Mobile App Pentesting

aotopsy

bronils/aotopsy

Static analyzer for Flutter/Dart AOT snapshots — recovers function names, class hierarchies, call graphs, and behavioral signals from libapp.so…

static-analysismobile-app-pentestingreverse-engineering+2

1719h 25m ago

PhoneSploit-Pro

azeemidrisi/phonesploit-pro

An all-in-one hacking tool to remotely exploit Android devices using ADB and Metasploit-Framework to get a Meterpreter session.

android-securitypayload-generationexploitation+7

6.1k8 days ago

two-dots-and-a-slash-cve-2026-18907-tecno-hi-browser-download-path-traversal

hunt-benito/two-dots-and-a-slash-cve-2026-18907-tecno-hi-browser-download-path-traversal

Python PoC for CVE-2026-18907 path traversal in TECNO Hi Browser's download handler. Includes malicious HTTP server and naive downloader to…

android-securityvulnerability-analysisexploitation+4

9 days ago

CVE-2023-41898_Lab

lazybear8372/cve-2023-41898_lab

android-securityvulnerability-analysismobile-app-pentesting+2

9 days ago

CVE-2023-31014_Lab

lazybear8372/cve-2023-31014_lab

Educational Android lab for CVE-2023-31014 implicit intent hijacking

android-securityvulnerability-analysisexploitation+4

10 days ago

CVE-2020-23349_Lab

lazybear8372/cve-2020-23349_lab

Educational Android lab for CVE-2020-23349 in Sina Weibo SDK 4.2.7

android-securityvulnerability-analysisexploitation+4

10 days ago

droidground

secforce/droidground

A flexible playground for Android CTF challenges.

android-securitydynamic-analysis-sandboxingexploitation+5

11714 days ago

android-hardware-attestation-demo

quarkslab/android-hardware-attestation-demo

An Android HW Attestation demo

android-securityauthentication-authorizationmobile-app-pentesting+3

3915 days ago

CVE-2026-22010-Android-Intent-Redirection-to-Exported-Component

george0papasotiriou/cve-2026-22010-android-intent-redirection-to-exported-component

android-securityvulnerability-analysisexploitation+3

116 days ago

Android-Imgui-Template

traitimtrongvag/android-imgui-template

A complete Android ImGui menu template project.

android-securityexploitationmobile-app-pentesting+4

1719 days ago

CVE-2026-12960

l0lsec/cve-2026-12960

CVE-2026-12960 - Improper Export of Android Application Components in the ASUS Router app (com.asus.aihome). PoC, exploit APK, video, and vendor…

android-securityvulnerability-analysisexploitation+3

26 days ago

mobileAudit

mpast/mobileaudit

Django application that performs SAST and Malware Analysis for Android APKs

android-securitystatic-analysisvulnerability-analysis+4

22827 days ago

root-sonim-xp3800

flipphoneguy/root-sonim-xp3800

app that ports CVE-2019-2215 to arm32 and mounts a su binary to /sbin with denylist + root app installer. firehose/Magisk guide included

android-securityprivilege-escalationexploitation+5

111 month ago

PulseAPK-Core

deemoun/pulseapk-core

PulseAPK Core: Cross-Platform tool for working with APK files: Decompilation, Analysis, Building

android-securitystatic-analysisdynamic-analysis-sandboxing+8

1161 month ago

awesome-android-security

saeidshirazi/awesome-android-security

A curated list of Android Security materials and resources For Pentesters and Bug Hunters

android-securitystatic-analysismobile-app-pentesting+6

2.0k1 month ago

vscode-frida

chichou/vscode-frida

VSCode extension for Frida-based mobile reverse engineering: runtime class/module inspection, Java/ObjC/native hook generation, autocomplete, and…

android-securityios-securitydynamic-code-analysis+5

5951 month ago

androidReverse

ultrasina/androidreverse

Android reverse engineering entirely on-device. Radare2 binary analysis, 8 Java decompilers, Flutter & Unity il2cpp support.

android-securitystatic-analysismobile-app-pentesting+5

1041 month ago

apk-interceptor

sterrasec/apk-interceptor

Android deeplink, Intent, and WebView bridge assessment helper for ethical hacking

android-securityvulnerability-analysismobile-app-pentesting+3

91 month ago