Mobile Security Framework (MobSF) is an automated, all-in-one mobile application (Android/iOS/Windows) pen-testing, malware analysis and security assessment framework capable of performing static and dynamic analysis.
Useful tool to track location or mobile number
MVT (Mobile Verification Toolkit) helps with conducting forensics of mobile devices in order to find signs of a potential compromise.
Bitwarden mobile apps (Password Manager and Authenticator) for Android.
📱 objection - runtime mobile exploration
BlackDex is an Android unpack(dexdump) tool, it supports Android 5.0~12 and need not rely to any environment. BlackDex can run on any Android mobile phone or emulator, you can unpack APK File in several seconds.
Scanning APK file for URIs, endpoints & secrets.
Rust tool to detect cell site simulators on an orbic mobile hotspot
Generate a customized Privacy Policy and Terms of Use document for your mobile apps
DNS over HTTPS config profiles for iOS & macOS
the fastest and most powerful android decompiler(native tool working without Java VM) for the APK, DEX, ODEX, OAT, JAR, AAR, and CLASS file. which supports malicious behavior detection, privacy leaking detection, vulnerability detection, path solving, packer identification, variable tracking, deobfuscation, python&java scripts, device memory extraction, data decryption, and encryption, etc.
The Leading Security Assessment Framework for Android.
Runtime Mobile Security (RMS) 📱🔥 - is a powerful web interface that helps you to manipulate Android and iOS Apps at Runtime
Plugin for JADX to integrate MCP server
Flutter Mobile Application Reverse Engineering Tool
Flutter Reverse Engineering Framework
ASC is a super FAST and lightweight Android decompiler designed for Agents/Mobile Researchers.
- android
- decompilation
- decompile
- decompiler
The OWASP MASVS (Mobile Application Security Verification Standard) is the industry standard for mobile app security.
Pre-submission compliance scanner for the Apple App Store and Google Play. Scans code, privacy manifests, Android manifests, and IPA/APK/AAB binaries against the review guidelines. Offline, no account.
This app makes it extremely easy to build Django powered SPA's (Single Page App) or Mobile apps exposing all registration and authentication related functionality as CBV's (Class Base View) and REST (JSON)
Mobile Edge-Dynamic Unified Security Analysis
- malware
- dynamic-analysis
- frida-snippets
- android-malware
Frida scripts to rewrite mobile applications at runtime to directly MitM all HTTPS traffic
- android
- frida
- certificate
- interception
Open source Auth0/Keycloak alternative. Passkeys, SSO, MFA, passwordless, biometric login. Self-hosted or cloud. Enterprise-ready for SaaS & mobile apps
👊 Discord, your way. Revenge is a client modification for Discord mobile.