#1Tools for assessing, testing, and exploiting mobile applications and devices (Android, iOS).
Kitploit recommended
urbanadventurer/android-pin-bruteforceUnlock an Android phone (or device) by bruteforcing the lockscreen PIN. Turn your Kali Nethunter phone into a bruteforce PIN cracker for Android…
gommzystudio/device-activity-trackerA phone number can reveal whether a device is active, in standby or offline (and more). This PoC demonstrates how delivery receipts + RTT timing leak…
chefkissinc/infernoApple Silicon device emulator.
wolfssl/wolfsslThe wolfSSL library is a small, fast, portable implementation of TLS/SSL for embedded devices to the cloud. wolfSSL supports up to TLS 1.3 and DTLS…
protonvpn/android-appOpen-source Android VPN client that encrypts traffic via OpenVPN and IKEv2, ensuring privacy and secure access on untrusted networks.
uazo/cromiteHardened Chromium/Bromite fork for Android, Windows and Linux with built-in ad blocking, anti-fingerprinting mitigations and privacy-focused patches.
0x90n/infosec-black-fridayAll the deals for InfoSec related software/tools this Black Friday
may215/awesome-termux-hacking⚡️An awesome list of the best Termux hacking tools
palera1n/palera1nJailbreak for A8 through A11, T2 devices, on iOS/iPadOS/tvOS 15.0, bridgeOS 5.0 and higher.
entysec/ghostGhost Framework is an Android post-exploitation framework that exploits the Android Debug Bridge to remotely access an Android device.
worawit/blutterFlutter Mobile Application Reverse Engineering Tool
emanuele-f/pcapdroidNo-root network monitor, firewall and PCAP dumper for Android
blacktop/ipswiOS/macOS Research Swiss Army Knife
idescriptor/idescriptorprivacy-first, open-source and free idevice management tool written in Rust and Qt
codinggay/blackdexAndroid APK unpacker that dumps DEX files from running or installed apps on Android 5.0–12 without root, Xposed, or Frida, supporting deep unpacking…
six2dez/pentest-bookCurated penetration testing wiki with daily-updated techniques, scripts, and checklists for reconnaissance, web, cloud, mobile, and…
yukonga/ghostlock-appGhostLock One-Tap Execution App (CVE-2026-43499)
cyberstrikeus/cyberstrikeAutonomous AI red team agent for penetration testing with 13+ specialized agents, 120+ OWASP test cases, and MITRE ATT&CK integration. Supports 15+…
