
aotopsy
Static analyzer for Flutter/Dart AOT snapshots — recovers function names, class hierarchies, call graphs, and behavioral signals from libapp.so…

Static analyzer for Flutter/Dart AOT snapshots — recovers function names, class hierarchies, call graphs, and behavioral signals from libapp.so…

A complete Android ImGui menu template project.

Blackbox Protobuf is a set of tools for working with encoded Protocol Buffers (protobuf) without the matching protobuf definition.

PoC for CVE-2024-23700, Android slient privilege escalation allow to read/write contacts, SMS, calendar, call log and voicemail, make outgoing calls…

Mobile Helper Framework (mhf) is a tool that automates the process of identifying the framework/technology used to create a mobile application.…

Binder Trace is a tool for intercepting and parsing Android Binder messages. Think of it as "Wireshark for Binder".

iOS Application w/Implementation of CVE-2024-27804

Penetration testing and auditing toolkit for Android apps.

Damn Vulnerable iOS App (DVIA) is an iOS application that is damn vulnerable. Its main goal is to provide a platform to mobile security…


iOS customization app powered by CVE-2022-46689. No jailbreak required.

Proof-of-concept app to overwrite fonts on iOS using CVE-2022-46689.

Android APK unpacker that dumps DEX files from running or installed apps on Android 5.0–12 without root, Xposed, or Frida, supporting deep unpacking…

iOS 15 0-day exploit (still works in 15.0.2)

fsp - Firestore Database Vulnerability Scanner Using APKs

Utility to decrypt App Store apps on jailbroken iOS 11.x

AndroBugs Framework is an efficient Android vulnerability scanner that helps developers or hackers find potential security vulnerabilities in Android…

Mobile Application Vulnerability Detection