Ostorlab ostorlab.co

Ostorlab free version scans apps in Android Play Store, iOS App Store, and Huawei AppGallery

AFL-based Fuzzing for Java with Kelinci, 2017 dl.acm.org

NowSecure Lab Automated nowsecure.com

Enterprise tool for mobile app security testing for both Android and iOS mobile apps. Lab Automated features dynamic and static analysis on real devices in the cloud to return results in minutes. Not free

Directed Greybox Fuzzing, 2017 dl.acm.org

ViaLab Community Edition nowsecure.com

SAGE: whitebox fuzzing for security testing, 2012 dl.acm.org

IntentFuzzer nccgroup.trust

IntentSniffer nccgroup.com

Taint-based directed whitebox fuzzing, 2009 dl.acm.org

Android DBI framework mulliner.org

Grammar-based whitebox fuzzing, 2008 dl.acm.org

MobiSec Eacus mobiseclab.org

Feedback-directed random test generation, 2007 dl.acm.org

Mobile Malware Sandbox mobilemalware.com.br

CodeAlchemist: Semantics-Aware Code Generation to Find Vulnerabilities in JavaScript Engines, 2019 daramg.gift

Android Malware Analysis Toolkit mobilemalware.com.br

(Linux distro) Earlier, it used to be an online analyzer

IMF: Inferred Model-based Fuzzer, 2017 daramg.gift

Ifuzzer: An evolutionary interpreter fuzzer using genetic programming, 2016 cs.vu.nl

Taming compiler fuzzers, 2013 cs.utah.edu

Mobile Security Reading Room mobile-security.zeef.com

A reading room that contains well-categorized technical reading material about mobile penetration testing, mobile malware, mobile forensics, and all kinds of mobile security-related topics

Evaluating Fuzz Testing, 2018 cs.umd.edu

Mobile-Sandbox mobile-sandbox.com

Send Hardest Problems My Way: Probabilistic Path Prioritization for Hybrid Fuzzing, 2019 cs.ucr.edu

Mobile app insight mobile-app-insight.org

Reinforcement Learning-based Hierarchical Seed Scheduling for Greybox Fuzzing, 2021 cs.ucr.edu

Appie manifestsecurity.com

Appie is a software package that has been pre-configured to function as an Android Pentesting Environment. It is completely portable and can be carried on a USB stick or smartphone. This is a one-stop answer for all the tools needed in Android Application Security Assessment…

Jigsaw: Efficient and Scalable Path Constraints Fuzzing, 2022 cs.ucr.edu

Android Malware Genome Project malgenomeproject.org

contains 1260 malware samples categorized into 49 different malware families, free for research purposes.

STOCHFUZZ: Sound and Cost-effective Fuzzing of Stripped Binaries by Incremental and Stochastic Rewriting, 2021 cs.purdue.edu

BitBaan malab.bitbaan.com

DIANE: Identifying Fuzzing Triggers in Apps to Generate Under-constrained Inputs for IoT Devices, 2021 conand.me

Mercury labs.mwrinfosecurity.com

Call-Flow Aware API Fuzz Testing for Security of Windows Systems, 2008 computer.org

Koodous koodous.com

Performs static/dynamic malware analysis over a vast repository of Android samples and checks them against public and private Yara rules.

HouseFuzz: Service-Aware Grey-Box Fuzzing for Vulnerability Detection in Linux-Based Firmware, 2025 computer.org

Kharon Malware Dataset kharon.gforge.inria.fr

7 malware which have been reverse-engineered and documented

CHIMERA: Fuzzing P4 Network Infrastructure for Multi-Plane Bug Detection and Vulnerability Discovery, 2025 computer.org

Android Devices Security Patch Status kb.androidtamer.com

Stateful Analysis and Fuzzing of Commercial Baseband Firmware, 2025 computer.org

Droid Intent Data Flow Analysis for Information Leakage insights.sei.cmu.edu

Fuzz-Testing Meets LLM-Based Agents: An Automated and Efficient Framework for Jailbreaking Text-To-Image Generation… computer.org

Immuniweb immuniweb.com

. Does an "OWASP Mobile Top 10 Test", "Mobile App Privacy Check", and an application permissions test. The free tier is 4 tests per day, including a report after registration

Predator: Directed Web Application Fuzzing for Efficient Vulnerability Validation, 2025 computer.org

Crowdroid ida.liu.se

unable to find the actual tool

RGFuzz: Rule-Guided Fuzzer for WebAssembly Runtimes, 2025 computer.org

habo habo.qq.com

10/day

FirmRCA: Towards Post-Fuzzing Analysis on ARM Embedded Firmware with Efficient Event-based Fault Localization, 2025 computer.org

Android Security Reward Program google.com

SyzGen++: Dependency Inference for Augmenting Kernel Driver Fuzzing, 2024 computer.org

LLMIF: Augmented Large Language Model for Fuzzing IoT Devices, 2024 computer.org