
awesome-ios-security
A curated list of awesome iOS application security resources.

A curated list of awesome iOS application security resources.

Intentionally vulnerable Android banking app for practicing mobile security testing, featuring root detection, anti-debugging, SSL pinning, and…

Proof-of-concept app to overwrite fonts on iOS using CVE-2022-46689.

SecurityExplained is a new series after the previous learning challenge series #Learn365. The aim of #SecurityExplained series is to create…

Utility to decrypt App Store apps on jailbroken iOS 11.x

Android DEX → Java decompiler in Rust — quality-first: javac-verified output, exact semantic-preserving simplification (cure), full apps in seconds,…

Next Generation SSLKillSwitch with much more support!

Blackbox Protobuf is a set of tools for working with encoded Protocol Buffers (protobuf) without the matching protobuf definition.

Binder Trace is a tool for intercepting and parsing Android Binder messages. Think of it as "Wireshark for Binder".

Fermion, an electron wrapper for Frida & Monaco.

OWASP iGoat - A Learning Tool for iOS App Pentesting and Security by Swaroop Yermalkar

Intentionally vulnerable Android application.

Penetration testing and auditing toolkit for Android apps.

A tool to automate the boring process of APK recon

A native APK and DEX decompiler written in Rust

iOS 15 0-day exploit (still works in 15.0.2)


Simple utility for sniffing decrypted HTTP/HTTPS traffic on a macOS/iOS device (either jailbroken or not)