
ddc
Android DEX → Java decompiler in Rust, built for speed — full apps in seconds, queries in milliseconds. Progressive analysis, javac-verified output,…

Android DEX → Java decompiler in Rust, built for speed — full apps in seconds, queries in milliseconds. Progressive analysis, javac-verified output,…

Automated mobile application security testing framework for Android, iOS, and Windows. Performs static and dynamic analysis, malware detection, and…


Comprehensive OWASP guide for mobile app security testing, reverse engineering, and verifying MASVS/MASWE weaknesses through static, dynamic, and…

Cross-platform library to parse, modify, and abstract ELF, PE, and MachO executable formats. Supports C++, Python, and Rust APIs with disassembler,…

Django application that performs SAST and Malware Analysis for Android APKs

A native APK and DEX decompiler written in Rust

A search-first, profile-aware reverse-engineering workspace for AI agents — 735 tools across 36 domains in one MCP server.

UNIX-like reverse engineering framework and command-line toolset

Main repo for hosting release binaries

A curated list of Android Security materials and resources For Pentesters and Bug Hunters

Lab-RATS is a powerful and lightweight Android Remote Administration Tool full of features that enables remote monitoring, management and interaction…

Command-line and GUI tool for decompiling Android Dex and APK files into readable Java source code, with resource decoding, deobfuscation, and Smali…

Frida scripts to rewrite mobile applications at runtime to directly MitM all HTTPS traffic

Ghidra is a software reverse engineering (SRE) framework

Radare2 and Frida better together.

An interactive TLS-capable intercepting HTTP proxy for penetration testers and software developers.

Privacy and security hardened Chromium build providing the WebView and default browser for GrapheneOS, with OS-level hardening and compatibility…