#1Tools for assessing, testing, and exploiting mobile applications and devices (Android, iOS).
Kitploit recommended
rapid7/metasploit-javapayloadObsolete Java payload library for Metasploit, providing Java and Android Meterpreter agents built with Maven. Merged into metasploit-payloads.
mke84/neo8-ghostlock-adaptationiQOO Neo8 (PD2301, 5.10.246 GKI) CVE-2026-43499 GhostLock 适配 · 48 宏 target.h + offsets.json + 15 轮实测 log · 只缺 write layer
nomnomheapnom/cve-2024-27815Proof-of-concept trigger for CVE-2024-27815, an XNU kernel heap buffer overflow in sbconcat_mbufs() reachable via AF_UNIX datagram sockets, causing…
camsshaft/ionstack-s22-cve-2026-43499Android kernel exploit for Samsung Galaxy S22 that gains kernel-domain root via CVE-2026-43499, with SELinux permissive, device-specific kallsyms,…
hmascs/ksurootOne-click Android kernel rooting tool exploiting CVE-2026-43499 to install KernelSU, with official, bundled, and custom .so payload sources.
n1nj4sec/pupyPupy is an opensource, cross-platform (Windows, Linux, OSX, Android) C2 and post-exploitation framework written in python and C
google/android-classysharkAndroid and Java bytecode viewer
thespeedx/tbombThis is a SMS And Call Bomber For Linux And Termux
ahmyth/ahmyth-android-ratAndroid Remote Administration Tool
hluwa/frida-dexdumpA frida tool to dump dex in memory to support security engineers analyzing malware.
google/nogotofailAn on-path blackbox network traffic security testing tool
google/enjarifyTranslates Dalvik bytecode (DEX/APK) to equivalent Java bytecode, enabling Java analysis tools to process Android applications with high correctness…
chrisk44/hijackerAircrack, Airodump, Aireplay, MDK3 and Reaver GUI Application for Android
trungnguyen1909/qemu-t8030iPhone 11 emulated on QEMU
sc1341/instagramosintAn Instagram Open Source Intelligence Tool - Archive
