Tools

nationalsecurityagency/ghidra

Ghidra is a software reverse engineering (SRE) framework

radareorg/radare2

UNIX-like reverse engineering framework and command-line toolset

ejfkdev/ddc

Android DEX → Java decompiler in Rust — quality-first: javac-verified output, exact semantic-preserving simplification (cure), full apps in seconds,…

frida/frida

Main repo for hosting release binaries

maximilianfeix/hexvero

Know what changed inside your Electron release: diff two builds for IPC, preload, windows, fuses and hosts, with file:line. CLI, CI gate, MCP server.

mpast/mobileaudit

Django application that performs SAST and Malware Analysis for Android APKs

ch0pin/rdx

A native APK and DEX decompiler written in Rust

facebook/mariana-trench

A security focused static analysis tool for Android and Java applications.

mg1937/asc

Fast Android APK decompiler front-end that queries compiled DEX artifacts directly, extracting classes and cross-references in milliseconds without…

konloch/bytecode-viewer

A Java 8+ Jar & Android APK Reverse Engineering Suite (Decompiler, Editor, Debugger & More)

pascal-lab/tai-e

An easy-to-learn/use static analysis framework for Java and Android

mobsf/mobsfscan

mobsfscan is a static analysis tool that can find insecure code patterns in your Android and iOS source code. Supports Java, Kotlin, Swift, and…

githubsecuritylab/seclab-taskflows

Example AI-agent taskflows and MCP servers for auditing source code, triaging issues, and detecting vulnerabilities across web, Android, and iOS…

zinja-coder/jadx-ai-mcp

Plugin for JADX to integrate MCP server

xv4l3x/hermit

Inspects, decompiles and structurally patches Hermes bytecode (HBC) from React Native apps, with a GDB-style REPL, CFG, decompiler and re-serializing…

symbioticsec/hermes-decomp

A powerful decompiler that lets you reverse-engineer React Native mobile apps by converting their compiled Hermes bytecode (.hbc) files back into…

cyber-buddy/apkhunt

Static code analysis tool for Android apps based on OWASP MASVS, detecting security vulnerabilities in APK files with low false-positive rates and…

bytedance/appshark

Static taint analysis platform for Android apps that detects vulnerabilities and compliance issues using customizable rule-based scanning and…