# Apps · Android

> Browse 482 repositories with project descriptions, upstream links, and license information.

Automatically discovered repository index, unreviewed. Stars, licenses and last-push times are collection-time snapshots.
Selection published: 2026-10-20 UTC

- HTML: <https://awesomerea.org/browse/android/>
- JSON: <https://awesomerea.org/browse/android/index.json>
- 简体中文: <https://awesomerea.org/zh/browse/android/index.md>

- [skylot/jadx](https://github.com/skylot/jadx): 50,988 stars · Apache-2.0 · last push 2026-10 · Dex to Java decompiler
- [librepods-org/librepods](https://github.com/librepods-org/librepods): 30,324 stars · GPL-3.0 · last push 2026-10 · AirPods liberated from Apple's ecosystem.
- [iBotPeaches/Apktool](https://github.com/iBotPeaches/Apktool): 25,935 stars · Apache-2.0 · last push 2026-10 · A tool for reverse engineering Android apk files
- [MobSF/Mobile-Security-Framework-MobSF](https://github.com/MobSF/Mobile-Security-Framework-MobSF): 21,966 stars · GPL-3.0 · last push 2026-10 · Mobile Security Framework (MobSF) is an automated, all-in-one mobile application (Android/iOS/Windows) pen-testing, malware analysis and security assessment framework capable of performing static and dynamic analysis.
- [Konloch/bytecode-viewer](https://github.com/Konloch/bytecode-viewer): 15,677 stars · GPL-3.0 · last push 2026-07 · A Java 8+ Jar & Android APK Reverse Engineering Suite (Decompiler, Editor, Debugger & More)
- [OWASP/mastg](https://github.com/OWASP/mastg): 13,258 stars · CC-BY-SA-4.0 · last push 2026-10 · The OWASP Mobile Application Security Testing Guide (MASTG) is a comprehensive manual for mobile app security testing and reverse engineering. It describes technical processes for verifying the OWASP Mobile Security Weakness Enumeration (MASWE) weaknesses, which are in alignment with the OWASP MASVS.
- [sensepost/objection](https://github.com/sensepost/objection): 9,446 stars · GPL-3.0 · last push 2026-09 · 📱 objection - runtime mobile exploration
- [We5ter/Scanners-Box](https://github.com/We5ter/Scanners-Box): 9,108 stars · last push 2026-10 · The Ultimate Open-Source Security Arsenal for Hackers, Enterprises, and AI Agents
- [firerpa/lamda](https://github.com/firerpa/lamda): 8,610 stars · MIT · last push 2026-09 · Android Full-Stack Device Control Platform: WebRTC/H.264 remote desktop, UI/OCR/image-matching automation, one-click MITM, built-in Frida, proxy/VPN/frp/P2P networking, MCP/Agent, 160+ APIs, designed for multi-device clusters and engineered deployments.
- [SimoneAvogadro/android-reverse-engineering-skill](https://github.com/SimoneAvogadro/android-reverse-engineering-skill): 8,152 stars · Apache-2.0 · last push 2026-10 · Claude Code skill to support Android app's reverse engineering
- [androguard/androguard](https://github.com/androguard/androguard): 6,355 stars · Apache-2.0 · last push 2026-10 · Reverse engineering and pentesting for Android applications
- [dwisiswant0/apkleaks](https://github.com/dwisiswant0/apkleaks): 6,353 stars · Apache-2.0 · last push 2025-08 · Scanning APK file for URIs, endpoints & secrets.
- [CreditTone/hooker](https://github.com/CreditTone/hooker): 5,328 stars · last push 2026-09 · 🔥🔥 hooker is a Frida-based reverse engineering toolkit for Android. It offers a user-friendly CLI, universal scripts, auto hook generation, memory roaming to detect activities/services, one-click SOCKS5 proxy setup, Frida JustTrustMe, and BoringSSL unpinning for all apps.
- [timschneeb/GalaxyBudsClient](https://github.com/timschneeb/GalaxyBudsClient): 5,294 stars · GPL-3.0 · last push 2026-10 · Unofficial Galaxy Buds Manager for Windows, macOS, Linux, and Android
- [niklashigi/apk-mitm](https://github.com/niklashigi/apk-mitm): 5,128 stars · MIT · last push 2024-07 · 🤖 A CLI application that automatically prepares Android APK files for HTTPS inspection
- [charles2gan/GDA-android-reversing-Tool](https://github.com/charles2gan/GDA-android-reversing-Tool): 4,859 stars · Apache-2.0 · last push 2026-04 · the fastest and most powerful android decompiler(native tool working without Java VM) for the APK, DEX, ODEX, OAT, JAR, AAR, and CLASS file. which supports malicious behavior detection, privacy leaking detection, vulnerability detection, path solving, packer identification, variable tracking, deobfuscation, python&java scripts, device memory extraction, data decryption, and encryption, etc.
- [vaibhavpandeyvpz/apkstudio](https://github.com/vaibhavpandeyvpz/apkstudio): 4,683 stars · LGPL-3.0 · last push 2026-01 · Open-source, cross platform Qt6 based IDE for reverse-engineering Android application packages. It features a friendly IDE-like layout including code editor with syntax highlighting support for *.smali code files.
- [CalebFenton/simplify](https://github.com/CalebFenton/simplify): 4,671 stars · last push 2022-04 · Android virtual machine and deobfuscator
- [ReVanced/revanced-patches-template](https://github.com/ReVanced/revanced-patches-template): 4,613 stars · GPL-3.0 · last push 2026-02 · 👋🧩Template repository for ReVanced Patches
- [APKLab/APKLab](https://github.com/APKLab/APKLab): 4,011 stars · AGPL-3.0 · last push 2026-07 · Android Reverse-Engineering Workbench for VS Code
- [ax/apk.sh](https://github.com/ax/apk.sh): 3,842 stars · GPL-3.0 · last push 2026-01 · Makes reverse engineering Android apps easier, automating repetitive tasks like pulling, decoding, rebuilding and patching an APK.
- [ReVanced/revanced-patcher](https://github.com/ReVanced/revanced-patcher): 3,525 stars · GPL-3.0 · last push 2026-06 · 💉 ReVanced Patcher used to patch Android applications
- [zinja-coder/jadx-ai-mcp](https://github.com/zinja-coder/jadx-ai-mcp): 2,906 stars · Apache-2.0 · last push 2026-09 · Plugin for JADX to integrate MCP server
- [Impact-I/reFlutter](https://github.com/Impact-I/reFlutter): 2,775 stars · GPL-3.0 · last push 2026-10 · Flutter Reverse Engineering Framework
- [worawit/blutter](https://github.com/worawit/blutter): 2,750 stars · MIT · last push 2026-08 · Flutter Mobile Application Reverse Engineering Tool
- [AFLplusplus/LibAFL](https://github.com/AFLplusplus/LibAFL): 2,660 stars · last push 2026-09 · Advanced Fuzzing Library - Slot your Fuzzer together in Rust! Scales across cores and machines. For Windows, Android, MacOS, Linux, no_std, ...
- [iddoeldor/frida-snippets](https://github.com/iddoeldor/frida-snippets): 2,539 stars · last push 2024-11 · Hand-crafted Frida examples
- [MG1937/ASC](https://github.com/MG1937/ASC): 2,410 stars · Apache-2.0 · last push 2026-10 · ASC is a super FAST and lightweight Android decompiler designed for Agents/Mobile Researchers.
- [REAndroid/APKEditor](https://github.com/REAndroid/APKEditor): 2,363 stars · Apache-2.0 · last push 2026-10 · Powerful android apk editor - aapt/aapt2 independent
- [Ch0pin/medusa](https://github.com/Ch0pin/medusa): 2,357 stars · GPL-3.0 · last push 2026-09 · Mobile Edge-Dynamic Unified Security Analysis
- [httptoolkit/frida-interception-and-unpinning](https://github.com/httptoolkit/frida-interception-and-unpinning): 2,315 stars · AGPL-3.0 · last push 2026-10 · Frida scripts to rewrite mobile applications at runtime to directly MitM all HTTPS traffic
- [Juude/droidReverse](https://github.com/Juude/droidReverse): 2,021 stars · last push 2017-08 · Reverse engineering tools for Android
- [chame1eon/jnitrace](https://github.com/chame1eon/jnitrace): 1,864 stars · MIT · last push 2023-07 · A Frida based tool that traces usage of the JNI API in Android apps.
- [maddiestone/AndroidAppRE](https://github.com/maddiestone/AndroidAppRE): 1,568 stars · last push 2024-04 · Android App Reverse Engineering Workshop
- [deathmemory/FridaContainer](https://github.com/deathmemory/FridaContainer): 1,520 stars · last push 2025-11 · FridaContainer brings together popular online and custom-written Frida scripts to improve reverse engineering efficiency, with modular Frida scripts and Java/JNI tracing.
- [ViRb3/magisk-frida](https://github.com/ViRb3/magisk-frida): 1,473 stars · last push 2026-10 · 🔐 Run frida-server on boot with Magisk, always up-to-date
- [nccgroup/house](https://github.com/nccgroup/house): 1,468 stars · MIT · last push 2021-06 · A runtime mobile application analysis toolkit with a Web GUI, powered by Frida, written in Python.
- [DERE-ad2001/Frida-Labs](https://github.com/DERE-ad2001/Frida-Labs): 1,331 stars · MIT · last push 2026-02 · The repo contains a series of challenges for learning Frida for Android Exploitation.
- [P1sec/hermes-dec](https://github.com/P1sec/hermes-dec): 1,213 stars · AGPL-3.0 · last push 2026-10 · A reverse engineering tool for decompiling and disassembling the React Native Hermes bytecode
- [reversenseorg/dexcalibur](https://github.com/reversenseorg/dexcalibur): 1,180 stars · AGPL-3.0 · last push 2026-10 · Reversense (Dexcalibur2) is a fully rewriting and rethinking of Dexcalibur. Reversense is a binary intelligence platform that automates the reverse engineering of mobile and embedded applications.
- [sh4hin/Androl4b](https://github.com/sh4hin/Androl4b): 1,175 stars · last push 2023-05 · A Virtual Machine For Assessing Android applications, Reverse Engineering and Malware Analysis
- [anestisb/vdexExtractor](https://github.com/anestisb/vdexExtractor): 1,142 stars · Apache-2.0 · last push 2024-07 · Tool to decompile & extract Android Dex bytecode from Vdex files
- [Misaka-Mikoto-Tech/MonoHook](https://github.com/Misaka-Mikoto-Tech/MonoHook): 1,065 stars · MIT · last push 2023-09 · hook C# method at runtime without modify dll file (such as UnityEditor.dll), works on Windows, Mac, Android il2cpp(armv7a and armv8a)
- [LuckyPray/DexKit](https://github.com/LuckyPray/DexKit): 1,061 stars · Apache-2.0 · last push 2026-10 · An easy-to-use, high-performance dex deobfuscation library.
- [mitmproxy/android-unpinner](https://github.com/mitmproxy/android-unpinner): 1,053 stars · last push 2025-10 · Remove Certificate Pinning from APKs
- [suifei/fridare](https://github.com/suifei/fridare): 949 stars · MIT · last push 2026-09 · Powerful Frida repackaging tool for iOS and Android. Easily modify Frida signatures to enhance stealth and bypass detection. Streamlines reverse engineering and security testing.
- [tp7309/TTDeDroid](https://github.com/tp7309/TTDeDroid): 949 stars · Apache-2.0 · last push 2026-09 · One-click tool for quickly decompiling APK/AAR/DEX/JAR files, powered by jadx, dex2jar, and enjarify.
- [Margular/frida-skeleton](https://github.com/Margular/frida-skeleton): 882 stars · MIT · last push 2022-12 · A Frida-based Android hooking framework that provides many features Frida does not support itself, making Android hooking simple and accessible to everyone.
- [neocanable/garlic](https://github.com/neocanable/garlic): 861 stars · Apache-2.0 · last push 2026-10 · The world's fastest apk (android)/java open source decompiler
- [venshine/decompile-apk](https://github.com/venshine/decompile-apk): 823 stars · Apache-2.0 · last push 2025-06 · 🔥 Decompile APK
- [zinja-coder/jadx-mcp-server](https://github.com/zinja-coder/jadx-mcp-server): 803 stars · Apache-2.0 · last push 2026-10 · MCP server for JADX-AI Plugin
- [lixi5338619/lxBook](https://github.com/lixi5338619/lxBook): 768 stars · last push 2026-01 · Code repository for the book Advanced Practical Web Scraping Reverse Engineering.
- [yhs0602/Android-Disassembler](https://github.com/yhs0602/Android-Disassembler): 717 stars · MIT · last push 2026-03 · Disassemble any file on Android, including .so (NDK, JNI), Windows PE (EXE, DLL, SYS, etc.), Linux binaries and libraries, and even pictures, audio, and other files for fun. A Capstone-based Android disassembler and reversing app for Android NDK shared libraries, Windows binaries, and more.
- [secrary/Andromeda](https://github.com/secrary/Andromeda): 714 stars · Apache-2.0 · last push 2020-03 · Andromeda - Interactive Reverse Engineering Tool for Android Applications
- [horsicq/XAPKDetector](https://github.com/horsicq/XAPKDetector): 696 stars · MIT · last push 2026-10 · APK/DEX detector for Windows, Linux and MacOS.
- [SlickAmogus/silent-hill-decomp](https://github.com/SlickAmogus/silent-hill-decomp): 682 stars · GPL-3.0 · last push 2026-10 · Multiplatform and Feature-rich Port based on PSX decompilation of Silent Hill 1 made with Claude and Psycross. Still in beta and is in active development.
- [darbra/sign](https://github.com/darbra/sign): 675 stars · GPL-3.0 · last push 2024-06 · Ideas and experiences in reverse engineering app parameters, focused on Android.
- [evilpan/jni_helper](https://github.com/evilpan/jni_helper): 675 stars · last push 2025-02 · Find JNI function signatures in APK and apply to reverse-engineering tools.
- [lkimuk/ReArk](https://github.com/lkimuk/ReArk): 675 stars · Apache-2.0 · last push 2026-10 · An intelligent reverse engineering and AI-assisted analysis tool for HarmonyOS NEXT (HAP/APP/ABC), Android (APK/AAB), iOS (IPA), and native PE/ELF/Mach-O binaries.
- [zinja-coder/apktool-mcp-server](https://github.com/zinja-coder/apktool-mcp-server): 674 stars · Apache-2.0 · last push 2026-07 · A MCP Server for APK Tool (Part of Android Reverse Engineering MCP Suites)
- [yazgx97/frida-android-hook](https://github.com/yazgx97/frida-android-hook): 654 stars · MIT · last push 2024-11 · A tool that helps you work with frida easily for Android platform
- [bongtrop/hbctool](https://github.com/bongtrop/hbctool): 642 stars · MIT · last push 2023-12 · Hermes Bytecode Reverse Engineering Tool (Assemble/Disassemble Hermes Bytecode)
- [sledgeh4w/chomper](https://github.com/sledgeh4w/chomper): 631 stars · MIT · last push 2026-10 · A lightweight emulation framework for emulating cryptographic algorithms in iOS executables and libraries.
- [noodle1983/UnityAndroidIl2cppPatchDemo](https://github.com/noodle1983/UnityAndroidIl2cppPatchDemo): 578 stars · last push 2025-10 · Demo of a complete hot-update solution for Unity Android IL2CPP apps. Update the Unity path in build_demo_apk, then run it to rebuild the patch and APK in one step. The libunity file is not hot-updated, so this solution does not apply if the Unity version changes.
- [MJx0/KittyMemory](https://github.com/MJx0/KittyMemory): 562 stars · MIT · last push 2026-09 · C++ library for runtime memory patching, scanning, dumping, and module (ELF / Mach-O) introspection, targeting Android and iOS.
- [ImKKingshuk/LockKnife](https://github.com/ImKKingshuk/LockKnife): 549 stars · GPL-3.0 · last push 2026-10 · LockKnife: The Ultimate Android Security Research Tool. A unified TUI workspace and headless CLI for deep Android security research, built for researchers and hackers. Powered by Python orchestration and a Rust-accelerated core, enabling AI agent–driven hacking, credential recovery/cracking, APK analysis, intelligence gathering, runtime inspection.
- [CreditTone/android-reverse-engineering-skill](https://github.com/CreditTone/android-reverse-engineering-skill): 547 stars · Apache-2.0 · last push 2026-05 · An Android reverse engineering skill tailored for Codex. It supports decompiling APK, XAPK, JAR, and AAR files within Codex sessions and uses jadx and Fernflower/Vineflower to map out the Manifest, package structure, network layer, and call chains. It helps extract interfaces, URLs, authorization headers, tokens, and signing logic, and provides static reconnaissance methods before Frida, traffic capture, and JNI/SO analysis. Suitable for interface analysis, security research, and authorized testing.
- [Yricky/abcde](https://github.com/Yricky/abcde): 547 stars · Apache-2.0 · last push 2025-11 · OpenHarmony reverse engineering toolkit with preliminary decompilation support.
- [damaiqiangpiao/damai](https://github.com/damaiqiangpiao/damai): 538 stars · last push 2026-10 · Damai Maoyan Piaoxingqiu ticket grabbing tech community | Android reverse engineering Frida hook ticket monitor | QQ 955767910
- [CalebFenton/dex-oracle](https://github.com/CalebFenton/dex-oracle): 503 stars · MIT · last push 2019-03 · A pattern based Dalvik deobfuscator which uses limited execution to improve semantic analysis
- [lumirelle/android-killer](https://github.com/lumirelle/android-killer): 496 stars · MIT · last push 2026-01 · A classic, traditional, even old-fashioned Android decompilation tool. Make Android-killer Great Again!
- [ivan-sincek/android-penetration-testing-cheat-sheet](https://github.com/ivan-sincek/android-penetration-testing-cheat-sheet): 493 stars · MIT · last push 2026-04 · Work in progress...
- [Hrishikesh7665/Android-Pentesting-Checklist](https://github.com/Hrishikesh7665/Android-Pentesting-Checklist): 484 stars · last push 2024-10 · Delve into a comprehensive checklist, your ultimate companion for Android app penetration testing. Identify vulnerabilities in network, data, storage, and permissions effortlessly. Boost security skills with essential tools and user-friendly guides. Elevate Android security seamlessly!
- [Gyoonus/deoptfuscator](https://github.com/Gyoonus/deoptfuscator): 480 stars · MIT · last push 2022-06 · Deobfuscator for Android Application
- [feicong/sec_skills](https://github.com/feicong/sec_skills): 478 stars · AGPL-3.0 · last push 2017-07 · Software security engineer skills checklist
- [issuimo/UnityResolve.hpp](https://github.com/issuimo/UnityResolve.hpp): 470 stars · MIT · last push 2025-01 · Unity Engine C++ API for Mono/il2cpp. Supports Windows, Android, Linux, iOS, and HarmonyOS. Game cheating.
- [ksg97031/frida-gadget](https://github.com/ksg97031/frida-gadget): 464 stars · MIT · last push 2026-08 · Automated tool for patching APKs to enable the use of Frida gadget by downloading the library and injecting code into the main activity.
- [BryanGIG/PADumper](https://github.com/BryanGIG/PADumper): 463 stars · GPL-3.0 · last push 2026-01 · Process Android Memory Dumper
- [t0thkr1s/allsafe-android](https://github.com/t0thkr1s/allsafe-android): 441 stars · Apache-2.0 · last push 2025-09 · Intentionally vulnerable Android application.
- [Odrannnn/MetroidPrimePort](https://github.com/Odrannnn/MetroidPrimePort): 434 stars · last push 2026-10 · Native port of Metroid Prime (GameCube) for Linux, Windows and Android, built from the PrimeDecomp decompilation. No emulator, no game assets included: bring your own disc image.
- [Evil0ctal/AndroidReverse101](https://github.com/Evil0ctal/AndroidReverse101): 427 stars · MIT · last push 2025-12 · 📖 Learn Android reverse engineering systematically from zero to one, with a fun, engaging, beginner-friendly approach!
- [cxapython/mybackup-IT](https://github.com/cxapython/mybackup-IT): 420 stars · last push 2026-08 · Backup of technical articles on Android, JavaScript, assembly, and related reverse engineering.
- [ucsb-seclab/BootStomp](https://github.com/ucsb-seclab/BootStomp): 417 stars · BSD-2-Clause · last push 2022-01 · BootStomp: a bootloader vulnerability finder
- [TheQmaks/phantom-frida](https://github.com/TheQmaks/phantom-frida): 395 stars · MIT · last push 2026-10 · Build anti-detection Frida server from source. ~90 patches covering 16 detection vectors, weekly auto-builds with random names.
- [mirfansulaiman/Command-Mobile-Penetration-Testing-Cheatsheet](https://github.com/mirfansulaiman/Command-Mobile-Penetration-Testing-Cheatsheet): 392 stars · last push 2026-08 · Mobile penetration testing android & iOS command cheatsheet
- [ejfkdev/ddc](https://github.com/ejfkdev/ddc): 390 stars · MIT · last push 2026-10 · Android DEX → Java decompiler in Rust, built for speed — full apps in seconds, queries in milliseconds. Progressive analysis, javac-verified output, every DEX version, multi-dex & XAPK/APKS/APKM containers.
- [z3n70/Frida-Script-Runner](https://github.com/z3n70/Frida-Script-Runner): 381 stars · MIT · last push 2026-08 · Web-based Frida framework and toolkit for Android & iOS penetration testing, mobile security, and dynamic analysis, featuring AI-assisted Frida script generation.
- [ByNameModding/BNM-Android](https://github.com/ByNameModding/BNM-Android): 373 stars · MIT · last push 2025-10 · Modding il2cpp games by classes, methods, fields names on Android.
- [MartinStyk/apk-analyzer](https://github.com/MartinStyk/apk-analyzer): 371 stars · GPL-3.0 · last push 2026-10 · The most downloaded APK analysis app on Google Play. Detailed reports of every app on your device. No root, no ads, nothing leaves the phone.
- [Ayrx/JNIAnalyzer](https://github.com/Ayrx/JNIAnalyzer): 365 stars · last push 2023-01 · Analysis scripts for Ghidra to work with Android NDK libraries.
- [Mrack/TInjector](https://github.com/Mrack/TInjector): 363 stars · GPL-3.0 · last push 2026-01 · Hijack Zygote to inject a shared library before an app starts.
- [hackcatml/frida-flutterproxy](https://github.com/hackcatml/frida-flutterproxy): 362 stars · MIT · last push 2025-06 · Burp proxy flutter apps
- [hack0z/luject](https://github.com/hack0z/luject): 359 stars · Apache-2.0 · last push 2026-03 · 🍹A static injector of dynamic library for application (android, iphoneos, macOS, windows, linux)
- [alphaSeclab/android-security](https://github.com/alphaSeclab/android-security): 356 stars · last push 2020-03 · Android Security Resources.
- [morpheuslord/QuadraInspect](https://github.com/morpheuslord/QuadraInspect): 354 stars · MIT · last push 2026-09 · QuadraInspect is an Android framework that integrates AndroPass, APKUtil, and MobFS, providing a powerful tool for analyzing the security of Android applications.
- [mildsunrise/darter](https://github.com/mildsunrise/darter): 345 stars · AGPL-3.0 · last push 2026-02 · :detective: Dart / Flutter VM snapshot analyzer
- [chame1eon/jnitrace-engine](https://github.com/chame1eon/jnitrace-engine): 335 stars · MIT · last push 2023-07 · Engine used by jnitrace to intercept JNI API calls.
- [yazgx97/frida-intercept-encrypted-api](https://github.com/yazgx97/frida-intercept-encrypted-api): 333 stars · MIT · last push 2024-08 · A tool to help you intercept encrypted APIs in iOS or Android apps
- [nathanialf/ico-pc](https://github.com/nathanialf/ico-pc): 331 stars · last push 2026-10 · PC, Android, iOS and macOS port of the ICO (PS2) decompilation (nathanialf/ico): Windows, Linux, Steam Deck, Android, iPhone via LiveContainer and Apple-silicon Mac (contributed). Contains no game data.
- [f3rb123/kill_flutter](https://github.com/f3rb123/kill_flutter): 315 stars · MIT · last push 2026-09 · Flutter SSL Pinning Bypass Tool for Android & iOS — works on any Flutter version without pattern databases
- [LucasFaudman/apkscan](https://github.com/LucasFaudman/apkscan): 312 stars · last push 2024-07 · Scan for secrets, endpoints, and other sensitive data after decompiling and deobfuscating Android files. (.apk, .xapk, .dex, .jar, .class, .smali, .zip, .aar, .arsc, .aab, .jadx.kts).
- [zahidaz/jezail](https://github.com/zahidaz/jezail): 278 stars · MIT · last push 2026-02 · Android pentesting toolkit with REST API, web terminal, screen mirroring, Frida, and full device control from your rooted device
- [loerting/dalvikus](https://github.com/loerting/dalvikus): 273 stars · GPL-3.0 · last push 2026-02 · Android reverse-engineering tool / smali editor
- [talsec/Free-RASP-Android](https://github.com/talsec/Free-RASP-Android): 271 stars · MIT · last push 2026-09 · SDK providing threat detection and security monitoring for Android devices. Shield your app with free RASP for Android. Detect reverse engineering, root (Magisk), jailbreak, Frida, emulators, bots, tampering and integrity issues, obfuscation, VPN usage, malware, and monitor device identification and fingerprint.
- [Hamz-a/frida-android-helper](https://github.com/Hamz-a/frida-android-helper): 266 stars · MIT · last push 2024-01 · Frida Android utilities
- [nbauma109/jd-gui-duo](https://github.com/nbauma109/jd-gui-duo): 266 stars · GPL-3.0 · last push 2026-10 · A multi-decompiler standalone desktop GUI supporting JD-Core V0 & V1, CFR, Procyon, Fernflower, Vineflower & Jadx
- [Dr-hydra/Better-Endfield](https://github.com/Dr-hydra/Better-Endfield): 259 stars · AGPL-3.0 · last push 2026-10 · Modular Windows/Android toolkit for Arknights: Endfield: BEM model mods and creator tools, native plug-ins, MMD playback, camera/UI controls, character voices, title-screen customization, and PC combat/gacha tools.
- [ViRb3/apk-utilities](https://github.com/ViRb3/apk-utilities): 252 stars · last push 2025-08 · 🛠 Tools and scripts to manipulate Android APKs
- [Octowolve/Hooking-Template-With-Mod-Menu](https://github.com/Octowolve/Hooking-Template-With-Mod-Menu): 249 stars · GPL-3.0 · last push 2022-08 · A small template for Android Hooking with Substrate (Or Dobby. See branches). (Includes a mod menu written in Java)
- [adityatelange/frida-ui](https://github.com/adityatelange/frida-ui): 245 stars · MIT · last push 2026-03 · Interact with Frida devices, processes, and scripts directly from your browser.
- [Eltion/Facebook-SSL-Pinning-Bypass](https://github.com/Eltion/Facebook-SSL-Pinning-Bypass): 233 stars · GPL-3.0 · last push 2023-06 · Bypass Facebook SSL pinning on Android devices.
- [mpast/mobileAudit](https://github.com/mpast/mobileAudit): 229 stars · GPL-3.0 · last push 2026-10 · Django application that performs SAST and Malware Analysis for Android APKs
- [Mrack/TInjector_Symbi](https://github.com/Mrack/TInjector_Symbi): 224 stars · last push 2026-01 · More reliably hijacks Zygote to inject shared libraries before an app starts.
- [ac3ss0r/DroidFrida](https://github.com/ac3ss0r/DroidFrida): 218 stars · Apache-2.0 · last push 2023-07 · Portable frida injector for rooted android devices.
- [ADWMC/helm-d](https://github.com/ADWMC/helm-d): 217 stars · MIT · last push 2026-10 · DeepSeek Harness integrated security analysis plugin, covering Android, Web, Native, Protocol, Malware, and AI-Security (9 bundles and 1 preset).
- [Ablation-Tool/ablation](https://github.com/Ablation-Tool/ablation): 213 stars · last push 2026-10 · Ablation is an autonomous reverse engineering system.
- [MlgmXyysd/Il2CppMemoryDumper](https://github.com/MlgmXyysd/Il2CppMemoryDumper): 207 stars · last push 2026-02 · Dump Il2Cpp unprotected executable ELF and metadata from process memory
- [jd-opensource/arkdecompiler](https://github.com/jd-opensource/arkdecompiler): 203 stars · Apache-2.0 · last push 2026-07 · HarmonyOS NEXT decompiler
- [RevEngiSquad/revengi-app](https://github.com/RevEngiSquad/revengi-app): 202 stars · MIT · last push 2026-09 · Your all-in-one toolkit for reverse engineering: Smali Grammar, DexRepair, Flutter Analysis and much more...
- [user1342/Obfu-DE-Scate](https://github.com/user1342/Obfu-DE-Scate): 200 stars · GPL-3.0 · last push 2024-04 · Obfu[DE]scate is a de-obfuscation tool for Android APKs that uses fuzzy comparison logic to identify similarities between functions, even if they have been renamed as part of obfuscation. It compares two versions of an APK and generates a mapping text file and an interactive HTML file as outputs!
- [hackcatml/frida-ue4dump](https://github.com/hackcatml/frida-ue4dump): 195 stars · MIT · last push 2024-10 · UE4 dump frida script
- [IIIImmmyyy/UnityReverseEngine](https://github.com/IIIImmmyyy/UnityReverseEngine): 194 stars · last push 2026-09 · Decompile APK/IPA To UnityProject
- [xbyl1234/android_analysis](https://github.com/xbyl1234/android_analysis): 194 stars · last push 2025-10 · a few android analysis tools, jni trace by native hook, Java Object Format to Json for Xposed and Frida
- [revenge-mod/revenge-bundle-next](https://github.com/revenge-mod/revenge-bundle-next): 191 stars · GPL-3.0 · last push 2026-10 · 👊 Discord, your way. Revenge is a client modification for Discord Android.
- [Bian-Sh/Assemblies-Hotfix-Toolkit-Unity](https://github.com/Bian-Sh/Assemblies-Hotfix-Toolkit-Unity): 189 stars · last push 2022-09 · Assemblies hotfix with unity addressable , for windows and android , both mono and IL2CPP scripting backend,IL2CPP hotfix powered by wolong(HybridCLR)
- [Lexiie/Termux-Apktool](https://github.com/Lexiie/Termux-Apktool): 189 stars · last push 2019-02 · Decompile and Recompile android aplication use termux without openjdk installed
- [f3rb123/beetle](https://github.com/f3rb123/beetle): 182 stars · Apache-2.0 · last push 2026-07 · Modern offline-first Application Security Intelligence Platform for Android, iOS, Flutter and React Native with attack-chain analysis, explainable findings, source exploration, AI-assisted investigation and professional reporting.
- [NorthwaveSecurity/fridax](https://github.com/NorthwaveSecurity/fridax): 181 stars · MIT · last push 2023-04 · Fridax enables you to read variables and intercept/hook functions in Xamarin/Mono JIT and AOT compiled iOS/Android applications.
- [RaffaDNDM/HacknDroid](https://github.com/RaffaDNDM/HacknDroid): 181 stars · Apache-2.0 · last push 2025-12 · Automation of some MAPT activities and interaction with the mobile Android device.
- [vaginessa/virtual-apk](https://github.com/vaginessa/virtual-apk): 177 stars · last push 2024-11 · container/virtualization/sandbox apps on android
- [nszdhd1/UtilScript](https://github.com/nszdhd1/UtilScript): 176 stars · last push 2023-02 · A collection of Frida scripts.
- [aimardcr/akane-injector](https://github.com/aimardcr/akane-injector): 174 stars · last push 2026-06 · A kernel-assisted shared-library injector for Android. Loads any .so into a target process without ptrace, in-process dlopen, or visible traces in /proc/<pid>/maps. GKI 2.0 (Android 12-16).
- [okankurtuluss/FridaBypassKit](https://github.com/okankurtuluss/FridaBypassKit): 170 stars · last push 2025-06 · Android Universal Anti-Bypass Framework - Root, SSL Pinning, Emulator & Debug Detection Bypass
- [user1342/AutoDroid](https://github.com/user1342/AutoDroid): 164 stars · GPL-3.0 · last push 2024-04 · A tool for automating interactions with Android devices - including ADB, AndroGuard, and Frida interactivity.
- [huuck/Katalina](https://github.com/huuck/Katalina): 162 stars · MIT · last push 2026-10 · Katalina is like Unicorn but for Dalvik bytecode. It provides an environment that can execute Android bytecode one instruction at a time.
- [ZSA233/frida-analykit](https://github.com/ZSA233/frida-analykit): 156 stars · MIT · last push 2026-05 · A Frida toolkit focused on Android reverse engineering. Manages Frida environment versions and wraps commonly used low-level utilities for the Agent side, with MCP support. The code is currently developed and maintained mainly by AI.
- [in1nit1t/uniref](https://github.com/in1nit1t/uniref): 154 stars · AGPL-3.0 · last push 2024-04 · A Python coding framework for analyzing Unity applications.
- [ivan-sincek/malware-apk](https://github.com/ivan-sincek/malware-apk): 154 stars · MIT · last push 2026-07 · As a bug hunter, are your bug bounty reports getting rejected because you don't use a "malicious" Proof of Concept (PoC) app to exploit the vulnerabilities? I've got you covered!
- [LSPosed/dexsql-release](https://github.com/LSPosed/dexsql-release): 154 stars · last push 2026-10 · SQL for Android apk and dex files
- [omeraydindev/Dexter](https://github.com/omeraydindev/Dexter): 153 stars · GPL-3.0 · last push 2026-02 · An advanced DEX editor for Android.
- [Hamz-a/jeb2frida](https://github.com/Hamz-a/jeb2frida): 152 stars · MIT · last push 2023-06 · Automated Frida hook generation with JEB
- [TangGolang/TangGo](https://github.com/TangGolang/TangGo): 148 stars · last push 2024-12 · TangGo is a comprehensive testing platform developed in China by Wutang Information Technology Co., Ltd. using years of penetration-testing experience. It provides software testers and cybersecurity professionals with powerful, easy-to-use tools and a collaborative workspace, primarily for website functional testing, security testing, and security assessment.
- [nalajcie/tuya-sign-hacking](https://github.com/nalajcie/tuya-sign-hacking): 142 stars · last push 2019-03 · Tools for reverse-engineering and description of new TUYA API sign algorithm
- [corellium/corellium-android-unpacking](https://github.com/corellium/corellium-android-unpacking): 140 stars · last push 2025-11 · Android Unpacking Automation using Corellium Devices
- [Piasy/FridaAndroidTracer](https://github.com/Piasy/FridaAndroidTracer): 137 stars · MIT · last push 2018-04 · A runnable jar that generate Javascript hook script to hook Android classes.
- [SNGWN/Mobile-PT](https://github.com/SNGWN/Mobile-PT): 135 stars · last push 2025-07 · Mobile application security testing toolkit for Android, iOS & Flutter — ready-to-use FRIDA scripts (SSL pinning, root & anti-debug bypass, crypto monitoring), a full testing methodology, and hands-on guides.
- [frankheat/noxen](https://github.com/frankheat/noxen): 133 stars · GPL-3.0 · last push 2026-10 · Android interception tool for component communication and attack-surface mapping
- [baksmali/smali](https://github.com/baksmali/smali): 131 stars · last push 2026-08 · smali and baksmali - release artifacts for all versions (v3 by @google, v2 and v1 by @JesusFreke)
- [0x742/noia](https://github.com/0x742/noia): 129 stars · MIT · last push 2020-11 · [WIP] Simple mobile applications sandbox file browser tool. Powered with [frida.re](https://www.frida.re).
- [BitTheByte/Jarida](https://github.com/BitTheByte/Jarida): 127 stars · last push 2026-04 · Jarida (Jadx + Frida) is a Jadx GUI plugin that lets you trace and optionally patch Java method return values at runtime using Frida, directly from Jadx’s decompiled view.
- [UltraSina/androidReverse](https://github.com/UltraSina/androidReverse): 127 stars · last push 2026-08 · Android reverse engineering entirely on-device. Radare2 binary analysis, 8 Java decompilers, Flutter & Unity il2cpp support.
- [script-or-script/FlutterTap](https://github.com/script-or-script/FlutterTap): 126 stars · MIT · last push 2026-08 · Zygisk module that intercepts Flutter app traffic — redirects to a proxy and bypasses BoringSSL TLS pinning. Persistent, no Frida session. Installable via MMRL.
- [t0thkr1s/frida](https://github.com/t0thkr1s/frida): 126 stars · GPL-3.0 · last push 2024-04 · Frida scripts for mobile application dynamic-analysis.
- [0xSHAK1B/TIKTOK-SSL-Pinning-Bypass](https://github.com/0xSHAK1B/TIKTOK-SSL-Pinning-Bypass): 122 stars · MIT · last push 2026-10 · Bypass TikTok SSL/TLS certificate pinning on Android to intercept & analyze HTTPS traffic — root & no-root, works with Burp Suite, mitmproxy & Reqable (2026).
- [CYRUS-STUDIO/frida_dex_dump](https://github.com/CYRUS-STUDIO/frida_dex_dump): 118 stars · last push 2026-04 · A Frida-based Dex unpacking tool
- [Inverx/com.zjwh.android_wh_physicalfitness](https://github.com/Inverx/com.zjwh.android_wh_physicalfitness): 118 stars · MIT · last push 2026-10 · A pure-Python implementation of the Sports World Campus protocol, including NetSecKit 4.2.4, GeeTest v4, end-to-end protocol analysis, and an automation suite, independent of the Android app and native shared libraries.
- [asLody/dexdec](https://github.com/asLody/dexdec): 117 stars · Apache-2.0 · last push 2026-08 · Fast, accurate Android decompilation for humans and AI agents.
- [caverav/flutterdec](https://github.com/caverav/flutterdec): 117 stars · MIT · last push 2026-10 · The Flutter Decompiler: CLI tool that decompiles Flutter Android AOT (libapp.so) into Dart-like pseudocode, supporting obfuscated builds.
- [yasminefolo/reverse-engineering-is-over](https://github.com/yasminefolo/reverse-engineering-is-over): 111 stars · last push 2026-05 · LLMs have ended reverse engineering as a high-barrier skill. Case study: reconstructing 6/7 custom HTTP signing parameters of Douyin (TikTok CN) v38.1.0 native library in 30 days using Claude Opus.
- [tiwe0/r0dump](https://github.com/tiwe0/r0dump): 108 stars · last push 2026-09 · Android 16 ART-integrated DEX dumper & repair toolkit inspired by FART. In-memory DEX reconstruction, R0dump Manager, and portable AOSP/LineageOS patches.
- [NeonOrbit/Dexplore](https://github.com/NeonOrbit/Dexplore): 107 stars · Apache-2.0 · last push 2024-05 · A dex analyzer for finding obfuscated codes dynamically
- [vw2x/Mira](https://github.com/vw2x/Mira): 106 stars · GPL-3.0 · last push 2026-10 · Mobile runtime detection workbench for AI (iOS and Android)
- [actuator/DEFCON-33](https://github.com/actuator/DEFCON-33): 105 stars · last push 2026-06 · Hacking Hotspots: Pre-Auth Remote Code Execution, Arbitrary SMS & Adjacent Attacks on 5G & 4G/LTE Routers
- [adityatelange/MobSleuth](https://github.com/adityatelange/MobSleuth): 102 stars · MIT · last push 2024-07 · Scripts to set up your own Android 📱 app hacking lab
- [fluofoxxo/outrun](https://github.com/fluofoxxo/outrun): 101 stars · GPL-3.0 · last push 2024-06 · A Sonic Runners custom server.
- [SyscallX-18113/Apkx-Hunter](https://github.com/SyscallX-18113/Apkx-Hunter): 101 stars · Apache-2.0 · last push 2026-10 · Apkx-Hunter is an Android Static Analysis Framework in Debian Package written entirely in C with OWASP MASVS scanning with 15 categories and 166 detection patterns for Android security assessments, reverse engineering, malware analysis, and penetration testing. It features ML-based secret scoring, and advanced static security analysis.
- [themalwarenews/frida_rootandsslbypass](https://github.com/themalwarenews/frida_rootandsslbypass): 100 stars · last push 2023-05 · With this script you can bypass both root detection and ssl pinning for your android app.
- [darvincisec/DetectTamper](https://github.com/darvincisec/DetectTamper): 95 stars · MIT · last push 2021-03 · Tamper detection in Android
- [cybersecsi/robodroid](https://github.com/cybersecsi/robodroid): 91 stars · GPL-3.0 · last push 2024-01 · Manage Android machines with pre-defined behaviors for Cyber Range environments.
- [ChupathingyCE/chupathingyce](https://github.com/ChupathingyCE/chupathingyce): 90 stars · GPL-3.0 · last push 2026-10 · Chupathingy: Halo: Combat Evolved running natively on Windows, Mac, Linux and Android. A port of the Halo CE decomp project, built for stability and community multiplayer, with its own dedicated servers and the Delta network.
- [giacomoferretti/paranoid-deobfuscator](https://github.com/giacomoferretti/paranoid-deobfuscator): 90 stars · Apache-2.0 · last push 2025-03 · Deobfuscate "paranoid" protected apps
- [0xdad0/PAPIMonitor](https://github.com/0xdad0/PAPIMonitor): 89 stars · MIT · last push 2024-07 · Python API Monitor for Android apps
- [andpalmier/apkingo](https://github.com/andpalmier/apkingo): 89 stars · Apache-2.0 · last push 2026-09 · extract info from apk files
- [flpflan/u-freecam](https://github.com/flpflan/u-freecam): 88 stars · MIT · last push 2026-07 · Unity Freecam (Internal)
- [horangi-cyops/flutter-ssl-pinning-bypass](https://github.com/horangi-cyops/flutter-ssl-pinning-bypass): 87 stars · last push 2021-08 · Horangi tools for Android penetration testing
- [PenguinAndy/il2Fusion](https://github.com/PenguinAndy/il2Fusion): 86 stars · MIT · last push 2026-06 · A Unity and Cocos2d-x Lua game reverse engineering toolkit for Android, built on LSPosed, JNI, and native hook backends. Features Il2Cpp dump generation, text interception, Cocos runtime text capture, Lua replacement rules, cross-process configuration synchronization, and integrated on-device tooling for efficient analysis and debugging.
- [A7cc/Vulnerabilities_Server](https://github.com/A7cc/Vulnerabilities_Server): 83 stars · MIT · last push 2026-02 · A practical Web and app security training environment integrating multiple programming languages.
- [az0mb13/frida_setup](https://github.com/az0mb13/frida_setup): 83 stars · last push 2026-04 · One-click installer for Frida and Burp certs for SSL Pinning bypass
- [hyugogirubato/Frida-CodeShare](https://github.com/hyugogirubato/Frida-CodeShare): 81 stars · GPL-3.0 · last push 2026-02 · Frida scripts for intercepting and modifying the behavior of Android apps at runtime.
- [iGio90/FridaAndroidTracer](https://github.com/iGio90/FridaAndroidTracer): 81 stars · last push 2020-04 · Android application tracer powered by Frida
- [astra1dev/MalumMenu-Android](https://github.com/astra1dev/MalumMenu-Android): 80 stars · GPL-3.0 · last push 2026-10 · Among Us Cheat Menu for Android
- [yoavst/JebOps](https://github.com/yoavst/JebOps): 80 stars · MIT · last push 2024-10 · Plugins for reversing android apps in JEB
- [zylc369/OpenSecurity](https://github.com/zylc369/OpenSecurity): 80 stars · Apache-2.0 · last push 2026-10 · An AI-powered, multi-domain security analysis agent platform that enables LLMs to perform security analysis end to end.
- [freedom-wy/reverse_android](https://github.com/freedom-wy/reverse_android): 78 stars · last push 2019-10 · Android: from development to reverse engineering.
- [maarsalien/frida-android-mod-menu](https://github.com/maarsalien/frida-android-mod-menu): 78 stars · MIT · last push 2023-07 · A Frida Mod Menu for Android Games inspired by Android-Mod-Menu by LGLTeam
- [stray-coding/ADT](https://github.com/stray-coding/ADT): 78 stars · last push 2024-04 · A decompilation tool for quickly decompiling APKs, converting DEX to JAR and JAR to DEX, signing, aligning, generating patches, and more.
- [wargio/fufluns](https://github.com/wargio/fufluns): 78 stars · GPL-3.0 · last push 2022-06 · Easy to use APK/IPA Mobile App Inspector
- [Xposed-Modules-Repo/com.fuck.iab](https://github.com/Xposed-Modules-Repo/com.fuck.iab): 77 stars · MIT · last push 2026-10 · FKIAB - f**ks in app billing
- [apk-spectrum/apk-scanner](https://github.com/apk-spectrum/apk-scanner): 75 stars · Apache-2.0 · last push 2026-03 · The APK Scanner show the APK information via double click on your PC.
- [hackcatml/mlviewer](https://github.com/hackcatml/mlviewer): 75 stars · GPL-3.0 · last push 2025-05 · Mobile app memory view & edit PyQt6 program
- [jygzyc/decx](https://github.com/jygzyc/decx): 75 stars · GPL-3.0 · last push 2026-10 · DECX - Decompiler + X
- [secnotes/FridaHookAndroid](https://github.com/secnotes/FridaHookAndroid): 74 stars · last push 2023-03 · Advanced Frida-Android techniques
- [timschneeb/jadx-type-diagram-plugin](https://github.com/timschneeb/jadx-type-diagram-plugin): 73 stars · GPL-3.0 · last push 2026-08 · Type diagram plugin for JADX decompiler
- [dodola/SimpleSmali](https://github.com/dodola/SimpleSmali): 72 stars · Apache-2.0 · last push 2017-02 · Defines a simple custom syntax that trims Smali syntax details to improve the readability of decompiled code.
- [TheQmaks/areclaw](https://github.com/TheQmaks/areclaw): 71 stars · MIT · last push 2026-07 · Android Reverse Engineering Command-Line Automation Workspace. AI-driven security analysis with Claude Code.
- [gourav001-s/DroidXploit](https://github.com/gourav001-s/DroidXploit): 70 stars · MIT · last push 2026-04 · DroidXploit – An all-in-one Android security assessment framework for rooted emulators, providing a modular CLI for enumeration, runtime analysis, and exploitation research.
- [Raunaksplanet/Learn-android-bug-bounty](https://github.com/Raunaksplanet/Learn-android-bug-bounty): 70 stars · last push 2026-09 · Documenting all the sources from where I'm learning Mobile(adnroid/IOS) bug bounty so if another researcher want to start with mobile bug bounty he/she don't struggle for resources
- [robertohuertasm/apk-decompiler](https://github.com/robertohuertasm/apk-decompiler): 70 stars · MIT · last push 2019-06 · Small Rust utility to decompile Android apks
- [TheQmaks/clsdumper](https://github.com/TheQmaks/clsdumper): 68 stars · MIT · last push 2026-03 · Android Dynamic Class Dumper — dump all DEX files from running Android apps using Frida
- [TheQmaks/soSaver](https://github.com/TheQmaks/soSaver): 68 stars · MIT · last push 2026-02 · A Frida-based utility for dynamically extracting native (.so) libraries from Android applications.
- [kaifcodec/apk-patchx](https://github.com/kaifcodec/apk-patchx): 67 stars · MIT · last push 2025-11 · apk-patchx a command-line tool that makes APK manipulation & frida-gadget injection fast, automated, modular, and developer-friendly.
- [bannsec/revenge](https://github.com/bannsec/revenge): 65 stars · last push 2024-05 · REVerse ENGineering Environment
- [Ms-dev3/EmulatorDetectionByPass](https://github.com/Ms-dev3/EmulatorDetectionByPass): 64 stars · last push 2023-08 · Test case to check for emulator detection bypass using frida and termux in android and how your application reacts to js injection.
- [Kimjio/umamusume-localify-android](https://github.com/Kimjio/umamusume-localify-android): 62 stars · MIT · last push 2026-10 · Android port of umamusume-localify
- [asmjmp0/AndroidRunnableJadx](https://github.com/asmjmp0/AndroidRunnableJadx): 61 stars · Apache-2.0 · last push 2023-02 · run java method of Android in Jadx without Android device.
- [macedonga/visor](https://github.com/macedonga/visor): 61 stars · AGPL-3.0 · last push 2026-10 · A de-metaified Meta Glasses client.
- [seedhollow/R3DNETWORK](https://github.com/seedhollow/R3DNETWORK): 58 stars · GPL-3.0 · last push 2026-02 · Android Mod Menu Template based on LGL Mod Menu with auto update offsets
- [ac3ss0r/frida-il2cpp-agent](https://github.com/ac3ss0r/frida-il2cpp-agent): 57 stars · last push 2023-05 · Example of frida il2cpp bridge library usage
- [Evil0ctal/Reverse-Engineering-Online-Toolkit](https://github.com/Evil0ctal/Reverse-Engineering-Online-Toolkit): 54 stars · Apache-2.0 · last push 2026-03 · Reverse Engineering Online Toolkit (REOT) is a browser-only toolkit for reverse engineering and web scraping. It provides security researchers, reverse engineers, web scraping engineers, and developers with convenient, efficient tools that require no installation, covering common encoding, decoding, encryption, decryption, and data conversion tasks.
- [vaibhavpandeyvpz/deapk](https://github.com/vaibhavpandeyvpz/deapk): 52 stars · last push 2020-03 · DeAPK is an open-source, online APK decompiler which lets you upload an APK and then decompile it to Smali or Java sources. It is built using Laravel, Vue.js, Bootstrap, FontAwesome, Pusher, Redis, MySQL, apktool, jadx and hosted atop Oracle cloud platform.
- [jbro129/Universal-Unity-NoClip](https://github.com/jbro129/Universal-Unity-NoClip): 50 stars · last push 2021-07 · A universal way to create a noclip mod in Unity games (Mono/IIL2CPP)
- [irrisolto/skyscanner](https://github.com/irrisolto/skyscanner): 49 stars · GPL-3.0 · last push 2025-09 · A Python client library for interacting with the Skyscanner flight and car rental APIs
- [repinek/fallguys-frida-modmenu](https://github.com/repinek/fallguys-frida-modmenu): 49 stars · GPL-3.0 · last push 2026-08 · Android Fall Guys mod menu using Frida and frida-il2cpp-bridge
- [0rShemesh/jadx-magic-strings](https://github.com/0rShemesh/jadx-magic-strings): 46 stars · Apache-2.0 · last push 2026-09 · JADX plugin that extracts method names, class references, and source file paths from string constants found in DEX files and decompiled Android code.
- [AgarwalKritik/garlic-gui](https://github.com/AgarwalKritik/garlic-gui): 44 stars · Apache-2.0 · last push 2026-07 · Garlic Decompiler (GUI) - A modern C++/Qt6 desktop interface for the Garlic Decompiler, bringing blazing-fast APK, DEX, JAR, and CLASS decompilation to Windows, Linux, and macOS.
- [gzu-liyujiang/ApkDecompiler](https://github.com/gzu-liyujiang/ApkDecompiler): 41 stars · WTFPL · last push 2019-12 · An APK decompilation assistant for Linux, packaged as ApkDecompiler.deb, supporting Debian-based distributions including Debian, Ubuntu, Mint, and Deepin.
- [muhammadrizwan87/il2cppdumper](https://github.com/muhammadrizwan87/il2cppdumper): 41 stars · last push 2026-06 · A native Android library that dump il2cpp (class/method/field) from any running Unity il2cpp app/game, entirely inside the process. No root, No adb, No frida, No zygisk.
- [harismuneer/AndroCompare](https://github.com/harismuneer/AndroCompare): 38 stars · MIT · last push 2025-01 · ⚙️ An efficient tool to do in-depth comparison of two android apps.
- [Octowolve/il2cpp-hacking](https://github.com/Octowolve/il2cpp-hacking): 38 stars · GPL-3.0 · last push 2020-10 · No description supplied by the upstream repository.
- [ZemerTeam/zemer-cipher](https://github.com/ZemerTeam/zemer-cipher): 38 stars · GPL-3.0 · last push 2026-10 · YouTube cipher deobfuscation, n-transform & PoToken (BotGuard) generation - a standalone Android library (Kotlin) with self-healing remote player configs.
- [BroNils/aotopsy](https://github.com/BroNils/aotopsy): 37 stars · BSD-3-Clause · last push 2026-10 · Static analyzer for Flutter/Dart AOT snapshots — recovers function names, class hierarchies, call graphs, and behavioral signals from libapp.so without embedding or executing the Dart VM. Supports ARM64 and x86_64, Dart 2.10–3.12.
- [YuutaTsubasa/ChaotixRecompiled](https://github.com/YuutaTsubasa/ChaotixRecompiled): 37 stars · MIT · last push 2026-10 · Static recompilation of the Sega 32X game Knuckles' Chaotix into native C++ (Windows/Linux/macOS/Android), with true widescreen. Bring your own ROM; no game data included.
- [AyaanB-DotCom/android-tv-supply-chain-malware](https://github.com/AyaanB-DotCom/android-tv-supply-chain-malware): 36 stars · MIT · last push 2026-08 · Hardware-level firmware extraction and malware analysis of a $25 Android TV box
- [FirmwareDroid/FirmwareDroid](https://github.com/FirmwareDroid/FirmwareDroid): 36 stars · GPL-3.0 · last push 2026-10 · FirmwareDroid is an analysis framework for Android firmware and Apps.
- [kamushadenes/apkrash](https://github.com/kamushadenes/apkrash): 36 stars · MIT · last push 2026-08 · APKrash is an Android APK security analysis toolkit focused on comparing APKs to detect tampering and repackaging.
- [aloaf812/GD](https://github.com/aloaf812/GD): 35 stars · last push 2026-10 · A decompilation of Geometry Dash version 1.710
- [qusamulab/kagura](https://github.com/qusamulab/kagura): 34 stars · MIT · last push 2026-10 · LLVM pass plugin for native code obfuscation and anti-tamper. CFG flattening, string encryption, VM virtualization, anti-cheat, and more. iOS · Android · macOS · Windows · Wasm.
- [argus-sight/BinSight](https://github.com/argus-sight/BinSight): 33 stars · MIT · last push 2025-07 · Analyze the so file in APK through LLM+Capstone to determine the main intention of the so file and the developer (company)
- [nyancrimew/apkrev](https://github.com/nyancrimew/apkrev): 33 stars · MIT · last push 2022-08 · android app reverse engineering pipeline
- [BitTheByte/Orkestra](https://github.com/BitTheByte/Orkestra): 32 stars · last push 2023-06 · Web-based Android debugger with inspection capabilities using Frida and Jadx as a backbone
- [Qtty/jadx-mcp-server](https://github.com/Qtty/jadx-mcp-server): 32 stars · last push 2026-08 · A Pure-Java MCP Server for JaDX Android Reverse Engineering Tool
- [andrebrumdev/gow2-recomp](https://github.com/andrebrumdev/gow2-recomp): 29 stars · MIT · last push 2026-10 · God of War II HD static recompilation — curated work artifacts (lift boundaries, SPU lift sources, scripts, findings). Game data & build artifacts excluded.
- [lm060719/reconbridge](https://github.com/lm060719/reconbridge): 29 stars · MIT · last push 2026-10 · A general-purpose KernelSU module for reverse-engineering analysis: the phone provides only atomic capabilities, while all intelligence runs on the PC (Claude Code + MCP). For authorized security research and educational use only.
- [capt-meelo/loupe](https://github.com/capt-meelo/loupe): 28 stars · MIT · last push 2026-10 · Browser-based Android console, APK decompiler and security analyzer. Mirror, logcat, shell, Frida, jadx, and static and dynamic analysis, with no drivers or adb server.
- [solo12345689/moviebox-internal-api](https://github.com/solo12345689/moviebox-internal-api): 25 stars · last push 2026-10 · MovieBox Pro app Protocol & Architecture Analysis — reverse engineering research documenting API structure, authentication flow, streaming delivery, and regional content systems discovered via APK decompilation and traffic analysis.
- [sufyandaredevil/abh](https://github.com/sufyandaredevil/abh): 25 stars · last push 2024-05 · Notes taken from Android App Hacking - Black Belt Edition (UDEMY - Roman Stuehler)
- [Shubzz-02/Il2CppDumper](https://github.com/Shubzz-02/Il2CppDumper): 24 stars · last push 2020-06 · Reverse android Games Made with unity
- [retrowave3/emulite](https://github.com/retrowave3/emulite): 23 stars · last push 2026-09 · Emulation framework for Android & iOS native libraries
- [AetherVM/AetherVM](https://github.com/AetherVM/AetherVM): 22 stars · Apache-2.0 · last push 2026-10 · AetherVM - Lift. Instrument. Emulate. Recover.
- [Anonym0usWork1221/Telegram-Reverse-Master-Bot](https://github.com/Anonym0usWork1221/Telegram-Reverse-Master-Bot): 21 stars · last push 2024-03 · Powerful All-in-One Telegram Bot for Developers and Security Professionals.
- [elrashedy1992/APKnife](https://github.com/elrashedy1992/APKnife): 21 stars · MIT · last push 2025-03 · APKnife is an advanced APK analysis and modification tool designed for security researchers and ethical hackers. It allows users to extract, analyze, modify, and sign APK files. The tool provides features like APK extraction, AndroidManifest.xml editing, API call detection, vulnerability scanning, and APK signing
- [Batchhh/il2cpp-bridge-rs](https://github.com/Batchhh/il2cpp-bridge-rs): 20 stars · MIT · last push 2026-07 · A high-performance Rust bridge to Unity's IL2CPP runtime — resolve types, invoke methods, and manipulate Unity objects from native code
- [nbauma109/ecd](https://github.com/nbauma109/ecd): 20 stars · EPL-1.0 · last push 2026-10 · ECD++ - Fork of Enhanced Class Decompiler - integrate modern Java decompilers seamlessly into the development workflow
- [YuujiLab/HY300-H713-Research](https://github.com/YuujiLab/HY300-H713-Research): 20 stars · last push 2026-10 · Research, firmware analysis, full firmware dump, and root method for the Magcubic HY300 Pro+ (Allwinner H713, Android 11).
- [deadboy18/Ocrustar-USB-IR](https://github.com/deadboy18/Ocrustar-USB-IR): 19 stars · MIT · last push 2026-05 · Reverse-engineered protocol and open-source Python driver for the Ocrustar / ElkSmart USB IR blaster (VID 045C / PID 02AA). Learn and transmit IR signals without the app. Includes full APK decompilation, Huffman encoding analysis, Kookong cloud API documentation, and BLE protocol.
- [IR0NBYTE/Jadart](https://github.com/IR0NBYTE/Jadart): 19 stars · MIT · last push 2026-10 · Jadart is a fast Flutter decompiler designed for Agents/Mobile Security Researchers.
- [ridhoae303/android-frida-hooks](https://github.com/ridhoae303/android-frida-hooks): 19 stars · last push 2026-08 · A simple multi-purpose Frida hook script for spoofing and basic bypass testing.
- [zahidaz/refrida](https://github.com/zahidaz/refrida): 19 stars · MIT · last push 2026-02 · Browser-based IDE for frida-server
- [Gindhar2112/frida-mcp](https://github.com/Gindhar2112/frida-mcp): 18 stars · last push 2026-10 · Enable AI-driven automated Android dynamic analysis by controlling Frida through the Model Context Protocol for streamlined reverse engineering.
- [PalmDevs/covalent](https://github.com/PalmDevs/covalent): 18 stars · GPL-3.0 · last push 2026-10 · 🔗 An elegant Android modification framework for React Native. Inspect and modify production React Native apps live!
- [rmeadomavic/ax12-research](https://github.com/rmeadomavic/ax12-research): 18 stars · MIT · last push 2026-07 · RadioMaster AX12 hardware reverse engineering — UMBUS protocol spec, native library analysis, device tree, tools, and developer setup guide
- [AgeloVito/jd-mcp-duo](https://github.com/AgeloVito/jd-mcp-duo): 17 stars · MIT · last push 2026-06 · A multi-decompiler MCP server and CLI toolkit for Java, supporting JD-Core v0 & v1, CFR, Procyon, Fernflower, Vineflower & JADX.
- [repinek/SonolusReverse](https://github.com/repinek/SonolusReverse): 17 stars · GPL-3.0 · last push 2026-10 · Mod for the Sonolus rhythm game with extra features, written using Frida and frida-il2cpp-bridge
- [SaceViewer/Sace](https://github.com/SaceViewer/Sace): 17 stars · last push 2026-08 · A tool designed for low-level examination and modification of Unreal Engine game assets by hand.
- [Schwartzblat/MoovitPatcher](https://github.com/Schwartzblat/MoovitPatcher): 17 stars · last push 2026-10 · A patcher for the moovit application to unlock premium features and removed ads.
- [ifeng113/debug4j](https://github.com/ifeng113/debug4j): 16 stars · Apache-2.0 · last push 2026-07 · An efficient and user-friendly Java debugging tool.
- [Masterllgod/naruto-storm-generations-port-nativo](https://github.com/Masterllgod/naruto-storm-generations-port-nativo): 16 stars · last push 2026-10 · Naruto Shippuden: Ultimate Ninja Storm Generations (Xbox 360) running natively on Android and PC: static recompilation, without a CPU emulator.
- [ax/DEXPatch](https://github.com/ax/DEXPatch): 15 stars · last push 2025-04 · Surgically inject a System.loadLibrary() into a dex.
- [DarkRideApp/DarkRide](https://github.com/DarkRideApp/DarkRide): 15 stars · AGPL-3.0 · last push 2026-10 · AI-powered mobile application reverse engineering and network traffic analysis toolkit
- [Ishanoshada/Ultimate-Frida-Bypass](https://github.com/Ishanoshada/Ultimate-Frida-Bypass): 15 stars · last push 2026-10 · Complete Frida script that bypasses 19 layers of Android security including Talsec, freeRASP, PairIP, SSL pinning, root detection, emulator detection, and custom Frida detection mechanisms
- [AcE77505/BlutterAndroid](https://github.com/AcE77505/BlutterAndroid): 14 stars · MIT · last push 2026-09 · App-integrated Blutter: on-device Flutter/Dart AOT reverse engineering for Android (Dart 2.14~3.13, 70 versions)
- [Humoud/apksneeze-lab](https://github.com/Humoud/apksneeze-lab): 14 stars · last push 2020-09 · Analyze Android APK files from a browser.
- [kittycache9/OpenSA2](https://github.com/kittycache9/OpenSA2): 14 stars · GPL-3.0 · last push 2026-10 · A native Sonic Adventure 2 port by static recompilation for Linux, Windows, and Android. Experimental source preview.
- [NoobDigital/react-native-shieldscan](https://github.com/NoobDigital/react-native-shieldscan): 13 stars · MIT · last push 2026-08 · Instant device integrity + screen protection for React Native. Detect root/jailbreak, Frida, debugger attachment, emulator environments, hooking frameworks — and protect sensitive screens with background blur, screenshot blocking, and screen‑recording detection.
- [yaron4u/pi-android-re](https://github.com/yaron4u/pi-android-re): 13 stars · Apache-2.0 · last push 2026-05 · Android RE skills for Pi coding agent - static (decompile/API extraction) + dynamic (Frida hooking/bypass)
- [bytebuff/androidSpider](https://github.com/bytebuff/androidSpider): 12 stars · last push 2019-10 · Android reverse-engineering web crawler.
- [aleisalem/Aion](https://github.com/aleisalem/Aion): 11 stars · GPL-3.0 · last push 2018-04 · A framework for analysis, stimulation, and detection of Android repackaged malware (under construction)
- [Birkenpapier/ai-app-cloner](https://github.com/Birkenpapier/ai-app-cloner): 11 stars · MIT · last push 2026-07 · Clone a mobile app into a working Expo / React Native project from screenshots. An open-source Claude Code skill.
- [Encryptism/RevAPK-Tool](https://github.com/Encryptism/RevAPK-Tool): 10 stars · last push 2024-07 · A tool to analyze InfoPlist , Reverse Engineering APK
- [FURQANAHMAD34/universal-re-skill](https://github.com/FURQANAHMAD34/universal-re-skill): 10 stars · last push 2026-07 · Universal reverse engineering, 40+ vuln classes & working PoC generation for Android/iOS/Windows PE/Linux ELF/macOS/.NET - an AI-agnostic skill for Claude Code, Cursor, Copilot, Windsurf, Aider, Amazon Q & any LLM.
- [holisound/haokan](https://github.com/holisound/haokan): 10 stars · last push 2019-07 · From late 2018 to the first half of 2019, packet-capture tools revealed a parameter-signature vulnerability in 🎦 Haokan Video. It was successfully exploited to farm coins and redeem them for cash over six months.
- [MikeSemicolonD/RogueSquadron64Recomp](https://github.com/MikeSemicolonD/RogueSquadron64Recomp): 10 stars · last push 2026-10 · A fully playable (AI assisted) static recompilation of Star Wars: Rogue Squadron on N64 for the Windows 10, Linux & Android
- [wr3nchsr/candytools](https://github.com/wr3nchsr/candytools): 10 stars · GPL-3.0 · last push 2023-02 · Android OTA image analysis preprocessing automation tool.
- [zhangdeepseek/apks2opencode](https://github.com/zhangdeepseek/apks2opencode): 10 stars · MIT · last push 2026-10 · An APK-to-opencode pipeline based on jadx-ai-mcp-server, jrag, and evil-opencode.
- [abhiabby3008/flutter-reverse-engineering-skill](https://github.com/abhiabby3008/flutter-reverse-engineering-skill): 9 stars · MIT · last push 2026-04 · Claude Code skill to reverse engineer any Flutter app — from source code, APK files, or live devices via ADB. Extracts architecture, dependencies, API endpoints, domain models, and more.
- [brianmerchant/Kaze-for-DJI](https://github.com/brianmerchant/Kaze-for-DJI): 9 stars · MIT · last push 2026-08 · Experimental open-source control app for DJI Osmo cameras, with hardware-tested Pocket 3 support.
- [dantech0xff/pencil-blade-2026](https://github.com/dantech0xff/pencil-blade-2026): 9 stars · last push 2026-07 · Clean-room reconstruction of Pencil Blade 1.5 from static evidence, rebuilt with Cocos Creator 3.8.8 and TypeScript.
- [lhr0909/richman4-remastered](https://github.com/lhr0909/richman4-remastered): 9 stars · GPL-3.0 · last push 2026-10 · Native C++/SDL3 port of 大富翁4 (Richman 4) for macOS, Android and iOS — requires your own copy of the game (buy it on Steam). Unofficial; not affiliated with SOFTSTAR.
- [at0m-b0mb/AndroidROMExtractor](https://github.com/at0m-b0mb/AndroidROMExtractor): 8 stars · MIT · last push 2026-10 · Scriptable toolkit for backing up, extracting, and analyzing Android ROM images. Supports forensic analysis, device recovery, and firmware flashing operations with Python automation.
- [boy-offi9-inc/hexforge-gateway](https://github.com/boy-offi9-inc/hexforge-gateway): 8 stars · MIT · last push 2026-10 · Self-hosted reverse-engineering workspace API — orchestrates jadx/apktool/adb/frida/APKiD via a job & workflow engine, exposed as native MCP tools for Claude. No cloud required.
- [c4x64/droid-re-chain](https://github.com/c4x64/droid-re-chain): 8 stars · MIT · last push 2026-05 · MCP server for headless AI-driven Android reverse engineering — 122 tools across 8 categories for ADB, NDK, il2cpp, hooking, crash trapping, memory analysis, Frida, and APK manipulation
- [coding-dream/Apkparser](https://github.com/coding-dream/Apkparser): 8 stars · Apache-2.0 · last push 2018-01 · Technology-stack analysis for mainstream apps and a PlantUML generation tool.
- [DeFexNN/NightcoreLiosImgui](https://github.com/DeFexNN/NightcoreLiosImgui): 8 stars · last push 2026-06 · ImGui overlay for Unity Android games — three injection variants (JNI, Zygisk, Magisk), IL2CPP introspection, 100+ anti-cheat bypass patches
- [pepperonas/navee-st3-pro](https://github.com/pepperonas/navee-st3-pro): 8 stars · MIT · last push 2026-04 · Navee ST3 Pro reverse-engineering archive: BLE/UART protocol, Android controller app, firmware analysis, post-mortem (software speed unlock not feasible)
- [alvinhayy/Mobile-ReverseSkill](https://github.com/alvinhayy/Mobile-ReverseSkill): 7 stars · MIT · last push 2026-09 · Reusable Agent Skills for mobile reverse engineering & Android native fuzzing (AFL++ on-device, stub-JNIEnv harness) — installable via skillfish
- [BitTheByte/Manisec](https://github.com/BitTheByte/Manisec): 7 stars · last push 2025-12 · Jadx GUI plugin that scans AndroidManifest.xml for security-relevant signals
- [Hen-Dricks/HY300-Ultimate](https://github.com/Hen-Dricks/HY300-Ultimate): 7 stars · last push 2026-07 · A comprehensive reverse engineering study of the HY300 Android projector (Rockchip RK3326): firmware analysis, security audit, OEM component dissection, and custom ROM reconstruction.
- [hits313/alab](https://github.com/hits313/alab): 7 stars · MIT · last push 2026-05 · Zero-Studio Android pentest lab — one-command rooted AVD with Magisk+Zygisk, Frida 17.2.14, Burp system-cert, SSL unpinning. Developed by hits.
- [qinghemuyu/memagent-kpm](https://github.com/qinghemuyu/memagent-kpm): 7 stars · GPL-2.0 · last push 2026-08 · In-kernel physical memory acquisition agent for Android — a KernelPatch module (KPM) that serves fault-safe physical RAM reads over TCP (PSK auth, ~59 MB/s over adb forward). leechagent-style DFIR/research tool, boot-image embeddable. GPL-2.0.
- [rashmiranjanp/frida-reversing-lab](https://github.com/rashmiranjanp/frida-reversing-lab): 7 stars · last push 2026-10 · 🧪 Explore mobile security with Frida Reversing Lab, a toolkit for analyzing and manipulating Android apps to overcome obfuscation and security barriers.
- [AlexeyPerov/LogKeeper-Flutter-Firebase](https://github.com/AlexeyPerov/LogKeeper-Flutter-Firebase): 6 stars · MIT · last push 2026-05 · Log snapshot management solution (iOS/Android/Web/Server) built with Flutter/Dart using Bloc pattern and Firebase Firestore backend.
- [anpa1200/Android-Malware-Analysis](https://github.com/anpa1200/Android-Malware-Analysis): 6 stars · last push 2026-06 · Android APK malware triage with YARA, VirusTotal context, MITRE ATT&CK output, Frida hooks, and multi-LLM analysis.
- [coroner4817/EnergyEfficiencyWebView](https://github.com/coroner4817/EnergyEfficiencyWebView): 6 stars · last push 2016-03 · 📲 Android Webview which allows custom reconstruction of the web page
- [cybersecurity-dev/awesome-reverse-engineering](https://github.com/cybersecurity-dev/awesome-reverse-engineering): 6 stars · CC0-1.0 · last push 2026-09 · Awesome Reverse Engineering
- [ewt45/jadx-plugin-cfg-viewer](https://github.com/ewt45/jadx-plugin-cfg-viewer): 6 stars · MIT · last push 2026-04 · a jadx-gui plugin to genereate method's control flow gragh and display it as image
- [jkxiongxin/apk-ad-removal](https://github.com/jkxiongxin/apk-ad-removal): 6 stars · MIT · last push 2026-05 · APK ad-removal skill documentation covering unpacking, re-signing, and smali patching workflows.
- [nicerepo/maniac_manager](https://github.com/nicerepo/maniac_manager): 6 stars · GPL-3.0 · last push 2018-12 · A Flutter frontend for MANIAC.
- [sereneblue/frida-omni](https://github.com/sereneblue/frida-omni): 6 stars · Apache-2.0 · last push 2022-05 · A minimal web app to analyze Android applications with Frida
- [Serhatcck/mobile-security-mcp](https://github.com/Serhatcck/mobile-security-mcp): 6 stars · MIT · last push 2026-06 · Mobile app security analysis MCP server for Android APK and iOS IPA files
- [xjoker/delamain](https://github.com/xjoker/delamain): 6 stars · Apache-2.0 · last push 2026-10 · Headless MCP server that gives AI agents the full power of JADX for Android (APK/DEX/AAB) reverse engineering.
- [5h4d0wn1k/m5-frida-gen](https://github.com/5h4d0wn1k/m5-frida-gen): 5 stars · MIT · last push 2026-09 · Frida hook generator - produces interception scripts for Android/iOS instrumentation and RE.
- [5h4d0wn1k/mo1-apk-analyzer](https://github.com/5h4d0wn1k/mo1-apk-analyzer): 5 stars · last push 2026-09 · APK static analyzer - manifest, DEX, permissions and certificate inspection for Android.
- [arisugpt/ArisuFxPy](https://github.com/arisugpt/ArisuFxPy): 5 stars · MIT · last push 2026-10 · Fast Unity AssetBundle extractor & modder for Python with UABE Avalonia parity and Android/Termux support
- [Arsylk/jadx-deflatten](https://github.com/Arsylk/jadx-deflatten): 5 stars · Apache-2.0 · last push 2026-07 · jadx plugin: undo hashCode-switch control-flow flattening (CFF deobfuscator)
- [Darlenepurpleblack444/Zygisk-Il2CppFucker](https://github.com/Darlenepurpleblack444/Zygisk-Il2CppFucker): 5 stars · MIT · last push 2026-10 · Inject code into IL2CPP game processes to enable live metadata dumping, memory editing, method invocation, and Lua scripting via Zygisk.
- [DiwasKhatri07/NepaliStream-CNC-Repo](https://github.com/DiwasKhatri07/NepaliStream-CNC-Repo): 5 stars · last push 2026-10 · Automated CloudStream .cs3 decoder and Kotlin metadata archive maintained by Diwas Khatri
- [EncidXVII/claude-reverse-engineering-skill](https://github.com/EncidXVII/claude-reverse-engineering-skill): 5 stars · last push 2026-10 · Reverse engineering skill for Claude Code and other AI coding agents.
- [Fi5t/jadx_conf](https://github.com/Fi5t/jadx_conf): 5 stars · Unlicense · last push 2022-11 · No description supplied by the upstream repository.
- [GooglyBlox/netflix-offline-patcher](https://github.com/GooglyBlox/netflix-offline-patcher): 5 stars · MIT · last push 2026-09 · Removes the Netflix Games SDK login gate from a Netflix game APK / IPA and produces a signed APK / unsigned IPA that runs offline with no Netflix account.
- [guanhan01/Yutu-Toolbox](https://github.com/guanhan01/Yutu-Toolbox): 5 stars · Apache-2.0 · last push 2026-10 · An AI agent on your phone: use natural language to drive 103 built-in tools that operate directly on the device, covering files, apps, packet capture, APK decompilation, Linux environments, and UI automation. Includes a built-in MCP client and MCP server.
- [KareemAksh/android-gki-wifi-injection](https://github.com/KareemAksh/android-gki-wifi-injection): 5 stars · GPL-2.0 · last push 2026-06 · Monitor mode & 802.11 packet injection on a stock Android 13 GKI kernel — no reflash. Cross-built cfg80211/mac80211/rtl8xxxu loadable modules (Clang 14, LTO/CFI) + RTL8188FU OTG adapter, driven by a Flutter app. Includes an RTL8188F backport and analysis of Qualcomm WiFi injection limits.
- [NewLongmo/Dw0rdUetool](https://github.com/NewLongmo/Dw0rdUetool): 5 stars · MIT · last push 2026-07 · An external analysis and SDK-generation tool for Unreal Engine on Android, supporting AutoFix, dependency ordering, field patching, and ProcessEvent wrappers.
- [Rudra-ravi/frida-skills](https://github.com/Rudra-ravi/frida-skills): 5 stars · MIT · last push 2026-05 · Ai skills for Frida dynamic instrumentation across Android, iOS, native hooks, agents, and troubleshooting
- [sam-mg/Cryptic-CodeCruncher-s-Cache](https://github.com/sam-mg/Cryptic-CodeCruncher-s-Cache): 5 stars · last push 2025-05 · This repo contains CTF challenges that I've played and their write-ups.
- [sunflower9264/reverse_inotia4](https://github.com/sunflower9264/reverse_inotia4): 5 stars · MIT · last push 2026-04 · A local reverse-engineering toolkit for Inotia4 Android APK resources. Extracts and parses game assets (maps, text, images, audio) from a single input APK, and generates web-viewable datasets via a built-in viewer.
- [UltraSina/DexAndJar-Converter](https://github.com/UltraSina/DexAndJar-Converter): 5 stars · last push 2026-06 · a android app to convert dex and jar and smali easily
- [4xyy/Mobile-Penetration-Testing-Tool](https://github.com/4xyy/Mobile-Penetration-Testing-Tool): 4 stars · last push 2024-09 · AI-Powered Mobile Application Penetration Testing Tool
- [aancw/extract-myreact](https://github.com/aancw/extract-myreact): 4 stars · MIT · last push 2022-03 · Extracting react native app source code from apk file.
- [ankorio/twinflame](https://github.com/ankorio/twinflame): 4 stars · last push 2026-10 · Bytecode-level Android APK diffing for reverse engineers — matches classes and methods across R8/ProGuard-obfuscated builds by structure, not names
- [CROWNZENYTH-70/acid-identity-revival](https://github.com/CROWNZENYTH-70/acid-identity-revival): 4 stars · last push 2026-09 · Offline revival kit for Assassin's Creed Identity (Android): patcher + mission builder. Boot to Animus or Firenze with working enemy AI.
- [cybersecurity-dev/APK-Static-Toolkit](https://github.com/cybersecurity-dev/APK-Static-Toolkit): 4 stars · Apache-2.0 · last push 2026-05 · APK Static Toolkit | Android Package Kit (APK) Analysing Toolkit
- [lautarovculic/fridaInstall](https://github.com/lautarovculic/fridaInstall): 4 stars · WTFPL · last push 2025-05 · Install frida with just one command
- [nandan-desai-extras/android-re](https://github.com/nandan-desai-extras/android-re): 4 stars · last push 2024-01 · In this repo, I document the things I've learnt in Android Security and Android Reverse Engineering.
- [neosophaux/ppause](https://github.com/neosophaux/ppause): 4 stars · last push 2021-09 · Very simple android native library that will pause the app process when the library is loaded.
- [nitanmarcel/jadx-emu](https://github.com/nitanmarcel/jadx-emu): 4 stars · GPL-2.0 · last push 2026-10 · Extensible jadx plugin for dalvik emulation.
- [rc4ne/Simple-CTF-Writeups](https://github.com/rc4ne/Simple-CTF-Writeups): 4 stars · last push 2023-09 · CTF Writeups
- [salingnh/android-reverse-engineering-mcp](https://github.com/salingnh/android-reverse-engineering-mcp): 4 stars · Apache-2.0 · last push 2026-09 · Claude Code skill to support Android app's reverse engineering. (Safe)
- [sylhetyhackvenger/SSL-BYPASS](https://github.com/sylhetyhackvenger/SSL-BYPASS): 4 stars · last push 2026-08 · SSLBPS is an Android security research project for analyzing APK structure, manifests, Smali code, certificate trust models, and mobile security controls. Built for educational analysis, defensive research, software auditing, and reverse‑engineering learning. Perfect for understanding app architecture, code review, and secure development practices
- [thibmaek/rekt](https://github.com/thibmaek/rekt): 4 stars · last push 2026-05 · Time to get rekt! Rekt is an app rekking tool for Android & iOS apps
- [Against-All-Odds-07/MTK-SuperBuilder](https://github.com/Against-All-Odds-07/MTK-SuperBuilder): 3 stars · MIT · last push 2026-09 · Build and unpack Android Dynamic Partition super.img images from OEM super_def.json layouts using lpmake.
- [anousonephyakeo/flutter-security-toolkit](https://github.com/anousonephyakeo/flutter-security-toolkit): 3 stars · MIT · last push 2025-10 · A comprehensive penetration testing toolkit for Flutter applications. Includes SSL pinning bypass techniques, Frida scripts, static/dynamic analysis guides, automated security scanning tools, and real-world case studies. Everything you need to assess Flutter app security on Android & iOS
- [BhattJayD/react-native-vulnerability-scanner](https://github.com/BhattJayD/react-native-vulnerability-scanner): 3 stars · last push 2025-02 · react-native-vulnerability-scanner – A Python tool to analyze React Native APKs for vulnerable npm dependencies by scanning modules.json. It checks packages using Snyk's vulnerability database and provides a detailed security report. 🔍 Find vulnerable dependencies in React Native apps easily!
- [boy-offi9-inc/apk-unravel](https://github.com/boy-offi9-inc/apk-unravel): 3 stars · MIT · last push 2026-10 · A CLI that wraps apktool + jadx into a single decompile pipeline
- [d-ismlv/tull](https://github.com/d-ismlv/tull): 3 stars · MIT · last push 2026-04 · Android APK static analysis pipeline with a Claude agentic triage layer — APKLeaks + JADX + MobSF → severity-ranked report
- [EndLess728/MiTV-Remote](https://github.com/EndLess728/MiTV-Remote): 3 stars · last push 2026-10 · Mi TV remote for macOS, Android and iOS: control Xiaomi TVs over Wi-Fi. MiLink protocol reverse engineered with REA.
- [fuho/hnd-viewer](https://github.com/fuho/hnd-viewer): 3 stars · MIT · last push 2026-09 · Free, open, offline viewer for the HND-NE3 / NATFIRE NE3 wireless ear camera (Android, macOS, Windows, Linux)
- [ifeng113/debug4j-jdk8](https://github.com/ifeng113/debug4j-jdk8): 3 stars · Apache-2.0 · last push 2026-06 · An efficient and user-friendly Java debugging tool.（JDK8）
- [indrarahul/d4rkc0de-Android-CTF](https://github.com/indrarahul/d4rkc0de-Android-CTF): 3 stars · last push 2018-08 · d4rkc0de Android CTF
- [Ishanoshada/Antox](https://github.com/Ishanoshada/Antox): 3 stars · last push 2026-10 · Android APK security analysis tool with jadx MCP integration for comprehensive vulnerability detection
- [JinAsukin/utage-to-renpy-android-port](https://github.com/JinAsukin/utage-to-renpy-android-port): 3 stars · MIT · last push 2026-09 · A practical guide and custom toolkit for rebuilding Unity + Utage visual novels in Ren'Py and packaging them as Android APKs, with substantial AI-agent involvement and implementation led by the author.
- [joekir/android-reversing-workbench](https://github.com/joekir/android-reversing-workbench): 3 stars · last push 2020-04 · Docker container and scripts to give you a contained env and tools
- [Kenneth-Cho-InfoSec/SecureeEar](https://github.com/Kenneth-Cho-InfoSec/SecureeEar): 3 stars · last push 2026-04 · Secure local-only Android app for UseeEar-compatible ear hygiene cameras.
- [Llucs/Decode](https://github.com/Llucs/Decode): 3 stars · Apache-2.0 · last push 2026-06 · APK Reverse Engineering & Editor Suite for Android - Open, analyze, modify, rebuild, and sign APKs
- [Saprophytic-seattle561/reverse-skill](https://github.com/Saprophytic-seattle561/reverse-skill): 3 stars · MIT · last push 2026-10 · Map essential cybersecurity and reverse engineering skills with this structured learning path.
- [ship-it-th1/qinlin-remote-open](https://github.com/ship-it-th1/qinlin-remote-open): 3 stars · MIT · last push 2026-07 · Qinlin (亲邻开门) remote network door-open client + Docker gateway (authorized use only)
- [souravbaghz/ble-rc-car-controller](https://github.com/souravbaghz/ble-rc-car-controller): 3 stars · MIT · last push 2026-08 · Reverse-engineered BLE keyboard controller for a Wonder Toys RC car.
- [touful/App_Fast_Forensic](https://github.com/touful/App_Fast_Forensic): 3 stars · last push 2025-10 · App_Fast_Forensic is intelligent app forensics software.
- [0rShemesh/jadx-bookmarks](https://github.com/0rShemesh/jadx-bookmarks): 2 stars · last push 2026-09 · JADX plugin for bookmarking code lines with emoji markers, editor gutter tracking, and quick navigation.
- [0xhroot/aegisdroid](https://github.com/0xhroot/aegisdroid): 2 stars · last push 2026-07 · Advanced Android Security, Threat Hunting & Digital Forensics Framework for authorized device auditing, APK analysis, YARA scanning, evidence-based threat assessment, and mobile DFIR.
- [abdo-q/almosaly-open-source](https://github.com/abdo-q/almosaly-open-source): 2 stars · MIT · last push 2026-10 · AlMosaly Open Source — Android APK reconstruction, prayer-times PWA, Quran, azkar, qibla, and a privacy-first Islamic web app.
- [alisterrodrigues/mobile-forensics-investigations](https://github.com/alisterrodrigues/mobile-forensics-investigations): 2 stars · last push 2026-03 · Three mobile forensics examinations: iOS full filesystem analysis (Cellebrite), legacy mobile device artifact recovery (Autopsy/FTK), and Android APK static & dynamic analysis (JADX/PCAPdroid).
- [Argentuml/apka-P](https://github.com/Argentuml/apka-P): 2 stars · last push 2026-04 · Extract GraphQL schema from Android APKs — when introspection is disabled
- [AsherDLL/jadx-rpc](https://github.com/AsherDLL/jadx-rpc): 2 stars · GPL-3.0 · last push 2026-07 · A headless jadx engine for LLM agents. Answers structured questions about an APK, DEX or JAR over a plain CLI. No GUI, no daemon.
- [BJ1919810/dsh-rea](https://github.com/BJ1919810/dsh-rea): 2 stars · MIT · last push 2026-10 · One DSH plugin switch for REA: the REA MCP server (207 reverse-engineering tools) and REA's three workflow skills, enabled and disabled together.
- [CliffVale/sony-a6000-firmware-research](https://github.com/CliffVale/sony-a6000-firmware-research): 2 stars · MIT · last push 2026-09 · Sony ILCE-6000 (A6000) firmware research — official firmware unpacking, raw NAND dump methodology via pmca updatershell, partition verification, and Android userdata discovery
- [DevExamples/Jadx-DemoPlugin](https://github.com/DevExamples/Jadx-DemoPlugin): 2 stars · last push 2026-09 · DemoPlugin For Jadx
- [Dr3amyBerry/callofrecomp](https://github.com/Dr3amyBerry/callofrecomp): 2 stars · last push 2026-10 · Experimental static recompilation of classic Call of Duty 1.5 for Android. Bring your own original PC game files.
- [Elimeshi1/whatsapp-tracker](https://github.com/Elimeshi1/whatsapp-tracker): 2 stars · last push 2026-10 · Tracks WhatsApp beta builds for Android & macOS and reports what changed between versions — new, reworded and removed UI strings plus code-surface diffs. Runs entirely on GitHub Actions with Telegram notifications.
- [GatoProgramador-01/android-security-toolkit](https://github.com/GatoProgramador-01/android-security-toolkit): 2 stars · last push 2025-11 · 🔒 Comprehensive Android security research toolkit for ethical hacking and penetration testing
- [hackton0/Mobile-RASP-scanner](https://github.com/hackton0/Mobile-RASP-scanner): 2 stars · MIT · last push 2025-09 · Web APK RASP scanner: decompile (jadx/apktool), endpoint discovery, DEX/native checks, export PDF/CSV.
- [haripatel07/android-malware-detector](https://github.com/haripatel07/android-malware-detector): 2 stars · MIT · last push 2026-03 · An AI-powered malware detection system that uses machine learning and static analysis to identify malicious Android applications. It extracts permissions, API calls, and bytecode features from APKs and classifies them using a trained Random Forest model with high accuracy on the Drebin dataset.
- [Huythanh0x/decompile_2048_apk_to_java](https://github.com/Huythanh0x/decompile_2048_apk_to_java): 2 stars · MIT · last push 2024-10 · A sample step by step decompile apk file to Java(Gradle project)
- [Ishanoshada/SecurityInspector](https://github.com/Ishanoshada/SecurityInspector): 2 stars · last push 2026-10 · Android RASP & environment inspection toolkit in Kotlin + Jetpack Compose. Detects Frida, root, LSPosed, virtual apps, hooking, DCL, ADB, emulators & SSL pinning — plus a built-in CTF lab with jadx/Frida flags, hints, and an auto-solver. Zero dependencies.
- [ismailtsdln/ApkSentinel](https://github.com/ismailtsdln/ApkSentinel): 2 stars · last push 2026-01 · A high-performance APK static analysis tool for secret detection.
- [MetalSyntax/psvita-porting-wiki](https://github.com/MetalSyntax/psvita-porting-wiki): 2 stars · last push 2026-10 · The technical handbook for porting Android games (.so loader, FalsoJNI, vitaGL) to PlayStation Vita for developers & AI agents.
- [mlab-sh/apex](https://github.com/mlab-sh/apex): 2 stars · GPL-3.0 · last push 2026-07 · Static analysis for Android/iOS packages (.apk, .aab, .xapk, .ipa) Extracts the package, runs 15 analyzers, and reports security findings with a weighted score.
- [nuloperrito/PerezReverseKiller](https://github.com/nuloperrito/PerezReverseKiller): 2 stars · last push 2026-10 · This utility is specifically designed for reverse engineering Android applications and includes a range of useful features and tools.
- [numb747/qiyou-Reverse](https://github.com/numb747/qiyou-Reverse): 2 stars · last push 2026-09 · A methodology for reverse engineering protected Android APKs: dynamic unpacking → decompilation → native layer → cryptographic verification, with a collection of Frida scripts. Contains only original methodology and independently developed scripts.
- [PabloSoage/sh705x-emu](https://github.com/PabloSoage/sh705x-emu): 2 stars · GPL-3.0 · last push 2026-10 · Emulator for Renesas SH705x (SH-2E) engine ECUs: runs Denso firmware unmodified on a simulated engine, with a live calibration-map viewer, on Windows and Android
- [sam-mg/MobileReversing](https://github.com/sam-mg/MobileReversing): 2 stars · last push 2026-05 · This repository is a walkthrough for Android Reversing, featuring community-made challenges by fellow learners who just started a bit before us.
- [Su1ph3r/Mobilicustos](https://github.com/Su1ph3r/Mobilicustos): 2 stars · MIT · last push 2026-05 · Mobile Security Intelligence Platform - Transform mobile app security scans into actionable intelligence with static/dynamic analysis, framework detection, and OWASP MASVS mapping
- [sxwik/Relay](https://github.com/sxwik/Relay): 2 stars · last push 2026-06 · Relay is an Android workstation for Windows that combines device control, screen mirroring, ROM compatibility analysis, diagnostics, and APK inspection in a single interface.
- [vectorcmdr/Lakota-Dictionary-MDF](https://github.com/vectorcmdr/Lakota-Dictionary-MDF): 2 stars · MIT · last push 2026-01 · A Lakota language dictionary in SFM/MDF format extracted from abandonware for the Lakota people.
- [wh-iterabb-it/free-tool-index](https://github.com/wh-iterabb-it/free-tool-index): 2 stars · last push 2023-02 · Free Tools Index aims to track and share free penitration testing and blue team tools.
- [zehrakolsuz/Dex-Apk-Decompiler](https://github.com/zehrakolsuz/Dex-Apk-Decompiler): 2 stars · last push 2025-06 · Dex Decompiler analyzes the contents of Android APK files and makes their DEX (Dalvik Executable) code readable. It is particularly useful for digital forensics, security analysis, and reverse engineering.
- [ALGOANHAF/reverse-engineering-automation](https://github.com/ALGOANHAF/reverse-engineering-automation): 1 stars · last push 2026-04 · App reverse engineering & automation | Private API extraction | Web scraping | Bots
- [Bullzaike/Hermes-Sens](https://github.com/Bullzaike/Hermes-Sens): 1 stars · MIT · last push 2026-01 · Hermes-Sens is an automated static analysis tool for React Native Android applications. It decompiles APKs using apktool, decompiles Hermes bytecode into pseudo-JavaScript, and extracts sensitive artifacts such as secrets, tokens, endpoints, and authentication logic using pattern-based analysis.
- [dberry03/patchpeek](https://github.com/dberry03/patchpeek): 1 stars · MIT · last push 2026-09 · See what a mobile game's next update added — before it goes live.
- [dobrakmato/apk-to-git](https://github.com/dobrakmato/apk-to-git): 1 stars · last push 2023-01 · Automatic Google Play (apk) to Git repository extractor cron script
- [droidsaw/droidsaw-hermes](https://github.com/droidsaw/droidsaw-hermes): 1 stars · BSD-3-Clause · last push 2026-06 · Hermes bytecode parser and decompiler for React Native (HBC v40–v100). Byte-exact reconstruction verified on v84/v96/v98/v99. OXC round-trip on every output. Pure Rust.
- [Encrypter-404/flutter-interceptor](https://github.com/Encrypter-404/flutter-interceptor): 1 stars · MIT · last push 2026-07 · One-click Android TLS interception & traffic-capture framework for Flutter and native apps — auto frida, universal SSL unpinning, anti-detection, self-recovery, in-tool HTTP+WebSocket MITM capture.
- [fkie-cad/DEXSLib](https://github.com/fkie-cad/DEXSLib): 1 stars · GPL-3.0 · last push 2022-11 · Currently, the project is being heavily refactored and is therefore in an unusable state. Android RE library for static forward and backward slicing
- [hishamsal/ECWian](https://github.com/hishamsal/ECWian): 1 stars · MIT · last push 2026-09 · Unofficial attendance companion app for Ethiraj College students
- [HttpKiwi/OpenQCY](https://github.com/HttpKiwi/OpenQCY): 1 stars · last push 2026-07 · Unofficial Flutter app to control QCY earbuds over BLE (ANC, EQ, touch controls)
- [jayluxferro/reRust](https://github.com/jayluxferro/reRust): 1 stars · MIT · last push 2026-10 · Traffic interception for Rust-based mobile apps — reFlutter for rustls/reqwest cores. Unrooted, no CA install for the Rust core, pattern-DB trust patches.
- [jojin1709/BUG-HUNTER-S-HANDBOOK](https://github.com/jojin1709/BUG-HUNTER-S-HANDBOOK): 1 stars · MIT · last push 2026-07 · ⚡ An interactive field guide & security portal for Android Security Researchers, Bug Bounty Hunters, and Penetration Testers. Features 22+ indexed tools, CVSS estimator, Frida/Objection hooks, auto recon script, and framework reversing workflows.
- [keyuraghao/Mobile-Security-Research-Framework](https://github.com/keyuraghao/Mobile-Security-Research-Framework): 1 stars · GPL-3.0 · last push 2026-10 · Self-contained Mobile & IoT SAST/DAST/pentest toolkit: MobSF + Frida + objection + mitmproxy + rooted emulator, as a desktop app, CLI and MCP server.
- [kirtanbhatt10/gadbad](https://github.com/kirtanbhatt10/gadbad): 1 stars · MIT · last push 2026-10 · Kuch toh gadbad hai: static analyser for Indian scam APKs (fake RTO e-challan, PM-Kisan, bank-KYC apps). Finds OTP theft, call forwarding and Telegram/C2 exfiltration. Explains in English and Hindi.
- [leo1394/homebrew-gillii](https://github.com/leo1394/homebrew-gillii): 1 stars · GPL-3.0 · last push 2026-10 · CLI for WeChat mini-program recovery and Android APK static analysis, with code, assets and offline reports.
- [M-Tarantino/Sasquatch-Universal-Builder](https://github.com/M-Tarantino/Sasquatch-Universal-Builder): 1 stars · GPL-2.0 · last push 2026-06 · Automated build & patch orchestration for Sasquatch (SquashFS). Supports modern GCC/Clang and Termux (Android).
- [MassoudiR/DittoNet](https://github.com/MassoudiR/DittoNet): 1 stars · MIT · last push 2026-07 · DittoNet 🔥 is a shapeshifting mobile web debugger and hybrid MITM browser. Empowering developers with real-time HTTP interception, dynamic modification, JS injection, and SSL bypassing from a localized mobile environment.
- [Maxamedxasa/SAKO-DUMP](https://github.com/Maxamedxasa/SAKO-DUMP): 1 stars · MIT · last push 2026-09 · IL2CPP Dumper for Android - Unity games to clean C# (classes, hex offsets, RVA). Memory mode (root), metadata v22-v31 incl. Unity 6. 100% on-device C++ NDK core.
- [mhmdsatria/phantom-frida](https://github.com/mhmdsatria/phantom-frida): 1 stars · last push 2026-10 · Build a stealthy Frida server from source, applying robust patches to evade detection and enhance security for dynamic instrumentation tasks.
- [MKS-01/mobile-recon](https://github.com/MKS-01/mobile-recon): 1 stars · MIT · last push 2026-06 · Experimental, AI-assisted CLI for mobile security testing — Android, iOS & the networks they run on. Lab/learning use only.
- [oddballza/openwatch](https://github.com/oddballza/openwatch): 1 stars · last push 2026-10 · BLE protocol reconnaissance on an undocumented smartwatch, and the upstream Gadgetbridge contributions it led to — device drivers, bio-impedance and body composition, dashboard widgets, framework changes. Diagnostics tooling, ADR and licensing audit included. Full merge record with commit references.
- [omkarcloud/skyscanner-scraper](https://github.com/omkarcloud/skyscanner-scraper): 1 stars · last push 2026-09 · Skyscanner Scraper gets you Skyscanner data ⚡ fast, 🎯 100% accurate and 🔍 ridiculously detailed — as clean JSON. 1,000 free calls/month ❤️
- [Pha4tom/DroidLens](https://github.com/Pha4tom/DroidLens): 1 stars · MIT · last push 2026-10 · On-device APK analyzer and decompiler for Android — custom AXML/ARSC/DEX parsers, on-device jadx, and a Shizuku-powered intent fuzzer. No root, no PC, no Termux.
- [Sal7one/knowledge-is-power-Modded-APK-](https://github.com/Sal7one/knowledge-is-power-Modded-APK-): 1 stars · last push 2023-11 · A modded version of the game apk I made a couple of years ago
- [shubhankar-gaur/VaultPass](https://github.com/shubhankar-gaur/VaultPass): 1 stars · last push 2026-08 · VaultPass is an intentionally vulnerable Android APK for authorized reverse engineering training. Practice decompiling, reading Smali, patching login/root/premium checks, then rebuilding and signing APKs in a safe lab setup while learning why client-side-only security controls fail.
- [sys-MWell/lego-dimensions-nfc-writer](https://github.com/sys-MWell/lego-dimensions-nfc-writer): 1 stars · last push 2026-03 · A Node.js web application for generating Lego Dimensions Toy Tag data for blank NFC213 tags. Input your tag's UID to generate unique codes for characters and vehicles. Generated codes can be written to tags using any NFC writing app (iOS/Android).
- [vikrant-project/ai-security-testing-agent](https://github.com/vikrant-project/ai-security-testing-agent): 1 stars · MIT · last push 2026-10 · AI agent skills for debug APK security testing, Flutter/Kotlin review, ADB live testing, and authorized staging web/API assessments with reproducible evidence.
- [viveksec/apk-forensic-kit](https://github.com/viveksec/apk-forensic-kit): 1 stars · GPL-3.0 · last push 2026-08 · Fraud-APK & Stalkerware Forensic Workbench for cyber cells / law enforcement. Court-ready evidence: hash-chained acquisition, chain-of-custody, static analysis, YARA + behavioral detection, weighted verdicts, PDF + STIX/CSV/YARA reporting. 0% false positives, 0% missed on 43-sample validation.
- [White-Hat-007/Mobile-Application-Reverse-Engineering-Analysis](https://github.com/White-Hat-007/Mobile-Application-Reverse-Engineering-Analysis): 1 stars · last push 2026-05 · Advanced mobile application reverse engineering and mobile security research focused on authentication workflows, backend communication analysis, networking stack reconstruction, and encrypted local storage.
- [worldtreeboy/a64-lab](https://github.com/worldtreeboy/a64-lab): 1 stars · MIT · last push 2026-09 · Interactive AArch64 learning simulator for registers, pointers, stack frames, control flow, and Linux syscalls.
- [744219288/lazyalarm-preview-analysis](https://github.com/744219288/lazyalarm-preview-analysis): 0 stars · last push 2026-09 · Static analysis report for the preview APK of LazyAlarm, covering functional architecture, component inventory, permission analysis, and signing information, with icons, flowcharts, and structural diagrams.
- [abhirampatel/android-security-toolkit](https://github.com/abhirampatel/android-security-toolkit): 0 stars · last push 2026-03 · Static analysis toolkit for Android APK security testing — detects hardcoded secrets, manifest misconfigurations, and native library vulnerabilities
- [Airya-Xratu/reforge-ai](https://github.com/Airya-Xratu/reforge-ai): 0 stars · MIT · last push 2026-09 · Reverse-engineer apps with AI. Reforge reconstructs product, UX, UI, architecture, and design intent for coding agents.
- [alterakey/blutter-docker](https://github.com/alterakey/blutter-docker): 0 stars · MIT · last push 2026-06 · Containerized blutter
- [apache261/APKPinningTestTool](https://github.com/apache261/APKPinningTestTool): 0 stars · last push 2026-08 · A personal Python toolkit for preparing Android APKs for authorized HTTPS inspection and certificate-pinning analysis.
- [azeem7012/android-apk-malware-sandbox](https://github.com/azeem7012/android-apk-malware-sandbox): 0 stars · last push 2026-04 · Automated Android APK malware analysis pipeline — MobSF, OWASP Mobile Top 10, VirusTotal, Flask dashboard, PDF report generation
- [balyakin/apkscan](https://github.com/balyakin/apkscan): 0 stars · last push 2026-03 · APK Static Analyzer
- [balyakin/sovereign-droid](https://github.com/balyakin/sovereign-droid): 0 stars · MIT · last push 2026-07 · Open infrastructure for verifiable Android supply-chain audits, reproducible builds, AOSP testing, and signed evidence reports.
- [BattlePriestBarbara/AutoRev-Crypto](https://github.com/BattlePriestBarbara/AutoRev-Crypto): 0 stars · MIT · last push 2026-10 · An automated, deterministic, and reproducible reverse engineering framework for Android hardened applications. Features Unidbg-based cryptographic empirical analysis, JNI mapping recovery, and structured threat modeling for DTC-protected native libraries. For academic & responsible disclosure purposes only.
- [BI7KHI/htpr-ble-console](https://github.com/BI7KHI/htpr-ble-console): 0 stars · last push 2026-09 · HTPR e-bike controller BLE debugging console: a reverse-engineered protocol and a portrait-oriented Flutter dashboard.
- [ConradLu2740/app-privacy-audit](https://github.com/ConradLu2740/app-privacy-audit): 0 stars · MIT · last push 2026-09 · Android app privacy-compliance audit portfolio: static keyword scanning, dynamic Frida hooks, PCAPdroid traffic evidence, and LLM-assisted compliance assessment. Compares commercial and open-source samples, with a bilingual README primarily in Chinese.
- [CyberDemon73/F-for-Frida](https://github.com/CyberDemon73/F-for-Frida): 0 stars · MIT · last push 2026-02 · 🚀 The easiest way to manage Frida on Android. Auto-setup, version matching, bypass scripts, wireless ADB.
- [dairymatrix-collab/ai-reverse-engineering-agent-skill](https://github.com/dairymatrix-collab/ai-reverse-engineering-agent-skill): 0 stars · MIT · last push 2026-10 · Portable, evidence-first AI-agent skill for lawful reverse engineering with REA CLI/MCP workflows.
- [direct-aperient497/patcher](https://github.com/direct-aperient497/patcher): 0 stars · last push 2026-10 · Patch your Pokémon FireRed/LeafGreen ROM to unlock a full in-game editor via Viridian City's Pokémon Center.
- [elvis2121/android-application-security-assessment-beetlebug](https://github.com/elvis2121/android-application-security-assessment-beetlebug): 0 stars · last push 2026-10 · Android security assessment of Beetlebug: hardcoded secrets, insecure storage, SQLi, open Firebase, Logcat leaks, exported activity
- [emrezdemir/apk-decompiler](https://github.com/emrezdemir/apk-decompiler): 0 stars · MIT · last push 2026-06 · Cross-platform, dependency-free CLI APK decompiler & inspector. Pure-Python core (manifest decode, info, DEX, security scan); full Java/smali via jadx/apktool.
- [falcon0x1/FalconServiceAnalyzer](https://github.com/falcon0x1/FalconServiceAnalyzer): 0 stars · MIT · last push 2026-01 · 🐦‍🔥 Android Service Attack Surface Analyzer - Automated reconnaissance and attack command generation
- [fiadpratama/CTF-application](https://github.com/fiadpratama/CTF-application): 0 stars · MIT · last push 2026-10 · Hands-on Android reverse engineering and network security CTF with a native (JNI) crypto layer, AES-256-GCM E2EE, and a serverless Node.js backend.
- [gdrci/Eureka-Userdebug-Research](https://github.com/gdrci/Eureka-Userdebug-Research): 0 stars · last push 2026-10 · Reverse engineering of the Eureka userdebug Android 12 image: zap and GMU firmware, the kgsl kernel module, Adreno userspace libraries, init and SELinux policy.
- [gdrci/Research](https://github.com/gdrci/Research): 0 stars · last push 2026-10 · Documentation of the Meta Ray-Ban Display (greatwhite) firmware: boot chain, Android Verified Boot, TrustZone and hypervisor, remote processors, peripherals and device-tree overlays. English and Chinese.
- [gemesa/android-security-handbook](https://github.com/gemesa/android-security-handbook): 0 stars · Apache-2.0 · last push 2026-10 · Guide to Android app security analysis, reverse engineering & pentesting
- [gg320324492-lgtm/dexatlas](https://github.com/gg320324492-lgtm/dexatlas): 0 stars · last push 2026-10 · Open-source AI-powered Android reverse engineering platform — decompilation, symbol indexing, evidence-based analysis reports.
- [gigachad80/Andro-Malstat-CLI](https://github.com/gigachad80/Andro-Malstat-CLI): 0 stars · AGPL-3.0 · last push 2026-02 · Lightweight automation orchestration framework for rapid APK malware analysis with YARA signatures, obfuscation detection, and hybrid code scanning
- [gigachad80/Hunt-Sexy-Smali](https://github.com/gigachad80/Hunt-Sexy-Smali): 0 stars · AGPL-3.0 · last push 2026-05 · Hunt URLs , IP, Base64 encoded C2 in Smali files with 95% reduction of false positives
- [gowshikbalakumar/Mobile_Penetration](https://github.com/gowshikbalakumar/Mobile_Penetration): 0 stars · last push 2026-08 · A practical Android mobile penetration testing knowledge base covering static analysis, dynamic instrumentation, APK analysis, emulator setup, network testing, and security assessment workflows.
- [gpapadopp/netwatch-pro](https://github.com/gpapadopp/netwatch-pro): 0 stars · GPL-3.0 · last push 2024-08 · Android app (Java) for collecting network traffic, APK, and permission data with a user-friendly UI.
- [gpapadopp/netwatch-pro-api](https://github.com/gpapadopp/netwatch-pro-api): 0 stars · GPL-3.0 · last push 2024-08 · REST API backend for collecting and serving malware-related data between Android app and MongoDB.
- [Has-X/KernelKatana](https://github.com/Has-X/KernelKatana): 0 stars · GPL-3.0 · last push 2026-01 · Extract a symbolized AArch64 Linux kernel ELF from Android boot.img or raw Image files.
- [HelgeSverre/jadx-webgui](https://github.com/HelgeSverre/jadx-webgui): 0 stars · last push 2024-09 · 🧪 Experimental Web GUI for real-time APK decompilation using JADX, Docker, Flask, and SocketIO.
- [Helistana/scrcpy-vision-gateway](https://github.com/Helistana/scrcpy-vision-gateway): 0 stars · MIT · last push 2026-09 · Drive an old non-rooted Android phone as a PC-controlled app gateway: capture scrcpy PC window via Win32 PrintWindow to bypass FLAG_SECURE, then drive Flutter apps with adb taps/swipes.
- [HelloVass/apk-canary](https://github.com/HelloVass/apk-canary): 0 stars · BSD-3-Clause · last push 2026-08 · Public CLI and Agent Skill distribution for APK Canary
- [hiddenexee/Soyo-Mobile-Engineering](https://github.com/hiddenexee/Soyo-Mobile-Engineering): 0 stars · last push 2026-01 · SOYO Mobile App – API & Security Analysis
- [IDioniksI/reverse-engineering-coursework](https://github.com/IDioniksI/reverse-engineering-coursework): 0 stars · last push 2026-07 · Coursework in reverse engineering and malware analysis, covering deobfuscation, sandbox detection, memory inspection, network interception, and Android instrumentation
- [ImAno177/android-security-lab](https://github.com/ImAno177/android-security-lab): 0 stars · last push 2026-08 · Android security labs 4-5: Frida, root detection, APK analysis, secure programming, and original reports.
- [Jacqueb-1337/copsnrobbers](https://github.com/Jacqueb-1337/copsnrobbers): 0 stars · last push 2026-10 · Cops N Robbers Revival restores multiplayer, mod support and modern Android compatibility for the classic Android game.
- [jamaliimran07/APK-Security-Auditor](https://github.com/jamaliimran07/APK-Security-Auditor): 0 stars · last push 2026-06 · Android APK Static Security Analysis Tool using Python, APKTool and JADX
- [jojin1709/APKlens-](https://github.com/jojin1709/APKlens-): 0 stars · MIT · last push 2026-09 · APKLens — Browser-native Android APK security & architecture analyzer. Decode manifests, scan permissions, analyze DEX bytecode, detect secrets & OWASP risks. 100% local, zero upload.
- [kastorcode/spacepeng-trainer-frida-examples](https://github.com/kastorcode/spacepeng-trainer-frida-examples): 0 stars · last push 2023-12 · Frida trainer for SpacePeng game and code examples.
- [katriyda/lampsmart-pro-remote](https://github.com/katriyda/lampsmart-pro-remote): 0 stars · MIT · last push 2026-10 · A Flutter app port based on reverse engineering the BLE advertising protocol of LampSmart Pro lights and fan lights.
- [kirvigen/rustore-apk-mcp](https://github.com/kirvigen/rustore-apk-mcp): 0 stars · MIT · last push 2026-09 · MCP server that hands your AI agent signature-verified Android APKs from RuStore — by package name alone. No browser, no account, no API key.
- [KostasEreksonas/perenio_app_analysis](https://github.com/KostasEreksonas/perenio_app_analysis): 0 stars · last push 2026-09 · Analysis of cryptographic routines found within "Perenio Smart: Home and Office" Android application, as well as reconstructing Perenio Peifc01 IP camera's RTP over UDP video stream from a Wireshark packet capture
- [kunal-pentesting/Android-APK-Static-Analysis](https://github.com/kunal-pentesting/Android-APK-Static-Analysis): 0 stars · last push 2026-09 · Static security analysis of an Android APK using Kali Linux, APKTool, AndroidManifest and Smali code review.
- [Leeszzzz/stickranger2editor](https://github.com/Leeszzzz/stickranger2editor): 0 stars · last push 2026-09 · A Stick Ranger 2 save editor based on reverse engineering the game’s web JavaScript code, supporting offline save decoding, editing, and re-encoding. Built with Flutter for Windows, Android, Web, and other platforms.
- [leolovenet/LeoTerminalLinkFilter](https://github.com/leolovenet/LeoTerminalLinkFilter): 0 stars · last push 2026-06 · Android Studio plugin that turns Frida-style terminal stack traces into clickable source links
- [lonelyasacloud/snowtrace](https://github.com/lonelyasacloud/snowtrace): 0 stars · MIT · last push 2026-09 · An evidence-layer APK scanner: in the snow, every passage leaves a trace. Statically scans Android APKs and produces SDK, permission, and component findings with evidence chains (md/json/.pcc.json).
- [lueuru/unity-game-localization-skills](https://github.com/lueuru/unity-game-localization-skills): 0 stars · MIT · last push 2026-10 · Three tools for Chinese localization of older Unity games: DLL-layer text (equal-length replacement in the #US heap), resource-layer text (keys excluded from translation), and BMFont Chinese bitmap fonts.
- [medusangeorgevi737/SonolusReverse](https://github.com/medusangeorgevi737/SonolusReverse): 0 stars · last push 2026-10 · Modify the Sonolus rhythm game on Android using Frida to add custom features and gameplay adjustments.
- [michaeladafjc/Jadx](https://github.com/michaeladafjc/Jadx): 0 stars · last push 2024-06 · No description supplied by the upstream repository.
- [mohammed-jaouad/saeco-ble-toolkit-android](https://github.com/mohammed-jaouad/saeco-ble-toolkit-android): 0 stars · MIT · last push 2026-07 · Flutter/Android reverse-engineering toolkit for the Saeco GranBaristo Avanti's Bluetooth Low Energy protocol: scan, pair (PIN), decode frames live, verify CRC-16, and send drink commands. The recon tool behind saeco-granbaristo-bridge. ☕
- [mr-bns/APKXray](https://github.com/mr-bns/APKXray): 0 stars · MIT · last push 2026-06 · Static Android Security Analyzer for APK decompilation, manifest analysis, exported component discovery, network security assessment, and report generation.
- [MrPrinceAli/Kheronyx](https://github.com/MrPrinceAli/Kheronyx): 0 stars · MIT · last push 2026-10 · 👁️ AI-assisted static file intelligence that unmasks scam APKs, malicious EXEs and weaponized PDFs without ever running them. VirusTotal + abuse.ch + RDAP.
- [musabm24/iot-security-research](https://github.com/musabm24/iot-security-research): 0 stars · last push 2026-06 · Independent IoT penetration test — 12 findings, CVSS 9.1. Android APK, firmware, and network analysis.
- [Nirusaki-Malaal/DinerDashRust](https://github.com/Nirusaki-Malaal/DinerDashRust): 0 stars · GPL-3.0 · last push 2026-10 · Native reimplementation of Diner Dash (2004) in Rust with Wayland, Windows, Android, and WASM support..
- [nitanmarcel/smali-shell](https://github.com/nitanmarcel/smali-shell): 0 stars · GPL-2.0 · last push 2026-10 · No description supplied by the upstream repository.
- [nowl-it/android-reverse-engineering](https://github.com/nowl-it/android-reverse-engineering): 0 stars · last push 2026-01 · Android Reverse Engineering - King God Castle
- [omkarsawant94/messaging-app-security](https://github.com/omkarsawant94/messaging-app-security): 0 stars · last push 2026-07 · Enhancing security in messaging applications — E2E encryption, Signal protocol analysis with Wireshark, Android APK security audit — 8 deliverables + 2 labs
- [piuteu/Pokemon-Champions-60FPS-Android](https://github.com/piuteu/Pokemon-Champions-60FPS-Android): 0 stars · last push 2026-09 · Runtime-only 60 FPS research and ReZygisk project for Pokémon Champions Android.
- [PyCSharp/Android-6.0.0-Extracts](https://github.com/PyCSharp/Android-6.0.0-Extracts): 0 stars · last push 2025-12 · extracted files from android 6.0.0 (Nexus 5X)
- [qianzhu123/android-reverse-unpacking-labs](https://github.com/qianzhu123/android-reverse-unpacking-labs): 0 stars · MIT · last push 2026-10 · Educational Android unpacking & packer-hardening labs — self-built, evidence-based, deterministic-first reverse-engineering study materials.
- [Rafawaldrigues/jadx-atlas](https://github.com/Rafawaldrigues/jadx-atlas): 0 stars · MIT · last push 2026-10 · Attack-surface map for Android apps, built on JADX output
- [risaryan9/plainsight](https://github.com/risaryan9/plainsight): 0 stars · last push 2026-10 · Agentic APK threat-analysis pipeline (in progress). Androguard static analysis (APKs never executed) runs in a containerised AWS Lambda worker (ECR, S3, IAM); ML anomaly scores + SHAP feed a LangGraph multi-agent system on Claude that cross-checks the app's permissions and behaviour against its stated claims. FastAPI backend + Telegram bot.
- [RozhakLabs/Malware-Analysis-YDKJ](https://github.com/RozhakLabs/Malware-Analysis-YDKJ): 0 stars · GPL-3.0 · last push 2025-04 · 🔍 Technical analysis of "悦动空间" Android spyware - Exfiltrates contacts, SMS & images to C2 servers (156.224.170.230) | SHA-256: a1feefa...
- [Saurabh-gzp/Sentinel-AI-Security-Scanner](https://github.com/Saurabh-gzp/Sentinel-AI-Security-Scanner): 0 stars · MIT · last push 2026-09 · On-device agentic AI security scanner — decompiles APK/APKS/XAPK and live-renders websites; Gemini gives a definitive verdict. Website: https://saurabh-gzp.github.io/Sentinel-AI-Security-Scanner/
- [SelvaHacker1225/APKShield](https://github.com/SelvaHacker1225/APKShield): 0 stars · last push 2026-04 · Advanced Android VAPT Framework — Static + Dynamic | By Muthuselvan Nadar
- [Shalom-Karr/generalmikve-decompiled](https://github.com/Shalom-Karr/generalmikve-decompiled): 0 stars · last push 2026-07 · Decompiled source of the GeneralMikve mikvah payment-terminal firmware (com.otot.mikve.general). Source-only; credentials scrubbed; no APK.
- [solo12345689/Shortcat-Anime-internal-api](https://github.com/solo12345689/Shortcat-Anime-internal-api): 0 stars · last push 2026-06 · Shortcat Anime Protocol & Architecture Analysis — reverse engineering research documenting API structure, authentication flow, local streaming delivery, and rewards system discovered via APK decompilation and traffic analysis.
- [teebow1e/blutter-env](https://github.com/teebow1e/blutter-env): 0 stars · last push 2026-07 · Blutter in a container for quick Flutter decompilation on any machine (Linux/MacOS).
- [TheFoolByte/XL-Research-Framework](https://github.com/TheFoolByte/XL-Research-Framework): 0 stars · last push 2026-02 · Advanced Android APK Security Research Tool - Memory-optimized framework for ethical security analysis with integrated research capabilities
- [throwshotputaway-cmd/apkinspect](https://github.com/throwshotputaway-cmd/apkinspect): 0 stars · last push 2026-09 · Static decryptors and unpackers for packed Android APKs: XOR/AES dropper payloads, string oracles, split-array keys, dpt-shell unpacking, manifest repair. One CLI, builder defaults included.
- [tomhamidi97-arch/upi-protocol-research](https://github.com/tomhamidi97-arch/upi-protocol-research): 0 stars · last push 2026-08 · No description supplied by the upstream repository.
- [TRYagainCATCH/ZEDCOOL](https://github.com/TRYagainCATCH/ZEDCOOL): 0 stars · last push 2026-07 · Advanced Termux Toolkit for Android. Install, manage, update and analyze security tools with a clean interactive interface.
- [utkarsh125/sandboox](https://github.com/utkarsh125/sandboox): 0 stars · last push 2026-05 · A comprehensive application to find vulnerabilities in APK files before delivery.
- [vs-sr-dev/android-dissidiaduellum-doc](https://github.com/vs-sr-dev/android-dissidiaduellum-doc): 0 stars · last push 2026-09 · The Android data directory of DISSIDIA FF / DISSIDIA DUELLUM, pulled off a live phone and documented while the service still runs: 729 UnityFS archives opened and validated, 683,378 objects, and an answer to why a client announcing 2.6 GB left 3.79 GB on disc.
- [vs-sr-dev/android-talesofluminaria-doc](https://github.com/vs-sr-dev/android-talesofluminaria-doc): 0 stars · MIT · last push 2026-09 · Tales of Luminaria (Android, 2021) — file formats, engine and protection, measured from the shipped package. Unity 2019.4.16f1 + IL2CPP, COLOPL, project 'natalie'; not ASKA, and nothing in common with Tales of Crestoria.
- [wccch-wzz/Brix-Android-Source](https://github.com/wccch-wzz/Brix-Android-Source): 0 stars · GPL-3.0 · last push 2026-09 · Source code recovered by decompiling Brix Launcher (com.brix.brixlauncher): a compilable project with 839 files and 0 errors.
- [wddyarch/flambe-merge-cook-mod](https://github.com/wddyarch/flambe-merge-cook-mod): 0 stars · last push 2026-09 · In-game mod menu for Flambé: Merge & Cook 1.51.5 — coins, gems, energy and tasks
- [wddyarch/royal-match-mod](https://github.com/wddyarch/royal-match-mod): 0 stars · last push 2026-09 · Frida mod menu for Royal Match 38174 — coins, stars and extra moves
- [wddyarch/tasty-travels-mod](https://github.com/wddyarch/tasty-travels-mod): 0 stars · last push 2026-09 · Frida mod menu for Tasty Travels 64.0.0 — gold and diamonds