#1Tools for assessing, testing, and exploiting mobile applications and devices (Android, iOS).
Kitploit recommended

A "plugin" for Android Java to allow asking the user about SSL certificates
An IDA Toolkit for analyzing iOS kernelcaches.

This project shows the kind of data a rogue iPhone application can collect.

Capture HTTP/HTTPS traffic from Android apps and send to Proxyman for debugging.

Linux Distro for Mobile Security, Malware Analysis, and Forensics

iOS 15.1 kernel exploit POC for CVE-2021-30955

Ninja Reverse Engineering on Android APK packages

macOS offensive security toolkit featuring dylib injection, HID keylogger, and in-memory JXA/Python payload runners for red team operations and…

ANE kernel r/w exploit for iOS 15 and macOS 12

Coverage-guided in-process fuzzer for iOS Bluetooth daemon (bluetoothd) using FRIDA, with over-the-air fuzzing for MagicPairing protocol and crash…

A frida script implement XposedBridge & load xposed modules, without installing xposed framwork.

Open source Android, iOS and Web app for learning about and managing digital and physical security. From how to send a secure message to dealing with…

CVE-2025-31200 is a zero-day, zero-click RCE in iOS CoreAudio’s AudioConverterService, triggered by a malicious audio file via iMessage/SMS.…

Extract WhatsApp private key from any non-rooted Android device (Android 7+ supported)

Apkatshu is a Tool for extracting urls , emails , ip address , and interesting data from APK files

Curated proof-of-concept exploits for real-world CVEs affecting iOS, macOS, Chrome Renderer, and Steam clients, with version-specific targets and…

Python toolkit accelerating Ghidra with a cached daemon, ARM64 P-code lifting, Z3 equivalence proofs, GPU-accelerated scanning, binary diffing, and…