#1Tools for assessing, testing, and exploiting mobile applications and devices (Android, iOS).
Kitploit recommended
cy-clon3/awesome-ios-securityA curated list of awesome iOS application security resources.
secrary/andromedaC/C++ interactive reverse engineering tool for Android applications, enabling fast static analysis and binary inspection of APK files.
zalexdev/wpair-appWPair is a defensive security research tool that demonstrates the CVE-2025-36911 (eg WhisperPair) vulnerability in Google's Fast Pair protocol. This…
0x36/pixel_gpu_exploitAndroid 14 kernel exploit for Pixel7/8 Pro
vaimpierofficial/vaim-smsTHIS TOOL IS FOR DDOS ATTACK ON PHONE NUMBER YOU CAN USE THIS TOOL ON YOUR KALI LINUX OR TERMUX ALSO IF IS NOT WORK THEN PLEASE CONTACT ME IN…
mvt-project/androidqfandroidqf (Android Quick Forensics) helps quickly gathering forensic evidence from Android devices, in order to identify potential traces of…
hackerhouse-opensource/exploitsexploits and proof-of-concept vulnerability demonstration files from the team at Hacker House
rewanthtammana/damn-vulnerable-bankIntentionally vulnerable Android banking app for practicing mobile security testing, featuring root detection, anti-debugging, SSL pinning, and…
ginsudev/wdbfontoverwriteProof-of-concept app to overwrite fonts on iOS using CVE-2022-46689.
grant-h/qu1ckr00tA PoC application demonstrating the power of an Android kernel arbitrary R/W.
harsh-bothra/securityexplainedSecurityExplained is a new series after the previous learning challenge series #Learn365. The aim of #SecurityExplained series is to create…
owasp/mastg-hacking-playgroundCollection of intentionally insecure iOS and Android apps for learning mobile security testing, reverse engineering, and vulnerability analysis,…
flythenimbus/brambleLocal-first password manager with direct device-to-device sync
yhs0602/android-disassemblerDisassemble ANY files including .so (NDK, JNI), Windows PE(EXE, DLL, SYS, etc), linux binaries, libraries, and any other files such as pictures,…
theos/sdksPatched sdks that include private framework tbds
seemoo-lab/internalblueBluetooth experimentation framework for Broadcom and Cypress chips.
alirezaparsi/copgAdvanced per-app device / CPU / GPU spoofer for rooted Android — device profiles, per-app CPU models, prop & Android-ID spoofing, all driven by a…
b1n4r1b01/n-daysCurated collection of iOS kernel and userland exploit PoCs and writeups for in-the-wild and researched CVEs, including binary-diffed vulnerability…
