40 Open source projects that are alternatives of or similar to grapefruit

A repository of telemetry domains and URLs used by mobile location tracking, user profiling, targeted marketing and aggressive ads libraries.

Oversecured Vulnerable iOS App

Various analysis of Android stalkerware

A repository for scripting a mobile attack toolchain

(WIP) Runtime Application Instruments for iOS. Previously Passionfruit

Unofficial frida extension for VSCode

Mobile penetration testing android & iOS command cheatsheet

An open source Android application that is intentionally vulnerable so as to act as a learning platform for Android application security beginners.

Oversecured Vulnerable Android App

Scanning APK file for URIs, endpoints & secrets.

Testowanie oprogramowania - Książka dla początkujących testerów

A fast and elegant extension for VSCode used for iOSre projects.

An effort to build a single place for all useful android and iOS security related stuff. All references and tools belong to their respective owners. I'm just maintaining it.

GDA is a new fast and powerful decompiler in C++(working without Java VM) for the APK, DEX, ODEX, OAT, JAR, AAR, and CLASS file. which supports malicious behavior detection, privacy leaking detection, vulnerability detection, path solving, packer identification, variable tracking, deobfuscation, python&java scripts, device memory extraction, dat…

Runtime Mobile Security (RMS) 📱🔥 - is a powerful web interface that helps you to manipulate Android and iOS Apps at Runtime

VyAPI - A cloud based vulnerable hybrid Android App

Mobile Security Framework (MobSF) is an automated, all-in-one mobile application (Android/iOS/Windows) pen-testing, malware analysis and security assessment framework capable of performing static and dynamic analysis.

Created by High-Tech Bridge, the Purposefully Insecure and Vulnerable Android Application (PIVAA) replaces outdated DIVA for benchmark of mobile vulnerability scanners.

Documentation:

Hand-crafted Frida examples

A Virtual Machine For Assessing Android applications, Reverse Engineering and Malware Analysis

StaCoAn is a crossplatform tool which aids developers, bugbounty hunters and ethical hackers performing static code analysis on mobile applications.

Jackhammer - One Security vulnerability assessment/management tool to solve all the security team problems.

[Official] Android reverse engineering tool focused on dynamic instrumentation automation. Powered by Frida. It disassembles dex, analyzes it statically, generates hooks, discovers reflected methods, stores intercepted data and does new things from it. Its aim is to be an all-in-one Android reverse engineering platform.

A Collection of Secure Mobile Development Best Practices

Android Security Suite for in-depth reconnaissance and static bytecode analysis based on Ghera benchmarks.

Intercept, modify, repeat and attack Android's Binder transactions using Burp Suite

Source code for Hacker101.com - a free online web and mobile security class.

Flutter Reverse Engineering Framework

A companion repo for the blog article: https://blog.approov.io/adding-oauth2-to-mobile-android-and-ios-clients-using-the-appauth-sdk

GSM Assessment Toolkit - A security evaluation framework for GSM networks

PowerAuth - Open-source solution for authentication, secure data storage and transport security in mobile banking.

Django application that performs SAST and Malware Analysis for Android APKs

log for articles and info in android for every developer

Android process memory dump tool without ndk.

GSM Scanner, RTL-SDR, StingWatch, Meteor

PowerAuth Mobile SDK for adds capability for authentication and transaction signing into the mobile apps (ios, watchos, android).

Intentionally vulnerable Android application.

pure python remote adb scanner + nmap scan module

Intercept, modify, repeat and attack Android's Binder transactions using Burp Suite