Tools

zaproxy/zaproxy

Open-source web application security scanner for automated vulnerability detection, manual penetration testing, and API security testing with a…

gmh5225/awesome-game-security

Curated index of game security research: anti-cheat internals, DMA attacks, reverse engineering, kernel/mobile protections, and graphics API hooking…

mitmproxy/mitmproxy

An interactive TLS-capable intercepting HTTP proxy for penetration testers and software developers.

mobsf/mobile-security-framework-mobsf

Automated mobile application security testing framework for Android, iOS, and Windows. Performs static and dynamic analysis, malware detection, and…

facebook/mariana-trench

A security focused static analysis tool for Android and Java applications.

skylot/jadx

Command-line and GUI tool for decompiling Android Dex and APK files into readable Java source code, with resource decoding, deobfuscation, and Smali…

lakr233/vphone-cli

Boot and manage virtual iPhones on Apple Silicon with firmware patching, jailbreak variants, and security research features for iOS testing and…

nowsecure/r2frida

Radare2 and Frida better together.

chichou/grapefruit

Open-source mobile security testing suite for iOS and Android. Previously Passionfruit

mvt-project/mvt

Forensic collection and analysis toolkit for Android and iOS devices to identify potential compromise by known spyware using public and private…

bkerler/mtkclient

Mediatek Flash and Repair Utility

ironfox-oss/ironfox

Hardened Android web browser forked from Mull/Firefox with privacy-focused patches, anti-fingerprinting, telemetry removal, and secure defaults for…

pascal-lab/tai-e

An easy-to-learn/use static analysis framework for Java and Android

umarrehmansiddiqui/cve-2026-0073

Proof-of-concept exploit for an Android adbd Wireless Debugging TLS auth bypass, using an EC/RSA key type mismatch to obtain an unauthenticated…

secforce/droidground

A flexible playground for Android CTF challenges.

marin-m/pbtk

A toolset for reverse engineering and fuzzing Protobuf-based apps

pranshuchittora/simvyn

Universal mobile devtool for Agents & Humans - control iOS Simulators, Android Emulators, and real devices from a single dashboard and CLI