Mobile Security
Analyze, instrument and harden Android and iOS applications.
23 tools profiled
How it differs Analyses Android and iOS app binaries, statically and at runtime. The backend APIs an app calls belong to API security or DAST.
dwisiswant0
Command line scanner that decompiles an Android APK and pattern matches the output for hardcoded URIs, API keys and other secrets.
Apktool project
Reverse engineering tool that decodes Android APK resources and DEX bytecode to editable form and rebuilds a working package from them.
Reversec
Android security assessment framework that uses an on device agent to enumerate and interact with exported app components and IPC endpoints.
Frida project
Dynamic instrumentation toolkit that injects a scriptable JavaScript engine into running processes to hook, trace and rewrite behavior at runtime.
National Security Agency
Software reverse engineering suite with a multi architecture disassembler and decompiler, released as open source by the NSA.
skylot
Decompiler that converts Android DEX bytecode into readable Java source, with a command line tool and a graphical browser for APKs.
dwisiswant0
Command line scanner that decompiles an Android APK and pattern matches the output for hardcoded URIs, API keys and other secrets.
Apktool project
Reverse engineering tool that decodes Android APK resources and DEX bytecode to editable form and rebuilds a working package from them.
Reversec
Android security assessment framework that uses an on device agent to enumerate and interact with exported app components and IPC endpoints.
Frida project
Dynamic instrumentation toolkit that injects a scriptable JavaScript engine into running processes to hook, trace and rewrite behavior at runtime.
National Security Agency
Software reverse engineering suite with a multi architecture disassembler and decompiler, released as open source by the NSA.
skylot
Decompiler that converts Android DEX bytecode into readable Java source, with a command line tool and a graphical browser for APKs.
mitmproxy project
Interactive HTTPS proxy that intercepts, inspects, modifies and replays traffic, with a Python addon API for scripted manipulation.
MobSF project
Self hosted framework that performs automated static and dynamic security analysis of Android and iOS application binaries and produces a consolidated report.
SensePost
Runtime mobile exploration toolkit built on dynamic instrumentation, offering common iOS and Android assessment tasks as ready made commands.
Ostorlab
Mobile application scanner that pairs static binary analysis with instrumented dynamic testing on an extensible agent based engine.
radare2 project
Open source reverse engineering framework for disassembling, patching and debugging binaries across a wide range of architectures and file formats.
mitmproxy project
Interactive HTTPS proxy that intercepts, inspects, modifies and replays traffic, with a Python addon API for scripted manipulation.
MobSF project
Self hosted framework that performs automated static and dynamic security analysis of Android and iOS application binaries and produces a consolidated report.
SensePost
Runtime mobile exploration toolkit built on dynamic instrumentation, offering common iOS and Android assessment tasks as ready made commands.
Ostorlab
Mobile application scanner that pairs static binary analysis with instrumented dynamic testing on an extensible agent based engine.
radare2 project
Open source reverse engineering framework for disassembling, patching and debugging binaries across a wide range of architectures and file formats.