
drozer
The Leading Security Assessment Framework for Android.

The Leading Security Assessment Framework for Android.

Android security guides, roadmap, docs, courses, write-ups, and teryaagh.

Damn Vulnerable iOS App (DVIA) is an iOS application that is damn vulnerable. Its main goal is to provide a platform to mobile security…

A curated list of awesome iOS application security resources.

Intentionally vulnerable Android banking app for practicing mobile security testing, featuring root detection, anti-debugging, SSL pinning, and…

Static and dynamic Android application security analysis

The repo contains a series of challenges for learning Frida for Android Exploitation.


Penetration testing and auditing toolkit for Android apps.

fsp - Firestore Database Vulnerability Scanner Using APKs

(deprecated) Android application vulnerability analysis and Android pentest tool

Decompiles Android APK/XAPK/JAR/AAR files and extracts HTTP APIs, authentication patterns, and call flows using jadx, with R8-resistant Kotlin name…

A curated list of Android Security materials and resources For Pentesters and Bug Hunters

MARA is a Mobile Application Reverse engineering and Analysis Framework. It is a toolkit that puts together commonly used mobile application reverse…

An open source Android application that is intentionally vulnerable so as to act as a learning platform for Android application security beginners.

ADT is a toolset designed to help model application behavior, research and test security vulnerabilities, and facilitate reversing hostile code.

Comprehensive Android security vulnerability demonstrations featuring CVE-2017-13156 (Janus), broadcast receiver exploitation, external storage…

*This project is no longer maintained* OWASP GoatDroid is a fully functional and self-contained training environment for educating developers and…