Tools

stefan2200/aparoid

Static and dynamic Android application security analysis

mobsf/mobile-security-framework-mobsf

Automated mobile application security testing framework for Android, iOS, and Windows. Performs static and dynamic analysis, malware detection, and…

cyber-buddy/apkhunt

Static code analysis tool for Android apps based on OWASP MASVS, detecting security vulnerabilities in APK files with low false-positive rates and…

owasp/mastg

Comprehensive OWASP guide for mobile app security testing, reverse engineering, and verifying MASVS/MASWE weaknesses through static, dynamic, and…

sterrasec/apk-interceptor

Android deeplink, Intent, and WebView bridge assessment helper for ethical hacking

shacode/olyx

🔗 Lightweight security orchestrator mobile application for URI vetting, providing a unified, multi-engine interface to aggregate and validate link…

nccgroup/house

A runtime mobile application analysis toolkit with a Web GUI, powered by Frida, written in Python.

commando-x/vuln-bank-mobile

A deliberately vulnerable mobile banking application designed for practicing mobile security testing. Features common vulnerabilities found in…

nccgroup/android_demystification_toolbox

ADT is a toolset designed to help model application behavior, research and test security vulnerabilities, and facilitate reversing hostile code.

nvisium-jack-mannino/owasp-goatdroid-project

*This project is no longer maintained* OWASP GoatDroid is a fully functional and self-contained training environment for educating developers and…

rewanthtammana/damn-vulnerable-bank

Intentionally vulnerable Android banking app for practicing mobile security testing, featuring root detection, anti-debugging, SSL pinning, and…

0x742/noia

Web-based tool for browsing mobile application sandboxes, previewing SQLite databases and binary files, and downloading app data via Frida…

nfcgate/nfcgate

An NFC research toolkit application for Android

hahwul/droid-hunter

(deprecated) Android application vulnerability analysis and Android pentest tool

tanprathan/mobileapp-pentest-cheatsheet

The Mobile App Pentest cheat sheet was created to provide concise collection of high value information on specific mobile application penetration…

niklashigi/apk-mitm

🤖 A CLI application that automatically prepares Android APK files for HTTPS inspection

faizann24/wifi-bruteforcer-fsecurify

Android application to brute force WiFi passwords without requiring a rooted device.

grant-h/qu1ckr00t

A PoC application demonstrating the power of an Android kernel arbitrary R/W.