#1Tools for assessing, testing, and exploiting mobile applications and devices (Android, iOS).
Kitploit recommended
alirezaparsi/copgAdvanced per-app device / CPU / GPU spoofer for rooted Android — device profiles, per-app CPU models, prop & Android-ID spoofing, all driven by a…
b1n4r1b01/n-daysCurated collection of iOS kernel and userland exploit PoCs and writeups for in-the-wild and researched CVEs, including binary-diffed vulnerability…
bishopfox/bfdecryptUtility to decrypt App Store apps on jailbroken iOS 11.x
ejfkdev/ddcAndroid DEX → Java decompiler in Rust — quality-first: javac-verified output, exact semantic-preserving simplification (cure), full apps in seconds,…
tomasz-lisowski/swsimA software SIM card.
ironfox-oss/ironfoxHardened Android web browser forked from Mull/Firefox with privacy-focused patches, anti-fingerprinting, telemetry removal, and secure defaults for…
nyamisty/ssl-kill-switch3Next Generation SSLKillSwitch with much more support!
laginimaineb/extractkeymasterExploit that extracts Qualcomm's KeyMaster keys using CVE-2015-6639 and CVE-2016-2431
morpheuslord/quadrainspectModular Android APK security analysis framework integrating static, dynamic, and reverse engineering tools for comprehensive vulnerability assessment…
nyan-x-cat/mass-ratBasic Multiplatform Remote Administration Tool - Xamarin
nccgroup/blackboxprotobufBlackbox Protobuf is a set of tools for working with encoded Protocol Buffers (protobuf) without the matching protobuf definition.
swdunlop/andbugScriptable debugger for Android Dalvik VM using JDWP/DDM interfaces to hook methods, inspect process state, and modify runtime behavior without…
ebryx/aes-killerBurp Plugin to decrypt AES encrypted traffic on the fly
illusionofchaos/ios-gamed-0dayiOS gamed exploit (fixed in 15.0.2)
foundryzero/binder-traceBinder Trace is a tool for intercepting and parsing Android Binder messages. Think of it as "Wireshark for Binder".
tomking062/cve-2022-38694_unlock_bootloaderThis is a one-time signature verification bypass. For persistent signature verification bypass, check…
ucsb-seclab/difuzeFuzzer for Linux Kernel Drivers
dimcyan/ios-remoteDisplay and control your iOS device
