Category 13 · 31 resources

Android / Ios / Mobile / Firmware

Static and dynamic analysis of Android and iOS apps plus firmware. Decompile APKs, hook running apps with Frida, and audit mobile security posture.

frida Web

https://frida.re/

Dynamic instrumentation toolkit

How to use it

Install with `pip install frida-tools`, connect a device or emulator, and inject JavaScript hooks into running apps to observe or change their behavior in real time.

Open resource →

frida GitHub

https://github.com/frida/frida/

Open-source code repository

How to use it

Open the repo page, read the README for install instructions (usually a git clone or pip install command), then run it in a terminal. Check the 'Issues' and 'Releases' tabs for updates.

Open resource →

objection GitHub

https://github.com/sensepost/objection/

Open-source code repository

How to use it

Open the repo page, read the README for install instructions (usually a git clone or pip install command), then run it in a terminal. Check the 'Issues' and 'Releases' tabs for updates.

Open resource →

jadx GitHub

https://github.com/skylot/jadx/

Open-source code repository

How to use it

Open the repo page, read the README for install instructions (usually a git clone or pip install command), then run it in a terminal. Check the 'Issues' and 'Releases' tabs for updates.

Open resource →

apktool Web

https://apktool.org/

Apktool

How to use it

Decode an APK's resources and smali code, modify them, and rebuild — used for patching and analysis.

Open resource →

Apktool GitHub

https://github.com/iBotPeaches/Apktool/

Open-source code repository

How to use it

Open the repo page, read the README for install instructions (usually a git clone or pip install command), then run it in a terminal. Check the 'Issues' and 'Releases' tabs for updates.

Open resource →

github Web

https://mobsf.github.io/Mobile-Security-Framework-MobSF/

MobSF mobile security framework

How to use it

Run the Docker image, upload an APK/IPA, and get an automated static+dynamic security report.

Open resource →

Mobile-Security-Framework-MobSF GitHub

https://github.com/MobSF/Mobile-Security-Framework-MobSF/

Open-source code repository

How to use it

Open the repo page, read the README for install instructions (usually a git clone or pip install command), then run it in a terminal. Check the 'Issues' and 'Releases' tabs for updates.

Open resource →

APKiD GitHub

https://github.com/rednaga/APKiD/

Open-source code repository

How to use it

Open the repo page, read the README for install instructions (usually a git clone or pip install command), then run it in a terminal. Check the 'Issues' and 'Releases' tabs for updates.

Open resource →

dex2jar GitHub

https://github.com/pxb1988/dex2jar/

Open-source code repository

How to use it

Open the repo page, read the README for install instructions (usually a git clone or pip install command), then run it in a terminal. Check the 'Issues' and 'Releases' tabs for updates.

Open resource →

jd-gui GitHub

https://github.com/java-decompiler/jd-gui/

Open-source code repository

How to use it

Open the repo page, read the README for install instructions (usually a git clone or pip install command), then run it in a terminal. Check the 'Issues' and 'Releases' tabs for updates.

Open resource →

binwalk GitHub

https://github.com/ReFirmLabs/binwalk/

Open-source code repository

How to use it

Open the repo page, read the README for install instructions (usually a git clone or pip install command), then run it in a terminal. Check the 'Issues' and 'Releases' tabs for updates.

Open resource →

emba GitHub

https://github.com/e-m-b-a/emba/

Open-source code repository

How to use it

Open the repo page, read the README for install instructions (usually a git clone or pip install command), then run it in a terminal. Check the 'Issues' and 'Releases' tabs for updates.

Open resource →

owasp Web

https://mas.owasp.org/MASTG/

OWASP Mobile Security Testing Guide

How to use it

The reference standard for mobile app security testing — read the test cases, then use listed tools to execute them.

Open resource →

owasp Web

https://mas.owasp.org/MASTG/tools/

OWASP Mobile Security Testing Guide

How to use it

The reference standard for mobile app security testing — read the test cases, then use listed tools to execute them.

Open resource →

owasp Web

https://owasp.org/www-project-mobile-app-security/

OWASP foundation

How to use it

Home of the Top 10 and testing guides — start here to learn web/mobile security methodology.

Open resource →

Awesome-Android-Reverse-Engineering GitHub

https://github.com/user1342/Awesome-Android-Reverse-Engineering/

Open-source code repository

How to use it

Open the repo page, read the README for install instructions (usually a git clone or pip install command), then run it in a terminal. Check the 'Issues' and 'Releases' tabs for updates.

Open resource →

reverse-engineering GitHub

https://github.com/wtsxdev/reverse-engineering/

Open-source code repository

How to use it

Open the repo page, read the README for install instructions (usually a git clone or pip install command), then run it in a terminal. Check the 'Issues' and 'Releases' tabs for updates.

Open resource →

Awesome-Reversing GitHub

https://github.com/ReversingID/Awesome-Reversing/

Open-source code repository

How to use it

Open the repo page, read the README for install instructions (usually a git clone or pip install command), then run it in a terminal. Check the 'Issues' and 'Releases' tabs for updates.

Open resource →

android-security GitHub

https://github.com/alphaSeclab/android-security/

Open-source code repository

How to use it

Open the repo page, read the README for install instructions (usually a git clone or pip install command), then run it in a terminal. Check the 'Issues' and 'Releases' tabs for updates.

Open resource →

android-security-list GitHub

https://github.com/wtsxDev/android-security-list/

Open-source code repository

How to use it

Open the repo page, read the README for install instructions (usually a git clone or pip install command), then run it in a terminal. Check the 'Issues' and 'Releases' tabs for updates.

Open resource →

ipsw GitHub

https://github.com/blacktop/ipsw/

Open-source code repository

How to use it

Open the repo page, read the README for install instructions (usually a git clone or pip install command), then run it in a terminal. Check the 'Issues' and 'Releases' tabs for updates.

Open resource →

iOS-Reverse-Engineering GitHub

https://github.com/GhidraEnjoyr/iOS-Reverse-Engineering/

Open-source code repository

How to use it

Open the repo page, read the README for install instructions (usually a git clone or pip install command), then run it in a terminal. Check the 'Issues' and 'Releases' tabs for updates.

Open resource →

reverse-engineering-toolkit GitHub

https://github.com/geeksniper/reverse-engineering-toolkit/

Open-source code repository

How to use it

Open the repo page, read the README for install instructions (usually a git clone or pip install command), then run it in a terminal. Check the 'Issues' and 'Releases' tabs for updates.

Open resource →

AndroidReverseEngineering GitHub

https://github.com/5A59/AndroidReverseEngineering/

Open-source code repository

How to use it

Open the repo page, read the README for install instructions (usually a git clone or pip install command), then run it in a terminal. Check the 'Issues' and 'Releases' tabs for updates.

Open resource →

frida_hook_libart GitHub

https://github.com/lasting-yang/frida_hook_libart/

Open-source code repository

How to use it

Open the repo page, read the README for install instructions (usually a git clone or pip install command), then run it in a terminal. Check the 'Issues' and 'Releases' tabs for updates.

Open resource →

FridaDump GitHub

https://github.com/lasting-yang/FridaDump/

Open-source code repository

How to use it

Open the repo page, read the README for install instructions (usually a git clone or pip install command), then run it in a terminal. Check the 'Issues' and 'Releases' tabs for updates.

Open resource →

FRIDA-DEXDump GitHub

https://github.com/hluwa/FRIDA-DEXDump/

Open-source code repository

How to use it

Open the repo page, read the README for install instructions (usually a git clone or pip install command), then run it in a terminal. Check the 'Issues' and 'Releases' tabs for updates.

Open resource →

Wallbreaker GitHub

https://github.com/hluwa/Wallbreaker/

Open-source code repository

How to use it

Open the repo page, read the README for install instructions (usually a git clone or pip install command), then run it in a terminal. Check the 'Issues' and 'Releases' tabs for updates.

Open resource →

r0capture GitHub

https://github.com/r0ysue/r0capture/

Open-source code repository

How to use it

Open the repo page, read the README for install instructions (usually a git clone or pip install command), then run it in a terminal. Check the 'Issues' and 'Releases' tabs for updates.

Open resource →

AndroidSecurityStudy GitHub

https://github.com/r0ysue/AndroidSecurityStudy/

Open-source code repository

How to use it

Open the repo page, read the README for install instructions (usually a git clone or pip install command), then run it in a terminal. Check the 'Issues' and 'Releases' tabs for updates.

Open resource →

Frequently asked questions

Do I need to install anything for these 13 tools?

Most entries here are GitHub projects — clone the repository and follow the README's install steps (pip, npm, go or cargo). A Kali Linux VM gives you many of them pre-installed.

Is it legal to use these resources?

Public-record lookups and defensive/research use are generally lawful, but rules vary by country and tool. Only test systems you own or have written authorization to test, respect each site's terms of service, and never use personal data unlawfully.

Where should a beginner start in this category?

Start with the web-based tools at the top of the list — they need no setup. Read each card's “How to use it” panel, run one real query, and only then move to installable tools.