Apps · Android.

Dex to Java decompiler

AirPods liberated from Apple's ecosystem.

A tool for reverse engineering Android apk files

Mobile Security Framework (MobSF) is an automated, all-in-one mobile application (Android/iOS/Windows) pen-testing, malware analysis and security assessment framework capable of performing static and dynamic analysis.

A Java 8+ Jar & Android APK Reverse Engineering Suite (Decompiler, Editor, Debugger & More)

The OWASP Mobile Application Security Testing Guide (MASTG) is a comprehensive manual for mobile app security testing and reverse engineering. It describes technical processes for verifying the OWASP Mobile Security Weakness Enumeration (MASWE) weaknesses, which are in alignment with the OWASP MASVS.

📱 objection - runtime mobile exploration

The Ultimate Open-Source Security Arsenal for Hackers, Enterprises, and AI Agents

Android Full-Stack Device Control Platform: WebRTC/H.264 remote desktop, UI/OCR/image-matching automation, one-click MITM, built-in Frida, proxy/VPN/frp/P2P networking, MCP/Agent, 160+ APIs, designed for multi-device clusters and engineered deployments.

Claude Code skill to support Android app's reverse engineering

Reverse engineering and pentesting for Android applications

Scanning APK file for URIs, endpoints & secrets.

🔥🔥 hooker is a Frida-based reverse engineering toolkit for Android. It offers a user-friendly CLI, universal scripts, auto hook generation, memory roaming to detect activities/services, one-click SOCKS5 proxy setup, Frida JustTrustMe, and BoringSSL unpinning for all apps.

Unofficial Galaxy Buds Manager for Windows, macOS, Linux, and Android

🤖 A CLI application that automatically prepares Android APK files for HTTPS inspection

the fastest and most powerful android decompiler(native tool working without Java VM) for the APK, DEX, ODEX, OAT, JAR, AAR, and CLASS file. which supports malicious behavior detection, privacy leaking detection, vulnerability detection, path solving, packer identification, variable tracking, deobfuscation, python&java scripts, device memory extraction, data decryption, and encryption, etc.

Open-source, cross platform Qt6 based IDE for reverse-engineering Android application packages. It features a friendly IDE-like layout including code editor with syntax highlighting support for *.smali code files.

Android virtual machine and deobfuscator

👋🧩Template repository for ReVanced Patches

Android Reverse-Engineering Workbench for VS Code

Makes reverse engineering Android apps easier, automating repetitive tasks like pulling, decoding, rebuilding and patching an APK.

💉 ReVanced Patcher used to patch Android applications

Plugin for JADX to integrate MCP server

Flutter Reverse Engineering Framework

Flutter Mobile Application Reverse Engineering Tool

Advanced Fuzzing Library - Slot your Fuzzer together in Rust! Scales across cores and machines. For Windows, Android, MacOS, Linux, no_std, ...

Hand-crafted Frida examples

ASC is a super FAST and lightweight Android decompiler designed for Agents/Mobile Researchers.

Powerful android apk editor - aapt/aapt2 independent

Mobile Edge-Dynamic Unified Security Analysis

Frida scripts to rewrite mobile applications at runtime to directly MitM all HTTPS traffic

Reverse engineering tools for Android

A Frida based tool that traces usage of the JNI API in Android apps.

Android App Reverse Engineering Workshop

FridaContainer brings together popular online and custom-written Frida scripts to improve reverse engineering efficiency, with modular Frida scripts and Java/JNI tracing.

🔐 Run frida-server on boot with Magisk, always up-to-date

A runtime mobile application analysis toolkit with a Web GUI, powered by Frida, written in Python.

The repo contains a series of challenges for learning Frida for Android Exploitation.

A reverse engineering tool for decompiling and disassembling the React Native Hermes bytecode

Reversense (Dexcalibur2) is a fully rewriting and rethinking of Dexcalibur. Reversense is a binary intelligence platform that automates the reverse engineering of mobile and embedded applications.

A Virtual Machine For Assessing Android applications, Reverse Engineering and Malware Analysis

Tool to decompile & extract Android Dex bytecode from Vdex files

hook C# method at runtime without modify dll file (such as UnityEditor.dll), works on Windows, Mac, Android il2cpp(armv7a and armv8a)

An easy-to-use, high-performance dex deobfuscation library.

Remove Certificate Pinning from APKs

Powerful Frida repackaging tool for iOS and Android. Easily modify Frida signatures to enhance stealth and bypass detection. Streamlines reverse engineering and security testing.

One-click tool for quickly decompiling APK/AAR/DEX/JAR files, powered by jadx, dex2jar, and enjarify.

A Frida-based Android hooking framework that provides many features Frida does not support itself, making Android hooking simple and accessible to everyone.

The world's fastest apk (android)/java open source decompiler

🔥 Decompile APK

MCP server for JADX-AI Plugin

Code repository for the book Advanced Practical Web Scraping Reverse Engineering.

Disassemble any file on Android, including .so (NDK, JNI), Windows PE (EXE, DLL, SYS, etc.), Linux binaries and libraries, and even pictures, audio, and other files for fun. A Capstone-based Android disassembler and reversing app for Android NDK shared libraries, Windows binaries, and more.

Andromeda - Interactive Reverse Engineering Tool for Android Applications

APK/DEX detector for Windows, Linux and MacOS.

Multiplatform and Feature-rich Port based on PSX decompilation of Silent Hill 1 made with Claude and Psycross. Still in beta and is in active development.

Ideas and experiences in reverse engineering app parameters, focused on Android.

Find JNI function signatures in APK and apply to reverse-engineering tools.

An intelligent reverse engineering and AI-assisted analysis tool for HarmonyOS NEXT (HAP/APP/ABC), Android (APK/AAB), iOS (IPA), and native PE/ELF/Mach-O binaries.

A MCP Server for APK Tool (Part of Android Reverse Engineering MCP Suites)

A tool that helps you work with frida easily for Android platform

Hermes Bytecode Reverse Engineering Tool (Assemble/Disassemble Hermes Bytecode)

A lightweight emulation framework for emulating cryptographic algorithms in iOS executables and libraries.

Demo of a complete hot-update solution for Unity Android IL2CPP apps. Update the Unity path in build_demo_apk, then run it to rebuild the patch and APK in one step. The libunity file is not hot-updated, so this solution does not apply if the Unity version changes.

C++ library for runtime memory patching, scanning, dumping, and module (ELF / Mach-O) introspection, targeting Android and iOS.

LockKnife: The Ultimate Android Security Research Tool. A unified TUI workspace and headless CLI for deep Android security research, built for researchers and hackers. Powered by Python orchestration and a Rust-accelerated core, enabling AI agent–driven hacking, credential recovery/cracking, APK analysis, intelligence gathering, runtime inspection.

An Android reverse engineering skill tailored for Codex. It supports decompiling APK, XAPK, JAR, and AAR files within Codex sessions and uses jadx and Fernflower/Vineflower to map out the Manifest, package structure, network layer, and call chains. It helps extract interfaces, URLs, authorization headers, tokens, and signing logic, and provides static reconnaissance methods before Frida, traffic capture, and JNI/SO analysis. Suitable for interface analysis, security research, and authorized testing.

OpenHarmony reverse engineering toolkit with preliminary decompilation support.

Damai Maoyan Piaoxingqiu ticket grabbing tech community | Android reverse engineering Frida hook ticket monitor | QQ 955767910

A pattern based Dalvik deobfuscator which uses limited execution to improve semantic analysis

A classic, traditional, even old-fashioned Android decompilation tool. Make Android-killer Great Again!

Work in progress...

Delve into a comprehensive checklist, your ultimate companion for Android app penetration testing. Identify vulnerabilities in network, data, storage, and permissions effortlessly. Boost security skills with essential tools and user-friendly guides. Elevate Android security seamlessly!

Deobfuscator for Android Application

Software security engineer skills checklist

Unity Engine C++ API for Mono/il2cpp. Supports Windows, Android, Linux, iOS, and HarmonyOS. Game cheating.

Automated tool for patching APKs to enable the use of Frida gadget by downloading the library and injecting code into the main activity.

Process Android Memory Dumper

Intentionally vulnerable Android application.

Native port of Metroid Prime (GameCube) for Linux, Windows and Android, built from the PrimeDecomp decompilation. No emulator, no game assets included: bring your own disc image.

📖 Learn Android reverse engineering systematically from zero to one, with a fun, engaging, beginner-friendly approach!

Backup of technical articles on Android, JavaScript, assembly, and related reverse engineering.

BootStomp: a bootloader vulnerability finder

Build anti-detection Frida server from source. ~90 patches covering 16 detection vectors, weekly auto-builds with random names.

Mobile penetration testing android & iOS command cheatsheet

Android DEX → Java decompiler in Rust, built for speed — full apps in seconds, queries in milliseconds. Progressive analysis, javac-verified output, every DEX version, multi-dex & XAPK/APKS/APKM containers.

Web-based Frida framework and toolkit for Android & iOS penetration testing, mobile security, and dynamic analysis, featuring AI-assisted Frida script generation.

Modding il2cpp games by classes, methods, fields names on Android.

The most downloaded APK analysis app on Google Play. Detailed reports of every app on your device. No root, no ads, nothing leaves the phone.

Analysis scripts for Ghidra to work with Android NDK libraries.

Hijack Zygote to inject a shared library before an app starts.

Burp proxy flutter apps

🍹A static injector of dynamic library for application (android, iphoneos, macOS, windows, linux)

Android Security Resources.

QuadraInspect is an Android framework that integrates AndroPass, APKUtil, and MobFS, providing a powerful tool for analyzing the security of Android applications.

:detective: Dart / Flutter VM snapshot analyzer

Engine used by jnitrace to intercept JNI API calls.

A tool to help you intercept encrypted APIs in iOS or Android apps

PC, Android, iOS and macOS port of the ICO (PS2) decompilation (nathanialf/ico): Windows, Linux, Steam Deck, Android, iPhone via LiveContainer and Apple-silicon Mac (contributed). Contains no game data.

Flutter SSL Pinning Bypass Tool for Android & iOS — works on any Flutter version without pattern databases

Scan for secrets, endpoints, and other sensitive data after decompiling and deobfuscating Android files. (.apk, .xapk, .dex, .jar, .class, .smali, .zip, .aar, .arsc, .aab, .jadx.kts).

Android pentesting toolkit with REST API, web terminal, screen mirroring, Frida, and full device control from your rooted device

Android reverse-engineering tool / smali editor

SDK providing threat detection and security monitoring for Android devices. Shield your app with free RASP for Android. Detect reverse engineering, root (Magisk), jailbreak, Frida, emulators, bots, tampering and integrity issues, obfuscation, VPN usage, malware, and monitor device identification and fingerprint.

Frida Android utilities

A multi-decompiler standalone desktop GUI supporting JD-Core V0 & V1, CFR, Procyon, Fernflower, Vineflower & Jadx

Modular Windows/Android toolkit for Arknights: Endfield: BEM model mods and creator tools, native plug-ins, MMD playback, camera/UI controls, character voices, title-screen customization, and PC combat/gacha tools.

🛠 Tools and scripts to manipulate Android APKs

A small template for Android Hooking with Substrate (Or Dobby. See branches). (Includes a mod menu written in Java)

Interact with Frida devices, processes, and scripts directly from your browser.

Bypass Facebook SSL pinning on Android devices.

Django application that performs SAST and Malware Analysis for Android APKs

More reliably hijacks Zygote to inject shared libraries before an app starts.

Portable frida injector for rooted android devices.

DeepSeek Harness integrated security analysis plugin, covering Android, Web, Native, Protocol, Malware, and AI-Security (9 bundles and 1 preset).

Ablation is an autonomous reverse engineering system.

Dump Il2Cpp unprotected executable ELF and metadata from process memory

HarmonyOS NEXT decompiler

Your all-in-one toolkit for reverse engineering: Smali Grammar, DexRepair, Flutter Analysis and much more...

Obfu[DE]scate is a de-obfuscation tool for Android APKs that uses fuzzy comparison logic to identify similarities between functions, even if they have been renamed as part of obfuscation. It compares two versions of an APK and generates a mapping text file and an interactive HTML file as outputs!

UE4 dump frida script

Decompile APK/IPA To UnityProject

a few android analysis tools, jni trace by native hook, Java Object Format to Json for Xposed and Frida

👊 Discord, your way. Revenge is a client modification for Discord Android.

Assemblies hotfix with unity addressable , for windows and android , both mono and IL2CPP scripting backend,IL2CPP hotfix powered by wolong(HybridCLR)

Decompile and Recompile android aplication use termux without openjdk installed

Modern offline-first Application Security Intelligence Platform for Android, iOS, Flutter and React Native with attack-chain analysis, explainable findings, source exploration, AI-assisted investigation and professional reporting.

Fridax enables you to read variables and intercept/hook functions in Xamarin/Mono JIT and AOT compiled iOS/Android applications.

Automation of some MAPT activities and interaction with the mobile Android device.

container/virtualization/sandbox apps on android

A collection of Frida scripts.

A kernel-assisted shared-library injector for Android. Loads any .so into a target process without ptrace, in-process dlopen, or visible traces in /proc/<pid>/maps. GKI 2.0 (Android 12-16).

Android Universal Anti-Bypass Framework - Root, SSL Pinning, Emulator & Debug Detection Bypass

A tool for automating interactions with Android devices - including ADB, AndroGuard, and Frida interactivity.

Katalina is like Unicorn but for Dalvik bytecode. It provides an environment that can execute Android bytecode one instruction at a time.

A Frida toolkit focused on Android reverse engineering. Manages Frida environment versions and wraps commonly used low-level utilities for the Agent side, with MCP support. The code is currently developed and maintained mainly by AI.

A Python coding framework for analyzing Unity applications.

As a bug hunter, are your bug bounty reports getting rejected because you don't use a "malicious" Proof of Concept (PoC) app to exploit the vulnerabilities? I've got you covered!

SQL for Android apk and dex files

An advanced DEX editor for Android.

Automated Frida hook generation with JEB

TangGo is a comprehensive testing platform developed in China by Wutang Information Technology Co., Ltd. using years of penetration-testing experience. It provides software testers and cybersecurity professionals with powerful, easy-to-use tools and a collaborative workspace, primarily for website functional testing, security testing, and security assessment.

Tools for reverse-engineering and description of new TUYA API sign algorithm

Android Unpacking Automation using Corellium Devices

A runnable jar that generate Javascript hook script to hook Android classes.

Mobile application security testing toolkit for Android, iOS & Flutter — ready-to-use FRIDA scripts (SSL pinning, root & anti-debug bypass, crypto monitoring), a full testing methodology, and hands-on guides.

Android interception tool for component communication and attack-surface mapping

smali and baksmali - release artifacts for all versions (v3 by @google, v2 and v1 by @JesusFreke)

[WIP] Simple mobile applications sandbox file browser tool. Powered with [frida.re](https://www.frida.re).

Jarida (Jadx + Frida) is a Jadx GUI plugin that lets you trace and optionally patch Java method return values at runtime using Frida, directly from Jadx’s decompiled view.

Android reverse engineering entirely on-device. Radare2 binary analysis, 8 Java decompilers, Flutter & Unity il2cpp support.

Zygisk module that intercepts Flutter app traffic — redirects to a proxy and bypasses BoringSSL TLS pinning. Persistent, no Frida session. Installable via MMRL.

Frida scripts for mobile application dynamic-analysis.

Bypass TikTok SSL/TLS certificate pinning on Android to intercept & analyze HTTPS traffic — root & no-root, works with Burp Suite, mitmproxy & Reqable (2026).

A Frida-based Dex unpacking tool

A pure-Python implementation of the Sports World Campus protocol, including NetSecKit 4.2.4, GeeTest v4, end-to-end protocol analysis, and an automation suite, independent of the Android app and native shared libraries.

Fast, accurate Android decompilation for humans and AI agents.

The Flutter Decompiler: CLI tool that decompiles Flutter Android AOT (libapp.so) into Dart-like pseudocode, supporting obfuscated builds.

LLMs have ended reverse engineering as a high-barrier skill. Case study: reconstructing 6/7 custom HTTP signing parameters of Douyin (TikTok CN) v38.1.0 native library in 30 days using Claude Opus.

Android 16 ART-integrated DEX dumper & repair toolkit inspired by FART. In-memory DEX reconstruction, R0dump Manager, and portable AOSP/LineageOS patches.

A dex analyzer for finding obfuscated codes dynamically

Mobile runtime detection workbench for AI (iOS and Android)

Hacking Hotspots: Pre-Auth Remote Code Execution, Arbitrary SMS & Adjacent Attacks on 5G & 4G/LTE Routers

Scripts to set up your own Android 📱 app hacking lab

A Sonic Runners custom server.

Apkx-Hunter is an Android Static Analysis Framework in Debian Package written entirely in C with OWASP MASVS scanning with 15 categories and 166 detection patterns for Android security assessments, reverse engineering, malware analysis, and penetration testing. It features ML-based secret scoring, and advanced static security analysis.

With this script you can bypass both root detection and ssl pinning for your android app.

Tamper detection in Android

Manage Android machines with pre-defined behaviors for Cyber Range environments.

Chupathingy: Halo: Combat Evolved running natively on Windows, Mac, Linux and Android. A port of the Halo CE decomp project, built for stability and community multiplayer, with its own dedicated servers and the Delta network.

Deobfuscate "paranoid" protected apps

Python API Monitor for Android apps

extract info from apk files

Unity Freecam (Internal)

Horangi tools for Android penetration testing

A Unity and Cocos2d-x Lua game reverse engineering toolkit for Android, built on LSPosed, JNI, and native hook backends. Features Il2Cpp dump generation, text interception, Cocos runtime text capture, Lua replacement rules, cross-process configuration synchronization, and integrated on-device tooling for efficient analysis and debugging.

A practical Web and app security training environment integrating multiple programming languages.

One-click installer for Frida and Burp certs for SSL Pinning bypass

Frida scripts for intercepting and modifying the behavior of Android apps at runtime.

Android application tracer powered by Frida

Among Us Cheat Menu for Android

Plugins for reversing android apps in JEB

An AI-powered, multi-domain security analysis agent platform that enables LLMs to perform security analysis end to end.

Android: from development to reverse engineering.

A Frida Mod Menu for Android Games inspired by Android-Mod-Menu by LGLTeam

A decompilation tool for quickly decompiling APKs, converting DEX to JAR and JAR to DEX, signing, aligning, generating patches, and more.

Easy to use APK/IPA Mobile App Inspector

FKIAB - f**ks in app billing

The APK Scanner show the APK information via double click on your PC.

Mobile app memory view & edit PyQt6 program

DECX - Decompiler + X

Advanced Frida-Android techniques

Type diagram plugin for JADX decompiler

Defines a simple custom syntax that trims Smali syntax details to improve the readability of decompiled code.

Android Reverse Engineering Command-Line Automation Workspace. AI-driven security analysis with Claude Code.

DroidXploit – An all-in-one Android security assessment framework for rooted emulators, providing a modular CLI for enumeration, runtime analysis, and exploitation research.

Documenting all the sources from where I'm learning Mobile(adnroid/IOS) bug bounty so if another researcher want to start with mobile bug bounty he/she don't struggle for resources

Small Rust utility to decompile Android apks

Android Dynamic Class Dumper — dump all DEX files from running Android apps using Frida

A Frida-based utility for dynamically extracting native (.so) libraries from Android applications.

apk-patchx a command-line tool that makes APK manipulation & frida-gadget injection fast, automated, modular, and developer-friendly.

REVerse ENGineering Environment

Test case to check for emulator detection bypass using frida and termux in android and how your application reacts to js injection.

Android port of umamusume-localify

run java method of Android in Jadx without Android device.

A de-metaified Meta Glasses client.

Android Mod Menu Template based on LGL Mod Menu with auto update offsets

Example of frida il2cpp bridge library usage

Reverse Engineering Online Toolkit (REOT) is a browser-only toolkit for reverse engineering and web scraping. It provides security researchers, reverse engineers, web scraping engineers, and developers with convenient, efficient tools that require no installation, covering common encoding, decoding, encryption, decryption, and data conversion tasks.

DeAPK is an open-source, online APK decompiler which lets you upload an APK and then decompile it to Smali or Java sources. It is built using Laravel, Vue.js, Bootstrap, FontAwesome, Pusher, Redis, MySQL, apktool, jadx and hosted atop Oracle cloud platform.

A universal way to create a noclip mod in Unity games (Mono/IIL2CPP)

A Python client library for interacting with the Skyscanner flight and car rental APIs

Android Fall Guys mod menu using Frida and frida-il2cpp-bridge

JADX plugin that extracts method names, class references, and source file paths from string constants found in DEX files and decompiled Android code.

Garlic Decompiler (GUI) - A modern C++/Qt6 desktop interface for the Garlic Decompiler, bringing blazing-fast APK, DEX, JAR, and CLASS decompilation to Windows, Linux, and macOS.

An APK decompilation assistant for Linux, packaged as ApkDecompiler.deb, supporting Debian-based distributions including Debian, Ubuntu, Mint, and Deepin.

A native Android library that dump il2cpp (class/method/field) from any running Unity il2cpp app/game, entirely inside the process. No root, No adb, No frida, No zygisk.

⚙️ An efficient tool to do in-depth comparison of two android apps.

No description supplied by the upstream repository.

YouTube cipher deobfuscation, n-transform & PoToken (BotGuard) generation - a standalone Android library (Kotlin) with self-healing remote player configs.

Static analyzer for Flutter/Dart AOT snapshots — recovers function names, class hierarchies, call graphs, and behavioral signals from libapp.so without embedding or executing the Dart VM. Supports ARM64 and x86_64, Dart 2.10–3.12.

Static recompilation of the Sega 32X game Knuckles' Chaotix into native C++ (Windows/Linux/macOS/Android), with true widescreen. Bring your own ROM; no game data included.

Hardware-level firmware extraction and malware analysis of a $25 Android TV box

FirmwareDroid is an analysis framework for Android firmware and Apps.

APKrash is an Android APK security analysis toolkit focused on comparing APKs to detect tampering and repackaging.

A decompilation of Geometry Dash version 1.710

LLVM pass plugin for native code obfuscation and anti-tamper. CFG flattening, string encryption, VM virtualization, anti-cheat, and more. iOS · Android · macOS · Windows · Wasm.

Analyze the so file in APK through LLM+Capstone to determine the main intention of the so file and the developer (company)

android app reverse engineering pipeline

Web-based Android debugger with inspection capabilities using Frida and Jadx as a backbone

A Pure-Java MCP Server for JaDX Android Reverse Engineering Tool

God of War II HD static recompilation — curated work artifacts (lift boundaries, SPU lift sources, scripts, findings). Game data & build artifacts excluded.

A general-purpose KernelSU module for reverse-engineering analysis: the phone provides only atomic capabilities, while all intelligence runs on the PC (Claude Code + MCP). For authorized security research and educational use only.

Browser-based Android console, APK decompiler and security analyzer. Mirror, logcat, shell, Frida, jadx, and static and dynamic analysis, with no drivers or adb server.

MovieBox Pro app Protocol & Architecture Analysis — reverse engineering research documenting API structure, authentication flow, streaming delivery, and regional content systems discovered via APK decompilation and traffic analysis.

Notes taken from Android App Hacking - Black Belt Edition (UDEMY - Roman Stuehler)

Reverse android Games Made with unity

Emulation framework for Android & iOS native libraries

AetherVM - Lift. Instrument. Emulate. Recover.

Powerful All-in-One Telegram Bot for Developers and Security Professionals.

APKnife is an advanced APK analysis and modification tool designed for security researchers and ethical hackers. It allows users to extract, analyze, modify, and sign APK files. The tool provides features like APK extraction, AndroidManifest.xml editing, API call detection, vulnerability scanning, and APK signing

A high-performance Rust bridge to Unity's IL2CPP runtime — resolve types, invoke methods, and manipulate Unity objects from native code

ECD++ - Fork of Enhanced Class Decompiler - integrate modern Java decompilers seamlessly into the development workflow

Research, firmware analysis, full firmware dump, and root method for the Magcubic HY300 Pro+ (Allwinner H713, Android 11).

Reverse-engineered protocol and open-source Python driver for the Ocrustar / ElkSmart USB IR blaster (VID 045C / PID 02AA). Learn and transmit IR signals without the app. Includes full APK decompilation, Huffman encoding analysis, Kookong cloud API documentation, and BLE protocol.

Jadart is a fast Flutter decompiler designed for Agents/Mobile Security Researchers.

A simple multi-purpose Frida hook script for spoofing and basic bypass testing.

Browser-based IDE for frida-server

Enable AI-driven automated Android dynamic analysis by controlling Frida through the Model Context Protocol for streamlined reverse engineering.

🔗 An elegant Android modification framework for React Native. Inspect and modify production React Native apps live!

RadioMaster AX12 hardware reverse engineering — UMBUS protocol spec, native library analysis, device tree, tools, and developer setup guide

A multi-decompiler MCP server and CLI toolkit for Java, supporting JD-Core v0 & v1, CFR, Procyon, Fernflower, Vineflower & JADX.

Mod for the Sonolus rhythm game with extra features, written using Frida and frida-il2cpp-bridge

A tool designed for low-level examination and modification of Unreal Engine game assets by hand.

A patcher for the moovit application to unlock premium features and removed ads.

An efficient and user-friendly Java debugging tool.

Naruto Shippuden: Ultimate Ninja Storm Generations (Xbox 360) running natively on Android and PC: static recompilation, without a CPU emulator.

Surgically inject a System.loadLibrary() into a dex.

AI-powered mobile application reverse engineering and network traffic analysis toolkit

Complete Frida script that bypasses 19 layers of Android security including Talsec, freeRASP, PairIP, SSL pinning, root detection, emulator detection, and custom Frida detection mechanisms

App-integrated Blutter: on-device Flutter/Dart AOT reverse engineering for Android (Dart 2.14~3.13, 70 versions)

Analyze Android APK files from a browser.

A native Sonic Adventure 2 port by static recompilation for Linux, Windows, and Android. Experimental source preview.

Instant device integrity + screen protection for React Native. Detect root/jailbreak, Frida, debugger attachment, emulator environments, hooking frameworks — and protect sensitive screens with background blur, screenshot blocking, and screen‑recording detection.

Android RE skills for Pi coding agent - static (decompile/API extraction) + dynamic (Frida hooking/bypass)

Android reverse-engineering web crawler.

A framework for analysis, stimulation, and detection of Android repackaged malware (under construction)

Clone a mobile app into a working Expo / React Native project from screenshots. An open-source Claude Code skill.

A tool to analyze InfoPlist , Reverse Engineering APK

Universal reverse engineering, 40+ vuln classes & working PoC generation for Android/iOS/Windows PE/Linux ELF/macOS/.NET - an AI-agnostic skill for Claude Code, Cursor, Copilot, Windsurf, Aider, Amazon Q & any LLM.

From late 2018 to the first half of 2019, packet-capture tools revealed a parameter-signature vulnerability in 🎦 Haokan Video. It was successfully exploited to farm coins and redeem them for cash over six months.

A fully playable (AI assisted) static recompilation of Star Wars: Rogue Squadron on N64 for the Windows 10, Linux & Android

Android OTA image analysis preprocessing automation tool.

An APK-to-opencode pipeline based on jadx-ai-mcp-server, jrag, and evil-opencode.

Claude Code skill to reverse engineer any Flutter app — from source code, APK files, or live devices via ADB. Extracts architecture, dependencies, API endpoints, domain models, and more.

Experimental open-source control app for DJI Osmo cameras, with hardware-tested Pocket 3 support.

Clean-room reconstruction of Pencil Blade 1.5 from static evidence, rebuilt with Cocos Creator 3.8.8 and TypeScript.

Native C++/SDL3 port of 大富翁4 (Richman 4) for macOS, Android and iOS — requires your own copy of the game (buy it on Steam). Unofficial; not affiliated with SOFTSTAR.

Scriptable toolkit for backing up, extracting, and analyzing Android ROM images. Supports forensic analysis, device recovery, and firmware flashing operations with Python automation.

Self-hosted reverse-engineering workspace API — orchestrates jadx/apktool/adb/frida/APKiD via a job & workflow engine, exposed as native MCP tools for Claude. No cloud required.

MCP server for headless AI-driven Android reverse engineering — 122 tools across 8 categories for ADB, NDK, il2cpp, hooking, crash trapping, memory analysis, Frida, and APK manipulation

Technology-stack analysis for mainstream apps and a PlantUML generation tool.

ImGui overlay for Unity Android games — three injection variants (JNI, Zygisk, Magisk), IL2CPP introspection, 100+ anti-cheat bypass patches

Navee ST3 Pro reverse-engineering archive: BLE/UART protocol, Android controller app, firmware analysis, post-mortem (software speed unlock not feasible)

Reusable Agent Skills for mobile reverse engineering & Android native fuzzing (AFL++ on-device, stub-JNIEnv harness) — installable via skillfish

Jadx GUI plugin that scans AndroidManifest.xml for security-relevant signals

A comprehensive reverse engineering study of the HY300 Android projector (Rockchip RK3326): firmware analysis, security audit, OEM component dissection, and custom ROM reconstruction.

Zero-Studio Android pentest lab — one-command rooted AVD with Magisk+Zygisk, Frida 17.2.14, Burp system-cert, SSL unpinning. Developed by hits.

In-kernel physical memory acquisition agent for Android — a KernelPatch module (KPM) that serves fault-safe physical RAM reads over TCP (PSK auth, ~59 MB/s over adb forward). leechagent-style DFIR/research tool, boot-image embeddable. GPL-2.0.

🧪 Explore mobile security with Frida Reversing Lab, a toolkit for analyzing and manipulating Android apps to overcome obfuscation and security barriers.

Log snapshot management solution (iOS/Android/Web/Server) built with Flutter/Dart using Bloc pattern and Firebase Firestore backend.

Android APK malware triage with YARA, VirusTotal context, MITRE ATT&CK output, Frida hooks, and multi-LLM analysis.

📲 Android Webview which allows custom reconstruction of the web page

Awesome Reverse Engineering

a jadx-gui plugin to genereate method's control flow gragh and display it as image

APK ad-removal skill documentation covering unpacking, re-signing, and smali patching workflows.

A Flutter frontend for MANIAC.

A minimal web app to analyze Android applications with Frida

Mobile app security analysis MCP server for Android APK and iOS IPA files

Headless MCP server that gives AI agents the full power of JADX for Android (APK/DEX/AAB) reverse engineering.

Frida hook generator - produces interception scripts for Android/iOS instrumentation and RE.

APK static analyzer - manifest, DEX, permissions and certificate inspection for Android.

Fast Unity AssetBundle extractor & modder for Python with UABE Avalonia parity and Android/Termux support

jadx plugin: undo hashCode-switch control-flow flattening (CFF deobfuscator)

Inject code into IL2CPP game processes to enable live metadata dumping, memory editing, method invocation, and Lua scripting via Zygisk.

Automated CloudStream .cs3 decoder and Kotlin metadata archive maintained by Diwas Khatri

Reverse engineering skill for Claude Code and other AI coding agents.

No description supplied by the upstream repository.

Removes the Netflix Games SDK login gate from a Netflix game APK / IPA and produces a signed APK / unsigned IPA that runs offline with no Netflix account.

An AI agent on your phone: use natural language to drive 103 built-in tools that operate directly on the device, covering files, apps, packet capture, APK decompilation, Linux environments, and UI automation. Includes a built-in MCP client and MCP server.

Monitor mode & 802.11 packet injection on a stock Android 13 GKI kernel — no reflash. Cross-built cfg80211/mac80211/rtl8xxxu loadable modules (Clang 14, LTO/CFI) + RTL8188FU OTG adapter, driven by a Flutter app. Includes an RTL8188F backport and analysis of Qualcomm WiFi injection limits.

An external analysis and SDK-generation tool for Unreal Engine on Android, supporting AutoFix, dependency ordering, field patching, and ProcessEvent wrappers.

Ai skills for Frida dynamic instrumentation across Android, iOS, native hooks, agents, and troubleshooting

This repo contains CTF challenges that I've played and their write-ups.

A local reverse-engineering toolkit for Inotia4 Android APK resources. Extracts and parses game assets (maps, text, images, audio) from a single input APK, and generates web-viewable datasets via a built-in viewer.

a android app to convert dex and jar and smali easily

AI-Powered Mobile Application Penetration Testing Tool

Extracting react native app source code from apk file.

Bytecode-level Android APK diffing for reverse engineers — matches classes and methods across R8/ProGuard-obfuscated builds by structure, not names

Offline revival kit for Assassin's Creed Identity (Android): patcher + mission builder. Boot to Animus or Firenze with working enemy AI.

APK Static Toolkit | Android Package Kit (APK) Analysing Toolkit

Install frida with just one command

In this repo, I document the things I've learnt in Android Security and Android Reverse Engineering.

Very simple android native library that will pause the app process when the library is loaded.

Extensible jadx plugin for dalvik emulation.

CTF Writeups

Claude Code skill to support Android app's reverse engineering. (Safe)

SSLBPS is an Android security research project for analyzing APK structure, manifests, Smali code, certificate trust models, and mobile security controls. Built for educational analysis, defensive research, software auditing, and reverse‑engineering learning. Perfect for understanding app architecture, code review, and secure development practices

Time to get rekt! Rekt is an app rekking tool for Android & iOS apps

Build and unpack Android Dynamic Partition super.img images from OEM super_def.json layouts using lpmake.

A comprehensive penetration testing toolkit for Flutter applications. Includes SSL pinning bypass techniques, Frida scripts, static/dynamic analysis guides, automated security scanning tools, and real-world case studies. Everything you need to assess Flutter app security on Android & iOS

react-native-vulnerability-scanner – A Python tool to analyze React Native APKs for vulnerable npm dependencies by scanning modules.json. It checks packages using Snyk's vulnerability database and provides a detailed security report. 🔍 Find vulnerable dependencies in React Native apps easily!

A CLI that wraps apktool + jadx into a single decompile pipeline

Android APK static analysis pipeline with a Claude agentic triage layer — APKLeaks + JADX + MobSF → severity-ranked report

Mi TV remote for macOS, Android and iOS: control Xiaomi TVs over Wi-Fi. MiLink protocol reverse engineered with REA.

Free, open, offline viewer for the HND-NE3 / NATFIRE NE3 wireless ear camera (Android, macOS, Windows, Linux)

An efficient and user-friendly Java debugging tool.（JDK8）

d4rkc0de Android CTF

Android APK security analysis tool with jadx MCP integration for comprehensive vulnerability detection

A practical guide and custom toolkit for rebuilding Unity + Utage visual novels in Ren'Py and packaging them as Android APKs, with substantial AI-agent involvement and implementation led by the author.

Docker container and scripts to give you a contained env and tools

Secure local-only Android app for UseeEar-compatible ear hygiene cameras.

APK Reverse Engineering & Editor Suite for Android - Open, analyze, modify, rebuild, and sign APKs

Map essential cybersecurity and reverse engineering skills with this structured learning path.

Qinlin (亲邻开门) remote network door-open client + Docker gateway (authorized use only)

Reverse-engineered BLE keyboard controller for a Wonder Toys RC car.

App_Fast_Forensic is intelligent app forensics software.

JADX plugin for bookmarking code lines with emoji markers, editor gutter tracking, and quick navigation.

Advanced Android Security, Threat Hunting & Digital Forensics Framework for authorized device auditing, APK analysis, YARA scanning, evidence-based threat assessment, and mobile DFIR.

AlMosaly Open Source — Android APK reconstruction, prayer-times PWA, Quran, azkar, qibla, and a privacy-first Islamic web app.

Three mobile forensics examinations: iOS full filesystem analysis (Cellebrite), legacy mobile device artifact recovery (Autopsy/FTK), and Android APK static & dynamic analysis (JADX/PCAPdroid).

Extract GraphQL schema from Android APKs — when introspection is disabled

A headless jadx engine for LLM agents. Answers structured questions about an APK, DEX or JAR over a plain CLI. No GUI, no daemon.

One DSH plugin switch for REA: the REA MCP server (207 reverse-engineering tools) and REA's three workflow skills, enabled and disabled together.

Sony ILCE-6000 (A6000) firmware research — official firmware unpacking, raw NAND dump methodology via pmca updatershell, partition verification, and Android userdata discovery

DemoPlugin For Jadx

Experimental static recompilation of classic Call of Duty 1.5 for Android. Bring your own original PC game files.

Tracks WhatsApp beta builds for Android & macOS and reports what changed between versions — new, reworded and removed UI strings plus code-surface diffs. Runs entirely on GitHub Actions with Telegram notifications.

🔒 Comprehensive Android security research toolkit for ethical hacking and penetration testing

Web APK RASP scanner: decompile (jadx/apktool), endpoint discovery, DEX/native checks, export PDF/CSV.

An AI-powered malware detection system that uses machine learning and static analysis to identify malicious Android applications. It extracts permissions, API calls, and bytecode features from APKs and classifies them using a trained Random Forest model with high accuracy on the Drebin dataset.

A sample step by step decompile apk file to Java(Gradle project)

Android RASP & environment inspection toolkit in Kotlin + Jetpack Compose. Detects Frida, root, LSPosed, virtual apps, hooking, DCL, ADB, emulators & SSL pinning — plus a built-in CTF lab with jadx/Frida flags, hints, and an auto-solver. Zero dependencies.

A high-performance APK static analysis tool for secret detection.

The technical handbook for porting Android games (.so loader, FalsoJNI, vitaGL) to PlayStation Vita for developers & AI agents.

Static analysis for Android/iOS packages (.apk, .aab, .xapk, .ipa) Extracts the package, runs 15 analyzers, and reports security findings with a weighted score.

This utility is specifically designed for reverse engineering Android applications and includes a range of useful features and tools.

A methodology for reverse engineering protected Android APKs: dynamic unpacking → decompilation → native layer → cryptographic verification, with a collection of Frida scripts. Contains only original methodology and independently developed scripts.

Emulator for Renesas SH705x (SH-2E) engine ECUs: runs Denso firmware unmodified on a simulated engine, with a live calibration-map viewer, on Windows and Android

This repository is a walkthrough for Android Reversing, featuring community-made challenges by fellow learners who just started a bit before us.

Mobile Security Intelligence Platform - Transform mobile app security scans into actionable intelligence with static/dynamic analysis, framework detection, and OWASP MASVS mapping

Relay is an Android workstation for Windows that combines device control, screen mirroring, ROM compatibility analysis, diagnostics, and APK inspection in a single interface.

A Lakota language dictionary in SFM/MDF format extracted from abandonware for the Lakota people.

Free Tools Index aims to track and share free penitration testing and blue team tools.

Dex Decompiler analyzes the contents of Android APK files and makes their DEX (Dalvik Executable) code readable. It is particularly useful for digital forensics, security analysis, and reverse engineering.

App reverse engineering & automation | Private API extraction | Web scraping | Bots

Hermes-Sens is an automated static analysis tool for React Native Android applications. It decompiles APKs using apktool, decompiles Hermes bytecode into pseudo-JavaScript, and extracts sensitive artifacts such as secrets, tokens, endpoints, and authentication logic using pattern-based analysis.

See what a mobile game's next update added — before it goes live.

Automatic Google Play (apk) to Git repository extractor cron script

Hermes bytecode parser and decompiler for React Native (HBC v40–v100). Byte-exact reconstruction verified on v84/v96/v98/v99. OXC round-trip on every output. Pure Rust.

One-click Android TLS interception & traffic-capture framework for Flutter and native apps — auto frida, universal SSL unpinning, anti-detection, self-recovery, in-tool HTTP+WebSocket MITM capture.

Currently, the project is being heavily refactored and is therefore in an unusable state. Android RE library for static forward and backward slicing

Unofficial attendance companion app for Ethiraj College students

Unofficial Flutter app to control QCY earbuds over BLE (ANC, EQ, touch controls)

Traffic interception for Rust-based mobile apps — reFlutter for rustls/reqwest cores. Unrooted, no CA install for the Rust core, pattern-DB trust patches.

⚡ An interactive field guide & security portal for Android Security Researchers, Bug Bounty Hunters, and Penetration Testers. Features 22+ indexed tools, CVSS estimator, Frida/Objection hooks, auto recon script, and framework reversing workflows.

Self-contained Mobile & IoT SAST/DAST/pentest toolkit: MobSF + Frida + objection + mitmproxy + rooted emulator, as a desktop app, CLI and MCP server.

Kuch toh gadbad hai: static analyser for Indian scam APKs (fake RTO e-challan, PM-Kisan, bank-KYC apps). Finds OTP theft, call forwarding and Telegram/C2 exfiltration. Explains in English and Hindi.

CLI for WeChat mini-program recovery and Android APK static analysis, with code, assets and offline reports.

Automated build & patch orchestration for Sasquatch (SquashFS). Supports modern GCC/Clang and Termux (Android).

DittoNet 🔥 is a shapeshifting mobile web debugger and hybrid MITM browser. Empowering developers with real-time HTTP interception, dynamic modification, JS injection, and SSL bypassing from a localized mobile environment.

IL2CPP Dumper for Android - Unity games to clean C# (classes, hex offsets, RVA). Memory mode (root), metadata v22-v31 incl. Unity 6. 100% on-device C++ NDK core.

Build a stealthy Frida server from source, applying robust patches to evade detection and enhance security for dynamic instrumentation tasks.

Experimental, AI-assisted CLI for mobile security testing — Android, iOS & the networks they run on. Lab/learning use only.

BLE protocol reconnaissance on an undocumented smartwatch, and the upstream Gadgetbridge contributions it led to — device drivers, bio-impedance and body composition, dashboard widgets, framework changes. Diagnostics tooling, ADR and licensing audit included. Full merge record with commit references.

Skyscanner Scraper gets you Skyscanner data ⚡ fast, 🎯 100% accurate and 🔍 ridiculously detailed — as clean JSON. 1,000 free calls/month ❤️

On-device APK analyzer and decompiler for Android — custom AXML/ARSC/DEX parsers, on-device jadx, and a Shizuku-powered intent fuzzer. No root, no PC, no Termux.

A modded version of the game apk I made a couple of years ago

VaultPass is an intentionally vulnerable Android APK for authorized reverse engineering training. Practice decompiling, reading Smali, patching login/root/premium checks, then rebuilding and signing APKs in a safe lab setup while learning why client-side-only security controls fail.

A Node.js web application for generating Lego Dimensions Toy Tag data for blank NFC213 tags. Input your tag's UID to generate unique codes for characters and vehicles. Generated codes can be written to tags using any NFC writing app (iOS/Android).

AI agent skills for debug APK security testing, Flutter/Kotlin review, ADB live testing, and authorized staging web/API assessments with reproducible evidence.

Fraud-APK & Stalkerware Forensic Workbench for cyber cells / law enforcement. Court-ready evidence: hash-chained acquisition, chain-of-custody, static analysis, YARA + behavioral detection, weighted verdicts, PDF + STIX/CSV/YARA reporting. 0% false positives, 0% missed on 43-sample validation.

Advanced mobile application reverse engineering and mobile security research focused on authentication workflows, backend communication analysis, networking stack reconstruction, and encrypted local storage.

Interactive AArch64 learning simulator for registers, pointers, stack frames, control flow, and Linux syscalls.

Static analysis report for the preview APK of LazyAlarm, covering functional architecture, component inventory, permission analysis, and signing information, with icons, flowcharts, and structural diagrams.

Static analysis toolkit for Android APK security testing — detects hardcoded secrets, manifest misconfigurations, and native library vulnerabilities

Reverse-engineer apps with AI. Reforge reconstructs product, UX, UI, architecture, and design intent for coding agents.

Containerized blutter

A personal Python toolkit for preparing Android APKs for authorized HTTPS inspection and certificate-pinning analysis.

Automated Android APK malware analysis pipeline — MobSF, OWASP Mobile Top 10, VirusTotal, Flask dashboard, PDF report generation

APK Static Analyzer

Open infrastructure for verifiable Android supply-chain audits, reproducible builds, AOSP testing, and signed evidence reports.

An automated, deterministic, and reproducible reverse engineering framework for Android hardened applications. Features Unidbg-based cryptographic empirical analysis, JNI mapping recovery, and structured threat modeling for DTC-protected native libraries. For academic & responsible disclosure purposes only.

HTPR e-bike controller BLE debugging console: a reverse-engineered protocol and a portrait-oriented Flutter dashboard.

Android app privacy-compliance audit portfolio: static keyword scanning, dynamic Frida hooks, PCAPdroid traffic evidence, and LLM-assisted compliance assessment. Compares commercial and open-source samples, with a bilingual README primarily in Chinese.

🚀 The easiest way to manage Frida on Android. Auto-setup, version matching, bypass scripts, wireless ADB.

Portable, evidence-first AI-agent skill for lawful reverse engineering with REA CLI/MCP workflows.

Patch your Pokémon FireRed/LeafGreen ROM to unlock a full in-game editor via Viridian City's Pokémon Center.

Android security assessment of Beetlebug: hardcoded secrets, insecure storage, SQLi, open Firebase, Logcat leaks, exported activity

Cross-platform, dependency-free CLI APK decompiler & inspector. Pure-Python core (manifest decode, info, DEX, security scan); full Java/smali via jadx/apktool.

🐦‍🔥 Android Service Attack Surface Analyzer - Automated reconnaissance and attack command generation

Hands-on Android reverse engineering and network security CTF with a native (JNI) crypto layer, AES-256-GCM E2EE, and a serverless Node.js backend.

Reverse engineering of the Eureka userdebug Android 12 image: zap and GMU firmware, the kgsl kernel module, Adreno userspace libraries, init and SELinux policy.

Documentation of the Meta Ray-Ban Display (greatwhite) firmware: boot chain, Android Verified Boot, TrustZone and hypervisor, remote processors, peripherals and device-tree overlays. English and Chinese.

Guide to Android app security analysis, reverse engineering & pentesting

Open-source AI-powered Android reverse engineering platform — decompilation, symbol indexing, evidence-based analysis reports.

Lightweight automation orchestration framework for rapid APK malware analysis with YARA signatures, obfuscation detection, and hybrid code scanning

Hunt URLs , IP, Base64 encoded C2 in Smali files with 95% reduction of false positives

A practical Android mobile penetration testing knowledge base covering static analysis, dynamic instrumentation, APK analysis, emulator setup, network testing, and security assessment workflows.

Android app (Java) for collecting network traffic, APK, and permission data with a user-friendly UI.

REST API backend for collecting and serving malware-related data between Android app and MongoDB.

Extract a symbolized AArch64 Linux kernel ELF from Android boot.img or raw Image files.

🧪 Experimental Web GUI for real-time APK decompilation using JADX, Docker, Flask, and SocketIO.

Drive an old non-rooted Android phone as a PC-controlled app gateway: capture scrcpy PC window via Win32 PrintWindow to bypass FLAG_SECURE, then drive Flutter apps with adb taps/swipes.

Public CLI and Agent Skill distribution for APK Canary

SOYO Mobile App – API & Security Analysis

Coursework in reverse engineering and malware analysis, covering deobfuscation, sandbox detection, memory inspection, network interception, and Android instrumentation

Android security labs 4-5: Frida, root detection, APK analysis, secure programming, and original reports.

Cops N Robbers Revival restores multiplayer, mod support and modern Android compatibility for the classic Android game.

Android APK Static Security Analysis Tool using Python, APKTool and JADX

APKLens — Browser-native Android APK security & architecture analyzer. Decode manifests, scan permissions, analyze DEX bytecode, detect secrets & OWASP risks. 100% local, zero upload.

Frida trainer for SpacePeng game and code examples.

A Flutter app port based on reverse engineering the BLE advertising protocol of LampSmart Pro lights and fan lights.

MCP server that hands your AI agent signature-verified Android APKs from RuStore — by package name alone. No browser, no account, no API key.

Analysis of cryptographic routines found within "Perenio Smart: Home and Office" Android application, as well as reconstructing Perenio Peifc01 IP camera's RTP over UDP video stream from a Wireshark packet capture

Static security analysis of an Android APK using Kali Linux, APKTool, AndroidManifest and Smali code review.

A Stick Ranger 2 save editor based on reverse engineering the game’s web JavaScript code, supporting offline save decoding, editing, and re-encoding. Built with Flutter for Windows, Android, Web, and other platforms.

Android Studio plugin that turns Frida-style terminal stack traces into clickable source links

An evidence-layer APK scanner: in the snow, every passage leaves a trace. Statically scans Android APKs and produces SDK, permission, and component findings with evidence chains (md/json/.pcc.json).

Three tools for Chinese localization of older Unity games: DLL-layer text (equal-length replacement in the #US heap), resource-layer text (keys excluded from translation), and BMFont Chinese bitmap fonts.

Modify the Sonolus rhythm game on Android using Frida to add custom features and gameplay adjustments.

No description supplied by the upstream repository.

Flutter/Android reverse-engineering toolkit for the Saeco GranBaristo Avanti's Bluetooth Low Energy protocol: scan, pair (PIN), decode frames live, verify CRC-16, and send drink commands. The recon tool behind saeco-granbaristo-bridge. ☕

Static Android Security Analyzer for APK decompilation, manifest analysis, exported component discovery, network security assessment, and report generation.

👁️ AI-assisted static file intelligence that unmasks scam APKs, malicious EXEs and weaponized PDFs without ever running them. VirusTotal + abuse.ch + RDAP.

Independent IoT penetration test — 12 findings, CVSS 9.1. Android APK, firmware, and network analysis.

Native reimplementation of Diner Dash (2004) in Rust with Wayland, Windows, Android, and WASM support..

No description supplied by the upstream repository.

Android Reverse Engineering - King God Castle

Enhancing security in messaging applications — E2E encryption, Signal protocol analysis with Wireshark, Android APK security audit — 8 deliverables + 2 labs

Runtime-only 60 FPS research and ReZygisk project for Pokémon Champions Android.

extracted files from android 6.0.0 (Nexus 5X)

Educational Android unpacking & packer-hardening labs — self-built, evidence-based, deterministic-first reverse-engineering study materials.

Attack-surface map for Android apps, built on JADX output

Agentic APK threat-analysis pipeline (in progress). Androguard static analysis (APKs never executed) runs in a containerised AWS Lambda worker (ECR, S3, IAM); ML anomaly scores + SHAP feed a LangGraph multi-agent system on Claude that cross-checks the app's permissions and behaviour against its stated claims. FastAPI backend + Telegram bot.

🔍 Technical analysis of "悦动空间" Android spyware - Exfiltrates contacts, SMS & images to C2 servers (156.224.170.230) | SHA-256: a1feefa...

On-device agentic AI security scanner — decompiles APK/APKS/XAPK and live-renders websites; Gemini gives a definitive verdict. Website: https://saurabh-gzp.github.io/Sentinel-AI-Security-Scanner/

Advanced Android VAPT Framework — Static + Dynamic | By Muthuselvan Nadar

Decompiled source of the GeneralMikve mikvah payment-terminal firmware (com.otot.mikve.general). Source-only; credentials scrubbed; no APK.

Shortcat Anime Protocol & Architecture Analysis — reverse engineering research documenting API structure, authentication flow, local streaming delivery, and rewards system discovered via APK decompilation and traffic analysis.

Blutter in a container for quick Flutter decompilation on any machine (Linux/MacOS).

Advanced Android APK Security Research Tool - Memory-optimized framework for ethical security analysis with integrated research capabilities

Static decryptors and unpackers for packed Android APKs: XOR/AES dropper payloads, string oracles, split-array keys, dpt-shell unpacking, manifest repair. One CLI, builder defaults included.

No description supplied by the upstream repository.

Advanced Termux Toolkit for Android. Install, manage, update and analyze security tools with a clean interactive interface.

A comprehensive application to find vulnerabilities in APK files before delivery.