Apps · Android.

Dex to Java decompiler

AirPods liberated from Apple's ecosystem.

A tool for reverse engineering Android apk files

Mobile Security Framework (MobSF) is an automated, all-in-one mobile application (Android/iOS/Windows) pen-testing, malware analysis and security assessment framework capable of performing static and dynamic analysis.

A Java 8+ Jar & Android APK Reverse Engineering Suite (Decompiler, Editor, Debugger & More)

The OWASP Mobile Application Security Testing Guide (MASTG) is a comprehensive manual for mobile app security testing and reverse engineering. It describes technical processes for verifying the OWASP Mobile Security Weakness Enumeration (MASWE) weaknesses, which are in alignment with the OWASP MASVS.

📱 objection - runtime mobile exploration

The Ultimate Open-Source Security Arsenal for Hackers, Enterprises, and AI Agents

Android Full-Stack Device Control Platform: WebRTC/H.264 remote desktop, UI/OCR/image-matching automation, one-click MITM, built-in Frida, proxy/VPN/frp/P2P networking, MCP/Agent, 160+ APIs, designed for multi-device clusters and engineered deployments.

Claude Code skill to support Android app's reverse engineering

Reverse engineering and pentesting for Android applications

Scanning APK file for URIs, endpoints & secrets.

🔥🔥 hooker is a Frida-based reverse engineering toolkit for Android. It offers a user-friendly CLI, universal scripts, auto hook generation, memory roaming to detect activities/services, one-click SOCKS5 proxy setup, Frida JustTrustMe, and BoringSSL unpinning for all apps.

Unofficial Galaxy Buds Manager for Windows, macOS, Linux, and Android

🤖 A CLI application that automatically prepares Android APK files for HTTPS inspection

Reverse Engineering Resources About All Platforms(Windows/Linux/macOS/Android/iOS/IoT) And Every Aspect! (More than 3500 open source tools and 2300 posts&videos)

the fastest and most powerful android decompiler(native tool working without Java VM) for the APK, DEX, ODEX, OAT, JAR, AAR, and CLASS file. which supports malicious behavior detection, privacy leaking detection, vulnerability detection, path solving, packer identification, variable tracking, deobfuscation, python&java scripts, device memory extraction, data decryption, and encryption, etc.

Suitable for Android APK reverse engineering analysis

Open-source, cross platform Qt6 based IDE for reverse-engineering Android application packages. It features a friendly IDE-like layout including code editor with syntax highlighting support for *.smali code files.

Android virtual machine and deobfuscator

👋🧩Template repository for ReVanced Patches

Android Reverse-Engineering Workbench for VS Code

Makes reverse engineering Android apps easier, automating repetitive tasks like pulling, decoding, rebuilding and patching an APK.

💉 ReVanced Patcher used to patch Android applications

Using Zygisk to dump il2cpp data at runtime

Runtime Mobile Security (RMS) 📱🔥 - is a powerful web interface that helps you to manipulate Android and iOS Apps at Runtime

Plugin for JADX to integrate MCP server

Advanced Fuzzing Library - Slot your Fuzzer together in Rust! Scales across cores and machines. For Windows, Android, MacOS, Linux, no_std, ...

Hand-crafted Frida examples

ASC is a super FAST and lightweight Android decompiler designed for Agents/Mobile Researchers.

Powerful android apk editor - aapt/aapt2 independent

Mobile Edge-Dynamic Unified Security Analysis

Frida scripts to rewrite mobile applications at runtime to directly MitM all HTTPS traffic

Reverse engineering tools for Android

A Frida based tool that traces usage of the JNI API in Android apps.

Android App Reverse Engineering Workshop

FridaContainer brings together popular online and custom-written Frida scripts to improve reverse engineering efficiency, with modular Frida scripts and Java/JNI tracing.

🔐 Run frida-server on boot with Magisk, always up-to-date

A runtime mobile application analysis toolkit with a Web GUI, powered by Frida, written in Python.

The repo contains a series of challenges for learning Frida for Android Exploitation.

Full featured multi arch/os debugger built on top of PyQt5 and frida

A Virtual Machine For Assessing Android applications, Reverse Engineering and Malware Analysis

Tool to decompile & extract Android Dex bytecode from Vdex files

hook C# method at runtime without modify dll file (such as UnityEditor.dll), works on Windows, Mac, Android il2cpp(armv7a and armv8a)

An easy-to-use, high-performance dex deobfuscation library.

Remove Certificate Pinning from APKs

Powerful Frida repackaging tool for iOS and Android. Easily modify Frida signatures to enhance stealth and bypass detection. Streamlines reverse engineering and security testing.

One-click tool for quickly decompiling APK/AAR/DEX/JAR files, powered by jadx, dex2jar, and enjarify.

A Frida-based Android hooking framework that provides many features Frida does not support itself, making Android hooking simple and accessible to everyone.

The world's fastest apk (android)/java open source decompiler

🔥 Decompile APK

MCP server for JADX-AI Plugin

Code repository for the book Advanced Practical Web Scraping Reverse Engineering.

Andromeda - Interactive Reverse Engineering Tool for Android Applications

Multiplatform and Feature-rich Port based on PSX decompilation of Silent Hill 1 made with Claude and Psycross. Still in beta and is in active development.

Ideas and experiences in reverse engineering app parameters, focused on Android.

Find JNI function signatures in APK and apply to reverse-engineering tools.

A tool that helps you work with frida easily for Android platform

Demo of a complete hot-update solution for Unity Android IL2CPP apps. Update the Unity path in build_demo_apk, then run it to rebuild the patch and APK in one step. The libunity file is not hot-updated, so this solution does not apply if the Unity version changes.

Simplifying encrypted traffic analysis for researchers by making protocol decryption effortless.

LockKnife: The Ultimate Android Security Research Tool. A unified TUI workspace and headless CLI for deep Android security research, built for researchers and hackers. Powered by Python orchestration and a Rust-accelerated core, enabling AI agent–driven hacking, credential recovery/cracking, APK analysis, intelligence gathering, runtime inspection.

An Android reverse engineering skill tailored for Codex. It supports decompiling APK, XAPK, JAR, and AAR files within Codex sessions and uses jadx and Fernflower/Vineflower to map out the Manifest, package structure, network layer, and call chains. It helps extract interfaces, URLs, authorization headers, tokens, and signing logic, and provides static reconnaissance methods before Frida, traffic capture, and JNI/SO analysis. Suitable for interface analysis, security research, and authorized testing.

Damai Maoyan Piaoxingqiu ticket grabbing tech community | Android reverse engineering Frida hook ticket monitor | QQ 955767910

a tool to analyze filesystem images for security

A pattern based Dalvik deobfuscator which uses limited execution to improve semantic analysis

A classic, traditional, even old-fashioned Android decompilation tool. Make Android-killer Great Again!

Work in progress...

Delve into a comprehensive checklist, your ultimate companion for Android app penetration testing. Identify vulnerabilities in network, data, storage, and permissions effortlessly. Boost security skills with essential tools and user-friendly guides. Elevate Android security seamlessly!

Deobfuscator for Android Application

Software security engineer skills checklist

Unity Engine C++ API for Mono/il2cpp. Supports Windows, Android, Linux, iOS, and HarmonyOS. Game cheating.

Automated tool for patching APKs to enable the use of Frida gadget by downloading the library and injecting code into the main activity.

Process Android Memory Dumper

Intentionally vulnerable Android application.

Native port of Metroid Prime (GameCube) for Linux, Windows and Android, built from the PrimeDecomp decompilation. No emulator, no game assets included: bring your own disc image.

📖 Learn Android reverse engineering systematically from zero to one, with a fun, engaging, beginner-friendly approach!

Backup of technical articles on Android, JavaScript, assembly, and related reverse engineering.

BootStomp: a bootloader vulnerability finder

Build anti-detection Frida server from source. ~90 patches covering 16 detection vectors, weekly auto-builds with random names.

Mobile penetration testing android & iOS command cheatsheet

Android DEX → Java decompiler in Rust, built for speed — full apps in seconds, queries in milliseconds. Progressive analysis, javac-verified output, every DEX version, multi-dex & XAPK/APKS/APKM containers.

Web-based Frida framework and toolkit for Android & iOS penetration testing, mobile security, and dynamic analysis, featuring AI-assisted Frida script generation.

Modding il2cpp games by classes, methods, fields names on Android.

The most downloaded APK analysis app on Google Play. Detailed reports of every app on your device. No root, no ads, nothing leaves the phone.

Decompile React Native Android/IOS Bundle.

Hijack Zygote to inject a shared library before an app starts.

Burp proxy flutter apps

🍹A static injector of dynamic library for application (android, iphoneos, macOS, windows, linux)

Android Security Resources.

QuadraInspect is an Android framework that integrates AndroPass, APKUtil, and MobFS, providing a powerful tool for analyzing the security of Android applications.

Engine used by jnitrace to intercept JNI API calls.

A tool to help you intercept encrypted APIs in iOS or Android apps

PC, Android, iOS and macOS port of the ICO (PS2) decompilation (nathanialf/ico): Windows, Linux, Steam Deck, Android, iPhone via LiveContainer and Apple-silicon Mac (contributed). Contains no game data.

Flutter SSL Pinning Bypass Tool for Android & iOS — works on any Flutter version without pattern databases

Scan for secrets, endpoints, and other sensitive data after decompiling and deobfuscating Android files. (.apk, .xapk, .dex, .jar, .class, .smali, .zip, .aar, .arsc, .aab, .jadx.kts).

Android pentesting toolkit with REST API, web terminal, screen mirroring, Frida, and full device control from your rooted device

Android reverse-engineering tool / smali editor

SDK providing threat detection and security monitoring for Android devices. Shield your app with free RASP for Android. Detect reverse engineering, root (Magisk), jailbreak, Frida, emulators, bots, tampering and integrity issues, obfuscation, VPN usage, malware, and monitor device identification and fingerprint.

Frida Android utilities

A multi-decompiler standalone desktop GUI supporting JD-Core V0 & V1, CFR, Procyon, Fernflower, Vineflower & Jadx

Modular Windows/Android toolkit for Arknights: Endfield: BEM model mods and creator tools, native plug-ins, MMD playback, camera/UI controls, character voices, title-screen customization, and PC combat/gacha tools.

🛠 Tools and scripts to manipulate Android APKs

A small template for Android Hooking with Substrate (Or Dobby. See branches). (Includes a mod menu written in Java)

Interact with Frida devices, processes, and scripts directly from your browser.

Bypass Facebook SSL pinning on Android devices.

Django application that performs SAST and Malware Analysis for Android APKs

More reliably hijacks Zygote to inject shared libraries before an app starts.

Portable frida injector for rooted android devices.

DeepSeek Harness integrated security analysis plugin, covering Android, Web, Native, Protocol, Malware, and AI-Security (9 bundles and 1 preset).

Dump Il2Cpp unprotected executable ELF and metadata from process memory

Obfu[DE]scate is a de-obfuscation tool for Android APKs that uses fuzzy comparison logic to identify similarities between functions, even if they have been renamed as part of obfuscation. It compares two versions of an APK and generates a mapping text file and an interactive HTML file as outputs!

UE4 dump frida script

Decompile APK/IPA To UnityProject

a few android analysis tools, jni trace by native hook, Java Object Format to Json for Xposed and Frida

Assemblies hotfix with unity addressable , for windows and android , both mono and IL2CPP scripting backend,IL2CPP hotfix powered by wolong(HybridCLR)

Decompile and Recompile android aplication use termux without openjdk installed

Fridax enables you to read variables and intercept/hook functions in Xamarin/Mono JIT and AOT compiled iOS/Android applications.

Automation of some MAPT activities and interaction with the mobile Android device.

container/virtualization/sandbox apps on android

A collection of Frida scripts.

Katalina is like Unicorn but for Dalvik bytecode. It provides an environment that can execute Android bytecode one instruction at a time.

A Python coding framework for analyzing Unity applications.

An advanced DEX editor for Android.

TangGo is a comprehensive testing platform developed in China by Wutang Information Technology Co., Ltd. using years of penetration-testing experience. It provides software testers and cybersecurity professionals with powerful, easy-to-use tools and a collaborative workspace, primarily for website functional testing, security testing, and security assessment.

Tools for reverse-engineering and description of new TUYA API sign algorithm

Android Unpacking Automation using Corellium Devices

smali and baksmali - release artifacts for all versions (v3 by @google, v2 and v1 by @JesusFreke)

Jarida (Jadx + Frida) is a Jadx GUI plugin that lets you trace and optionally patch Java method return values at runtime using Frida, directly from Jadx’s decompiled view.

A pure-Python implementation of the Sports World Campus protocol, including NetSecKit 4.2.4, GeeTest v4, end-to-end protocol analysis, and an automation suite, independent of the Android app and native shared libraries.

Android 16 ART-integrated DEX dumper & repair toolkit inspired by FART. In-memory DEX reconstruction, R0dump Manager, and portable AOSP/LineageOS patches.

A dex analyzer for finding obfuscated codes dynamically

Hacking Hotspots: Pre-Auth Remote Code Execution, Arbitrary SMS & Adjacent Attacks on 5G & 4G/LTE Routers

Scripts to set up your own Android 📱 app hacking lab

Apkx-Hunter is an Android Static Analysis Framework in Debian Package written entirely in C with OWASP MASVS scanning with 15 categories and 166 detection patterns for Android security assessments, reverse engineering, malware analysis, and penetration testing. It features ML-based secret scoring, and advanced static security analysis.

Deobfuscate "paranoid" protected apps

extract info from apk files

Unity Freecam (Internal)

A Unity and Cocos2d-x Lua game reverse engineering toolkit for Android, built on LSPosed, JNI, and native hook backends. Features Il2Cpp dump generation, text interception, Cocos runtime text capture, Lua replacement rules, cross-process configuration synchronization, and integrated on-device tooling for efficient analysis and debugging.

A practical Web and app security training environment integrating multiple programming languages.

Among Us Cheat Menu for Android

An AI-powered, multi-domain security analysis agent platform that enables LLMs to perform security analysis end to end.

Android: from development to reverse engineering.

A decompilation tool for quickly decompiling APKs, converting DEX to JAR and JAR to DEX, signing, aligning, generating patches, and more.

Easy to use APK/IPA Mobile App Inspector

The APK Scanner show the APK information via double click on your PC.

DECX - Decompiler + X

Type diagram plugin for JADX decompiler

DroidXploit – An all-in-one Android security assessment framework for rooted emulators, providing a modular CLI for enumeration, runtime analysis, and exploitation research.

A Frida-based utility for dynamically extracting native (.so) libraries from Android applications.

Android port of umamusume-localify

run java method of Android in Jadx without Android device.

Android Mod Menu Template based on LGL Mod Menu with auto update offsets

Example of frida il2cpp bridge library usage

SpacePeng Trainer 2026: Advanced Frida Script Examples & Game Hacks

Reverse Engineering Online Toolkit (REOT) is a browser-only toolkit for reverse engineering and web scraping. It provides security researchers, reverse engineers, web scraping engineers, and developers with convenient, efficient tools that require no installation, covering common encoding, decoding, encryption, decryption, and data conversion tasks.

SpacePeng Trainer Frida Scripts and Game Hacking Examples 2026

DeAPK is an open-source, online APK decompiler which lets you upload an APK and then decompile it to Smali or Java sources. It is built using Laravel, Vue.js, Bootstrap, FontAwesome, Pusher, Redis, MySQL, apktool, jadx and hosted atop Oracle cloud platform.

A universal way to create a noclip mod in Unity games (Mono/IIL2CPP)

A Python client library for interacting with the Skyscanner flight and car rental APIs

Android Fall Guys mod menu using Frida and frida-il2cpp-bridge

JADX plugin that extracts method names, class references, and source file paths from string constants found in DEX files and decompiled Android code.

Garlic Decompiler (GUI) - A modern C++/Qt6 desktop interface for the Garlic Decompiler, bringing blazing-fast APK, DEX, JAR, and CLASS decompilation to Windows, Linux, and macOS.

An APK decompilation assistant for Linux, packaged as ApkDecompiler.deb, supporting Debian-based distributions including Debian, Ubuntu, Mint, and Deepin.

A native Android library that dump il2cpp (class/method/field) from any running Unity il2cpp app/game, entirely inside the process. No root, No adb, No frida, No zygisk.

⚙️ An efficient tool to do in-depth comparison of two android apps.

No description supplied by the upstream repository.

YouTube cipher deobfuscation, n-transform & PoToken (BotGuard) generation - a standalone Android library (Kotlin) with self-healing remote player configs.

APKrash is an Android APK security analysis toolkit focused on comparing APKs to detect tampering and repackaging.

LLVM pass plugin for native code obfuscation and anti-tamper. CFG flattening, string encryption, VM virtualization, anti-cheat, and more. iOS · Android · macOS · Windows · Wasm.

Analyze the so file in APK through LLM+Capstone to determine the main intention of the so file and the developer (company)

Web-based Android debugger with inspection capabilities using Frida and Jadx as a backbone

A Pure-Java MCP Server for JaDX Android Reverse Engineering Tool

A general-purpose KernelSU module for reverse-engineering analysis: the phone provides only atomic capabilities, while all intelligence runs on the PC (Claude Code + MCP). For authorized security research and educational use only.

Browser-based Android console, APK decompiler and security analyzer. Mirror, logcat, shell, Frida, jadx, and static and dynamic analysis, with no drivers or adb server.

Notes taken from Android App Hacking - Black Belt Edition (UDEMY - Roman Stuehler)

Reverse android Games Made with unity

Powerful All-in-One Telegram Bot for Developers and Security Professionals.

APKnife is an advanced APK analysis and modification tool designed for security researchers and ethical hackers. It allows users to extract, analyze, modify, and sign APK files. The tool provides features like APK extraction, AndroidManifest.xml editing, API call detection, vulnerability scanning, and APK signing

A high-performance Rust bridge to Unity's IL2CPP runtime — resolve types, invoke methods, and manipulate Unity objects from native code

ECD++ - Fork of Enhanced Class Decompiler - integrate modern Java decompilers seamlessly into the development workflow

Reverse-engineered protocol and open-source Python driver for the Ocrustar / ElkSmart USB IR blaster (VID 045C / PID 02AA). Learn and transmit IR signals without the app. Includes full APK decompilation, Huffman encoding analysis, Kookong cloud API documentation, and BLE protocol.

Jadart is a fast Flutter decompiler designed for Agents/Mobile Security Researchers.

Browser-based IDE for frida-server

A multi-decompiler MCP server and CLI toolkit for Java, supporting JD-Core v0 & v1, CFR, Procyon, Fernflower, Vineflower & JADX.

Mod for the Sonolus rhythm game with extra features, written using Frida and frida-il2cpp-bridge

A tool designed for low-level examination and modification of Unreal Engine game assets by hand.

A patcher for the moovit application to unlock premium features and removed ads.

An efficient and user-friendly Java debugging tool.

Surgically inject a System.loadLibrary() into a dex.

AI-powered mobile application reverse engineering and network traffic analysis toolkit

Analyze Android APK files from a browser.

Android RE skills for Pi coding agent - static (decompile/API extraction) + dynamic (Frida hooking/bypass)

Android reverse-engineering web crawler.

A framework for analysis, stimulation, and detection of Android repackaged malware (under construction)

Universal reverse engineering, 40+ vuln classes & working PoC generation for Android/iOS/Windows PE/Linux ELF/macOS/.NET - an AI-agnostic skill for Claude Code, Cursor, Copilot, Windsurf, Aider, Amazon Q & any LLM.

From late 2018 to the first half of 2019, packet-capture tools revealed a parameter-signature vulnerability in 🎦 Haokan Video. It was successfully exploited to farm coins and redeem them for cash over six months.

Android OTA image analysis preprocessing automation tool.

An APK-to-opencode pipeline based on jadx-ai-mcp-server, jrag, and evil-opencode.

Claude Code skill to reverse engineer any Flutter app — from source code, APK files, or live devices via ADB. Extracts architecture, dependencies, API endpoints, domain models, and more.

Self-hosted reverse-engineering workspace API — orchestrates jadx/apktool/adb/frida/APKiD via a job & workflow engine, exposed as native MCP tools for Claude. No cloud required.

MCP server for headless AI-driven Android reverse engineering — 122 tools across 8 categories for ADB, NDK, il2cpp, hooking, crash trapping, memory analysis, Frida, and APK manipulation

Technology-stack analysis for mainstream apps and a PlantUML generation tool.

ImGui overlay for Unity Android games — three injection variants (JNI, Zygisk, Magisk), IL2CPP introspection, 100+ anti-cheat bypass patches

Jadx GUI plugin that scans AndroidManifest.xml for security-relevant signals

A comprehensive reverse engineering study of the HY300 Android projector (Rockchip RK3326): firmware analysis, security audit, OEM component dissection, and custom ROM reconstruction.

Zero-Studio Android pentest lab — one-command rooted AVD with Magisk+Zygisk, Frida 17.2.14, Burp system-cert, SSL unpinning. Developed by hits.

🧪 Explore mobile security with Frida Reversing Lab, a toolkit for analyzing and manipulating Android apps to overcome obfuscation and security barriers.

Android APK malware triage with YARA, VirusTotal context, MITRE ATT&CK output, Frida hooks, and multi-LLM analysis.

For those who don't want to do the campus running requirement.

Awesome Reverse Engineering

a jadx-gui plugin to genereate method's control flow gragh and display it as image

APK ad-removal skill documentation covering unpacking, re-signing, and smali patching workflows.

A minimal web app to analyze Android applications with Frida

Headless MCP server that gives AI agents the full power of JADX for Android (APK/DEX/AAB) reverse engineering.

Fast Unity AssetBundle extractor & modder for Python with UABE Avalonia parity and Android/Termux support

jadx plugin: undo hashCode-switch control-flow flattening (CFF deobfuscator)

Inject code into IL2CPP game processes to enable live metadata dumping, memory editing, method invocation, and Lua scripting via Zygisk.

Automated CloudStream .cs3 decoder and Kotlin metadata archive maintained by Diwas Khatri

Reverse engineering skill for Claude Code and other AI coding agents.

No description supplied by the upstream repository.

An AI agent on your phone: use natural language to drive 103 built-in tools that operate directly on the device, covering files, apps, packet capture, APK decompilation, Linux environments, and UI automation. Includes a built-in MCP client and MCP server.

An external analysis and SDK-generation tool for Unreal Engine on Android, supporting AutoFix, dependency ordering, field patching, and ProcessEvent wrappers.

This repo contains CTF challenges that I've played and their write-ups.

a android app to convert dex and jar and smali easily

AI-Powered Mobile Application Penetration Testing Tool

Bytecode-level Android APK diffing for reverse engineers — matches classes and methods across R8/ProGuard-obfuscated builds by structure, not names

Offline revival kit for Assassin's Creed Identity (Android): patcher + mission builder. Boot to Animus or Firenze with working enemy AI.

APK Static Toolkit | Android Package Kit (APK) Analysing Toolkit

In this repo, I document the things I've learnt in Android Security and Android Reverse Engineering.

Very simple android native library that will pause the app process when the library is loaded.

Extensible jadx plugin for dalvik emulation.

CTF Writeups

Claude Code skill to support Android app's reverse engineering. (Safe)

SSLBPS is an Android security research project for analyzing APK structure, manifests, Smali code, certificate trust models, and mobile security controls. Built for educational analysis, defensive research, software auditing, and reverse‑engineering learning. Perfect for understanding app architecture, code review, and secure development practices

Time to get rekt! Rekt is an app rekking tool for Android & iOS apps

Build and unpack Android Dynamic Partition super.img images from OEM super_def.json layouts using lpmake.

A comprehensive penetration testing toolkit for Flutter applications. Includes SSL pinning bypass techniques, Frida scripts, static/dynamic analysis guides, automated security scanning tools, and real-world case studies. Everything you need to assess Flutter app security on Android & iOS

react-native-vulnerability-scanner – A Python tool to analyze React Native APKs for vulnerable npm dependencies by scanning modules.json. It checks packages using Snyk's vulnerability database and provides a detailed security report. 🔍 Find vulnerable dependencies in React Native apps easily!

A CLI that wraps apktool + jadx into a single decompile pipeline

Android APK static analysis pipeline with a Claude agentic triage layer — APKLeaks + JADX + MobSF → severity-ranked report

An efficient and user-friendly Java debugging tool.（JDK8）

d4rkc0de Android CTF

Android APK security analysis tool with jadx MCP integration for comprehensive vulnerability detection

A practical guide and custom toolkit for rebuilding Unity + Utage visual novels in Ren'Py and packaging them as Android APKs, with substantial AI-agent involvement and implementation led by the author.

Docker container and scripts to give you a contained env and tools

Secure local-only Android app for UseeEar-compatible ear hygiene cameras.

APK Reverse Engineering & Editor Suite for Android - Open, analyze, modify, rebuild, and sign APKs

Map essential cybersecurity and reverse engineering skills with this structured learning path.

Reverse-engineered BLE keyboard controller for a Wonder Toys RC car.

App_Fast_Forensic is intelligent app forensics software.

JADX plugin for bookmarking code lines with emoji markers, editor gutter tracking, and quick navigation.

Advanced Android Security, Threat Hunting & Digital Forensics Framework for authorized device auditing, APK analysis, YARA scanning, evidence-based threat assessment, and mobile DFIR.

Three mobile forensics examinations: iOS full filesystem analysis (Cellebrite), legacy mobile device artifact recovery (Autopsy/FTK), and Android APK static & dynamic analysis (JADX/PCAPdroid).

Extract GraphQL schema from Android APKs — when introspection is disabled

A headless jadx engine for LLM agents. Answers structured questions about an APK, DEX or JAR over a plain CLI. No GUI, no daemon.

Sony ILCE-6000 (A6000) firmware research — official firmware unpacking, raw NAND dump methodology via pmca updatershell, partition verification, and Android userdata discovery

DemoPlugin For Jadx

Tracks WhatsApp beta builds for Android & macOS and reports what changed between versions — new, reworded and removed UI strings plus code-surface diffs. Runs entirely on GitHub Actions with Telegram notifications.

🔒 Comprehensive Android security research toolkit for ethical hacking and penetration testing

Web APK RASP scanner: decompile (jadx/apktool), endpoint discovery, DEX/native checks, export PDF/CSV.

An AI-powered malware detection system that uses machine learning and static analysis to identify malicious Android applications. It extracts permissions, API calls, and bytecode features from APKs and classifies them using a trained Random Forest model with high accuracy on the Drebin dataset.

A sample step by step decompile apk file to Java(Gradle project)

Android RASP & environment inspection toolkit in Kotlin + Jetpack Compose. Detects Frida, root, LSPosed, virtual apps, hooking, DCL, ADB, emulators & SSL pinning — plus a built-in CTF lab with jadx/Frida flags, hints, and an auto-solver. Zero dependencies.

A high-performance APK static analysis tool for secret detection.

Static analysis for Android/iOS packages (.apk, .aab, .xapk, .ipa) Extracts the package, runs 15 analyzers, and reports security findings with a weighted score.

This utility is specifically designed for reverse engineering Android applications and includes a range of useful features and tools.

A methodology for reverse engineering protected Android APKs: dynamic unpacking → decompilation → native layer → cryptographic verification, with a collection of Frida scripts. Contains only original methodology and independently developed scripts.

Emulator for Renesas SH705x (SH-2E) engine ECUs: runs Denso firmware unmodified on a simulated engine, with a live calibration-map viewer, on Windows and Android

This repository is a walkthrough for Android Reversing, featuring community-made challenges by fellow learners who just started a bit before us.

Mobile Security Intelligence Platform - Transform mobile app security scans into actionable intelligence with static/dynamic analysis, framework detection, and OWASP MASVS mapping

Relay is an Android workstation for Windows that combines device control, screen mirroring, ROM compatibility analysis, diagnostics, and APK inspection in a single interface.

A Lakota language dictionary in SFM/MDF format extracted from abandonware for the Lakota people.

Free Tools Index aims to track and share free penitration testing and blue team tools.

Dex Decompiler analyzes the contents of Android APK files and makes their DEX (Dalvik Executable) code readable. It is particularly useful for digital forensics, security analysis, and reverse engineering.

App reverse engineering & automation | Private API extraction | Web scraping | Bots

Automatic Google Play (apk) to Git repository extractor cron script

Currently, the project is being heavily refactored and is therefore in an unusable state. Android RE library for static forward and backward slicing

⚡ An interactive field guide & security portal for Android Security Researchers, Bug Bounty Hunters, and Penetration Testers. Features 22+ indexed tools, CVSS estimator, Frida/Objection hooks, auto recon script, and framework reversing workflows.

Self-contained Mobile & IoT SAST/DAST/pentest toolkit: MobSF + Frida + objection + mitmproxy + rooted emulator, as a desktop app, CLI and MCP server.

Kuch toh gadbad hai: static analyser for Indian scam APKs (fake RTO e-challan, PM-Kisan, bank-KYC apps). Finds OTP theft, call forwarding and Telegram/C2 exfiltration. Explains in English and Hindi.

CLI for WeChat mini-program recovery and Android APK static analysis, with code, assets and offline reports.

IL2CPP Dumper for Android - Unity games to clean C# (classes, hex offsets, RVA). Memory mode (root), metadata v22-v31 incl. Unity 6. 100% on-device C++ NDK core.

Experimental, AI-assisted CLI for mobile security testing — Android, iOS & the networks they run on. Lab/learning use only.

BLE protocol reconnaissance on an undocumented smartwatch, and the upstream Gadgetbridge contributions it led to — device drivers, bio-impedance and body composition, dashboard widgets, framework changes. Diagnostics tooling, ADR and licensing audit included. Full merge record with commit references.

Skyscanner Scraper gets you Skyscanner data ⚡ fast, 🎯 100% accurate and 🔍 ridiculously detailed — as clean JSON. 1,000 free calls/month ❤️

On-device APK analyzer and decompiler for Android — custom AXML/ARSC/DEX parsers, on-device jadx, and a Shizuku-powered intent fuzzer. No root, no PC, no Termux.

A modded version of the game apk I made a couple of years ago

VaultPass is an intentionally vulnerable Android APK for authorized reverse engineering training. Practice decompiling, reading Smali, patching login/root/premium checks, then rebuilding and signing APKs in a safe lab setup while learning why client-side-only security controls fail.

AI agent skills for debug APK security testing, Flutter/Kotlin review, ADB live testing, and authorized staging web/API assessments with reproducible evidence.

Fraud-APK & Stalkerware Forensic Workbench for cyber cells / law enforcement. Court-ready evidence: hash-chained acquisition, chain-of-custody, static analysis, YARA + behavioral detection, weighted verdicts, PDF + STIX/CSV/YARA reporting. 0% false positives, 0% missed on 43-sample validation.

Advanced mobile application reverse engineering and mobile security research focused on authentication workflows, backend communication analysis, networking stack reconstruction, and encrypted local storage.

Interactive AArch64 learning simulator for registers, pointers, stack frames, control flow, and Linux syscalls.

Static analysis report for the preview APK of LazyAlarm, covering functional architecture, component inventory, permission analysis, and signing information, with icons, flowcharts, and structural diagrams.

Static analysis toolkit for Android APK security testing — detects hardcoded secrets, manifest misconfigurations, and native library vulnerabilities

Reverse-engineered source code, resources, and documentation for the Transfermóvil Android client.

A personal Python toolkit for preparing Android APKs for authorized HTTPS inspection and certificate-pinning analysis.

Automated Android APK malware analysis pipeline — MobSF, OWASP Mobile Top 10, VirusTotal, Flask dashboard, PDF report generation

APK Static Analyzer

Open infrastructure for verifiable Android supply-chain audits, reproducible builds, AOSP testing, and signed evidence reports.

An automated, deterministic, and reproducible reverse engineering framework for Android hardened applications. Features Unidbg-based cryptographic empirical analysis, JNI mapping recovery, and structured threat modeling for DTC-protected native libraries. For academic & responsible disclosure purposes only.

Android app privacy-compliance audit portfolio: static keyword scanning, dynamic Frida hooks, PCAPdroid traffic evidence, and LLM-assisted compliance assessment. Compares commercial and open-source samples, with a bilingual README primarily in Chinese.

Android security assessment of Beetlebug: hardcoded secrets, insecure storage, SQLi, open Firebase, Logcat leaks, exported activity

Cross-platform, dependency-free CLI APK decompiler & inspector. Pure-Python core (manifest decode, info, DEX, security scan); full Java/smali via jadx/apktool.

🐦‍🔥 Android Service Attack Surface Analyzer - Automated reconnaissance and attack command generation

Hands-on Android reverse engineering and network security CTF with a native (JNI) crypto layer, AES-256-GCM E2EE, and a serverless Node.js backend.

Guide to Android app security analysis, reverse engineering & pentesting

Open-source AI-powered Android reverse engineering platform — decompilation, symbol indexing, evidence-based analysis reports.

Lightweight automation orchestration framework for rapid APK malware analysis with YARA signatures, obfuscation detection, and hybrid code scanning

Hunt URLs , IP, Base64 encoded C2 in Smali files with 95% reduction of false positives

A practical Android mobile penetration testing knowledge base covering static analysis, dynamic instrumentation, APK analysis, emulator setup, network testing, and security assessment workflows.

Android app (Java) for collecting network traffic, APK, and permission data with a user-friendly UI.

REST API backend for collecting and serving malware-related data between Android app and MongoDB.

🧪 Experimental Web GUI for real-time APK decompilation using JADX, Docker, Flask, and SocketIO.

Public CLI and Agent Skill distribution for APK Canary

SOYO Mobile App – API & Security Analysis

Coursework in reverse engineering and malware analysis, covering deobfuscation, sandbox detection, memory inspection, network interception, and Android instrumentation

Android security labs 4-5: Frida, root detection, APK analysis, secure programming, and original reports.

Android APK Static Security Analysis Tool using Python, APKTool and JADX

APKLens — Browser-native Android APK security & architecture analyzer. Decode manifests, scan permissions, analyze DEX bytecode, detect secrets & OWASP risks. 100% local, zero upload.

Frida trainer for SpacePeng game and code examples.

MCP server that hands your AI agent signature-verified Android APKs from RuStore — by package name alone. No browser, no account, no API key.

Analysis of cryptographic routines found within "Perenio Smart: Home and Office" Android application, as well as reconstructing Perenio Peifc01 IP camera's RTP over UDP video stream from a Wireshark packet capture

Static security analysis of an Android APK using Kali Linux, APKTool, AndroidManifest and Smali code review.

Android Studio plugin that turns Frida-style terminal stack traces into clickable source links

An evidence-layer APK scanner: in the snow, every passage leaves a trace. Statically scans Android APKs and produces SDK, permission, and component findings with evidence chains (md/json/.pcc.json).

No description supplied by the upstream repository.

Static Android Security Analyzer for APK decompilation, manifest analysis, exported component discovery, network security assessment, and report generation.

👁️ AI-assisted static file intelligence that unmasks scam APKs, malicious EXEs and weaponized PDFs without ever running them. VirusTotal + abuse.ch + RDAP.

No description supplied by the upstream repository.

Android Reverse Engineering - King God Castle

Enhancing security in messaging applications — E2E encryption, Signal protocol analysis with Wireshark, Android APK security audit — 8 deliverables + 2 labs

Attack-surface map for Android apps, built on JADX output

Agentic APK threat-analysis pipeline (in progress). Androguard static analysis (APKs never executed) runs in a containerised AWS Lambda worker (ECR, S3, IAM); ML anomaly scores + SHAP feed a LangGraph multi-agent system on Claude that cross-checks the app's permissions and behaviour against its stated claims. FastAPI backend + Telegram bot.

🔍 Technical analysis of "悦动空间" Android spyware - Exfiltrates contacts, SMS & images to C2 servers (156.224.170.230) | SHA-256: a1feefa...

On-device agentic AI security scanner — decompiles APK/APKS/XAPK and live-renders websites; Gemini gives a definitive verdict. Website: https://saurabh-gzp.github.io/Sentinel-AI-Security-Scanner/

Advanced Android VAPT Framework — Static + Dynamic | By Muthuselvan Nadar

Decompiled source of the GeneralMikve mikvah payment-terminal firmware (com.otot.mikve.general). Source-only; credentials scrubbed; no APK.

Blutter in a container for quick Flutter decompilation on any machine (Linux/MacOS).

Advanced Android APK Security Research Tool - Memory-optimized framework for ethical security analysis with integrated research capabilities

Static decryptors and unpackers for packed Android APKs: XOR/AES dropper payloads, string oracles, split-array keys, dpt-shell unpacking, manifest repair. One CLI, builder defaults included.

No description supplied by the upstream repository.

Advanced Termux Toolkit for Android. Install, manage, update and analyze security tools with a clean interactive interface.

A comprehensive application to find vulnerabilities in APK files before delivery.

Source code recovered by decompiling Brix Launcher (com.brix.brixlauncher): a compilable project with 839 files and 0 errors.