Android Security
233 items from ashishb/android-security-awesome ★9,747
-
Android Linux Kernel modules github.com
-
Android Mobile Device Hardening github.com
AMDH scans and hardens the device's settings and lists harmful installed Apps based on permissions.
-
Android Framework for Exploitation github.com
-
ProbeDroid github.com
Dynamic Java code instrumentation
-
Spectre github.com
Radio frequency scanner with recon and offensive capabilities. Monitors cellular, Wi-Fi, Bluetooth LE, and GNSS on-device, with a BLE GATT inspector, iBeacon broadcaster, and local-network discovery.
-
HacknDroid github.com
A tool designed to automate various Mobile Application Penetration Testing (MAPT) tasks and facilitate interaction with Android devices.
-
Android_application_analyzer github.com
The tool is used to analyze the content of the Android application in local storage.
-
Redexer github.com
apk manipulation
-
Android security-related presentations github.com
-
RiskInDroid github.com
A tool for calculating the risk of Android apps based on their permissions, with an online demo available.
-
QuarksLab's Android Fuzzing github.com
-
Android OpenDebug github.com
make any application on the device debuggable (using Cydia Substrate).
-
Noia github.com
Simple Android application sandbox file browser tool
-
FlutterTap github.com
Zygisk module that bypasses BoringSSL certificate verification inside libflutter.so and redirects the traffic of selected Flutter apps to a proxy. Persistent across reboots, so it needs no Frida session, no cable, and no listening port.
-
Vezir Project github.com
Virtual Machine for Mobile Application Pentesting and Mobile Malware Analysis
-
DroidGround github.com
A flexible playground for Android CTF challenges
-
Madrolyzer github.com
extracts actionable data like C&C, phone number etc.
-
Fino github.com
-
odex-patcher github.com
Run arbitrary code by patching OAT files
-
Mira github.com
Runtime protection analysis platform for third-party Android and iOS apps, enabling AI to use host-app-side shell, Java, Native, and Frida capabilities for environment risk detection and hardening validation.
-
MPT github.com
MPT (Mobile Pentest Toolkit) is a must-have solution for your Android penetration testing workflows. This tool allows you to automate security tasks.
-
PAPIMonitor github.com
PAPIMonitor (Python API Monitor for Android apps) is a Python tool based on Frida for monitoring user-selected APIs during app execution.
-
-
FSquaDRA github.com
a tool for detecting repackaged Android applications based on app resource hash comparison.
-
Mem github.com
Memory analysis of Android (root required)
-
Radamsa Fuzzer github.com
-
Vuldroid github.com
-
APKdevastate github.com
Advanced analysis software for APK payloads created by RATs.
-
CFGScanDroid github.com
Scans and compares the CFG against the CFG of malicious applications
-
Dexmod github.com
a tool to exemplify patching Dalvik bytecode in a DEX (Dalvik Executable) file and assist in the static analysis of Android applications.
-
An Android port of the Melkor ELF fuzzer github.com
-
NullKia github.com
Comprehensive mobile security framework supporting 18 manufacturers with baseband exploitation, cellular security, TEE/TrustZone research, and BootROM extraction tools.
-
ConDroid github.com
Performs a combination of symbolic + concrete execution of the app
-
DroidRA github.com
-
AuditdAndroid github.com
Android port of auditd, not under active development anymore
-
dockerfile/androguard github.com
-
Aurasium github.com
Practical security policy enforcement for Android apps via bytecode rewriting and in-place reference monitoring.
-
AndroFuzz github.com
-
emacs syntax coloring for smali files github.com
-
DroidAnalytics github.com
incomplete
-
Aptoide downloader (Node) github.com
download apps from Aptoide third-party Android market
-
StaDynA github.com
a system supporting security app analysis in the presence of dynamic code update features (dynamic class loading and reflection). This tool combines static and dynamic analysis of Android applications in order to reveal the hidden/updated behavior and extend static analysis…
-
Appland downloader (Node) github.com
download apps from Appland third-party Android market
-
ARMANDroid github.com
ARMAND (Anti-Repackaging through Multi-pattern, Anti-tampering based on Native Detection) is a novel anti-tampering protection scheme that embeds logic bombs and AT detection nodes directly in the apk file without needing its source code.
-
Mobix github.com
Authorized Android pentest lab: Frida SSL-pinning/root-detection bypass chain, mitmproxy traffic capture with automatic IDOR flagging, a web dashboard, and a 36-tool MCP server so a Claude Code agent can run the whole scan-to-findings loop itself.
-
Damn Vulnerable Mobile App (DVMA) github.com
-
Smali CFG generator github.com
-
ZjDroid github.com
, fork/mirror
