Mobile App Pentesting

lief-project/lief

Cross-platform library to parse, modify, and abstract ELF, PE, and MachO executable formats. Supports C++, Python, and Rust APIs with disassembler,…

majd/ipatool

Command-line tool that allows you to search for iOS, iPadOS, tvOS, watchOS, visionOS, and macOS apps on the App Store, and download .ipa or macOS…

deancyl/s9180-rootmygalaxy

RootMyGalaxy for Galaxy S23 Ultra SM-S9180 (FZG1) - temp root via CVE-2026-43499, KernelSU late-load, no partition flashing, no Knox

frida/frida

Main repo for hosting release binaries

amd2g2zz/kunglao-agent

The reverse-engineering expert agent: plans its own analysis path, derives every fact from raw evidence, and converges under mechanical verification…

alonemonkey/frida-ios-dump

Extracts decrypted IPA files from jailbroken iOS devices using Frida for reverse engineering, security analysis, and mobile app pentesting.

ibotpeaches/apktool

A tool for reverse engineering Android apk files

nowsecure/r2frida

Radare2 and Frida better together.

ev-flow/quark-engine

Rule-based Android malware scoring engine that analyzes APKs using static and dynamic analysis to detect vulnerabilities, identify malware families,…

blacktop/ipsw

iOS/macOS Research Swiss Army Knife

mg1937/asc

Fast Android APK decompiler front-end that queries compiled DEX artifacts directly, extracting classes and cross-references in milliseconds without…

ch0pin/rdx

A native APK and DEX decompiler written in Rust

xiaohj233/ghostlock-x200-app

vivo X200 设备端一键 root App（Shizuku 授权 shell 域执行，CVE-2026-43499）

azeemidrisi/phonesploit-pro

An all-in-one hacking tool to remotely take over Android devices.

openbba0/bba

Android app-cloning sandbox with a Frida-style CLI that spawns or attaches to cloned apps and injects QuickJS scripts using Gum Interceptor and…

skylot/jadx

Command-line and GUI tool for decompiling Android Dex and APK files into readable Java source code, with resource decoding, deobfuscation, and Smali…