#1Tools for assessing, testing, and exploiting mobile applications and devices (Android, iOS).
Kitploit recommended
mysk-research/loupeA privacy-focused iOS app that raises awareness about what native apps can see
cossacklabs/themisEasy to use cryptographic framework for data protection: secure messaging with forward secrecy and secure data storage. Has unified APIs across 14…
secluso/coreA privacy-preserving Raspberry Pi home security camera that uses advanced end-to-end encryption.
den4uk/andriller📱 Andriller - is software utility with a collection of forensic tools for smartphones. It performs read-only, forensically sound, non-destructive…
asamassekou10/ship-safeThe independent security agent for AI-written software. Finds issues, investigates whether they are real, and shows you the evidence. Deterministic…
m4sc3r4n0/evil-droidFramework to create, generate, and embed APK payloads for Android penetration testing, leveraging Metasploit for exploitation and Apktool for…
j-jaeyoung/bad-epollLinux kernel privilege-escalation exploit for CVE-2026-46242, a race-condition use-after-free in epoll, with 99% reliable root on desktops, servers,…
felix-pb/kfdkfd, short for kernel file descriptor, is a project to read and write kernel memory on Apple devices.
thakur2309/pagasus-proPython ADB-based Android device management and security audit toolkit with an interactive menu for root detection, permission dumps, debuggable app…
mobsf/mobsfscanmobsfscan is a static analysis tool that can find insecure code patterns in your Android and iOS source code. Supports Java, Kotlin, Swift, and…
enovella/tee-reversingA curated list of public TEE resources for learning how to reverse-engineer and achieve trusted code execution on ARM devices
maoabc/nmmpdex-vm used to protect the android classes.dex file
sensepost/kwetzaPython script to inject existing Android applications with a Meterpreter payload.
1n3/reverseapkQuickly analyze and reverse engineer Android packages
joinchang/ghostlock-oneplusGhostLock (CVE-2026-43499) kernel exploit for Android devices with locked bootloader
prey/prey-android-clientAndroid client for Prey: reliable device tracking and security tool
lsposed/lspromiseAndroid complete exploit chain that enables privilege escalation from a local untrusted app to root/kernel, combination of CVE-2026-49881 and…
0n1con3/fluxerFluxER - The bash script which installs and runs the Fluxion tool inside Termux. The wireless security auditing tool used to perform WPA/WPA2…
