
PulseAPK
PulseAPK is a WPF frontend for apktool and uber-signer with drag-and-drop support, live decompilation output, smali analysis, and integrated APK…

PulseAPK is a WPF frontend for apktool and uber-signer with drag-and-drop support, live decompilation output, smali analysis, and integrated APK…

A complete Android ImGui menu template project.

a fully autonomous AI agent for reverse engineering

Static analysis tool for iOS applications that extracts links, API keys, subdomains, binary info, linked libraries, and strings to aid mobile…

Mobile app security auditing tool focused on automating SAST analysis, identifying underlying technologies (React Native, Flutter, Xamarin, native),…

Deliberately vulnerable Android app for mobile security research and bug bounty practice - OWASP Mobile Top 10

PoC Exploit for AOSP UserDictionary Content Provider (CVE-2018-9375)

CVE-2020-0096-StrandHogg2 复现

Android deeplink, Intent, and WebView bridge assessment helper for ethical hacking

Know what changed inside your Electron release: diff two builds for IPC, preload, windows, fuses and hosts, with file:line. CLI, CI gate, MCP server.

Root an Android Studio emulator by patching its ramdisk with Magisk — in pure Go.

OWASP hands-on Android security training lab with 78 MASVS/MASTG modules pairing vulnerable, secure, and attacker apps to demonstrate mobile…

This is an Exploit App I made when solving the DocumentViewer challenge (CVE-2021-40724) from MobileHackingLab. It will download a libdocviewe_pro.so…

Conducting cybersecurity testing using the pi agent in a pre-built sandbox environment.

ADT is a toolset designed to help model application behavior, research and test security vulnerabilities, and facilitate reversing hostile code.

Browser-local security monorepo with six modules for mobile APK/IPA triage, client-side DAST fuzzing, OSINT directories, offline AI threat scoring,…

GhostLock One-Tap Execution App (CVE-2026-43499)

PoC for CVE-2026-78997, a Universal XSS in UC Browser for Android. Includes a crafted URL builder, a callback-dispatch oracle, and Frida hooks to…