kitOne-click root kit for vivo iQOO Neo9S Pro (MT6989) exploiting CVE-2026-43499 futex PI UAF via MCAST transport, with scripts and analysis docs.
hunt-benito/the-callback-that-outlived-the-page-cve-2026-78997-uc-browser-android-universal-xssPoC for CVE-2026-78997, a Universal XSS in UC Browser for Android. Includes a crafted URL builder, a callback-dispatch oracle, and Frida hooks to…
auroraoss/aurorastoreOpen-source Android client for browsing and downloading apps from Google Play with anonymous login, device/locale spoofing, and tracker detection.
xiaohj233/ghostlock-x200-appvivo X200 设备端一键 root App（Shizuku 授权 shell 域执行，CVE-2026-43499）
michalbednarski/organizertransactionPoC for CVE-2021-39749, allowing starting arbitrary Activity on Android 12L Beta
stuxctf/slythestxMobile app security auditing tool focused on automating SAST analysis, identifying underlying technologies (React Native, Flutter, Xamarin, native),…
alonemonkey/frida-ios-dumpExtracts decrypted IPA files from jailbroken iOS devices using Frida for reverse engineering, security analysis, and mobile app pentesting.
nabla-c0d3/ssl-kill-switch2Blackbox tool to disable SSL certificate validation - including certificate pinning - within iOS and macOS applications.
jwalker/frida-ios-dump-modernAn updated Frida iOS dump tool supporting the latest Frida 17.5.2 APIs
chichou/grapefruitOpen-source mobile security testing suite for iOS and Android. Previously Passionfruit
majd/ipatoolCommand-line tool that allows you to search for iOS, iPadOS, tvOS, watchOS, visionOS, and macOS apps on the App Store, and download .ipa or macOS…
blacktop/ipswiOS/macOS Research Swiss Army Knife
httptoolkit/frida-interception-and-unpinningFrida scripts to rewrite mobile applications at runtime to directly MitM all HTTPS traffic
mitmproxy/mitmproxy_rsRust components for traffic interception and redirection, enabling WireGuard device proxying and local app redirection across macOS, Windows, and…
hackerronin/cve-2024-0044a vulnerability affecting Android version 12 & 13
hackerronin/cve-2020-0096-strandhogg-exploit-p0cAndroid Application Task Hijacking Aka Strandhogg Attack Exploit
