Open-source alternatives to Nullkia

The MPT (Mobile Pentest Toolkit) is a must-have solution for your android penetration testing workflow.

Python API Monitor for Android apps

📱 Andriller - is software utility with a collection of forensic tools for smartphones. It performs read-only, forensically sound, non-destructive acquisition from Android devices.

Documentation:

docker file for use with androguard python android app analysis tool

The new bridge between Burp Suite and Frida!

Simplifying SSL/TLS traffic analysis for researchers by making SSL decryption effortless.

Drozer is a security testing framework and runtime analyzer for Android applications and devices. It functions as an exploit management framework and a security toolset used to identify vulnerabilities, misconfigurations, and leaks within the Android operating system and its installed applications. The framework enables the simulation of application behavior and the interaction with communication endpoints to detect security flaws. It manages the execution, analysis, and sharing of public exploits for mobile security research. The system provides capabilities for application auditing, vulner

CuckooDroid - Automated Android Malware Analysis with Cuckoo Sandbox.

This project is an Android security analysis toolkit and mobile app runtime manipulator designed for reverse engineering and auditing mobile applications. It provides a system for modifying Java classes and method behavior in active mobile processes to bypass security controls. The toolkit includes a web-based interface for controlling the instrumentation engine and a specialized utility for disabling certificate validation to intercept and inspect encrypted network traffic via SSL pinning bypass. It also features an Android file explorer for browsing and managing files within private data di

Bash completion for "adb" from the Google Android SDK

A python based tool for exploiting and managing Android devices via ADB

Mitmproxy is an interactive, programmable network proxy engine designed for traffic analysis and protocol manipulation. It functions as a gateway that intercepts, inspects, and modifies network traffic in real-time, supporting HTTP, HTTPS, WebSocket, DNS, and generic TCP or UDP streams. By acting as a trusted certificate authority, the proxy can dynamically generate and sign certificates to decrypt and analyze secure TLS-encrypted connections. The project distinguishes itself through a highly extensible, event-driven architecture that allows users to automate traffic transformation using cust

Tool used for dumping memory from Android devices

Mobile Security Framework is an automated security testing platform designed for the analysis of Android, iOS, and Windows mobile application binaries. It functions as a comprehensive suite for identifying security vulnerabilities, privacy risks, and malicious code within mobile software packages. The framework distinguishes itself by combining static and dynamic analysis techniques to evaluate application behavior. It performs static inspection of source code and binaries to detect insecure patterns, while simultaneously utilizing dynamic instrumentation and containerized sandboxing to monit

Drozer is an Android security assessment framework and vulnerability scanner. It serves as a security auditor for Android devices and their installed software, providing a specialized environment for analyzing inter-process communication mechanisms and auditing application endpoints. The framework focuses on Android inter-process communication analysis, allowing for the interrogation of system services and application components. It enables the execution of specialized security modules and custom scripts to identify vulnerabilities and test the security of runtime interfaces. The system prov

A runtime mobile application analysis toolkit with a Web GUI, powered by Frida, written in Python.

A Fork of Auditd geared specifically for running on the Android platform. Includes system applications, AOSP patches, and kernel patches to maximize the audit experience.

Yet Another Linux Virtual Machine for Mobile Application Pentesting and Mobile Malware Analysis

Dynamic analysis of Android apps

ARMv7 payload that provides arbitrary code execution on MediaTek bootloaders

Radare2 is a comprehensive framework for reverse engineering and analyzing compiled software. It provides a command-line environment designed for disassembling, debugging, and patching binary executables across a wide range of processor architectures and operating systems. The system distinguishes itself through a modular, plugin-based architecture that supports cross-platform analysis and automated workflows. It utilizes memory-mapped file access to enable efficient structural inspection and modification of binaries without requiring full file loads. By lifting machine instructions into a un