A curated list of Android Security materials and resources For Pentesters and Bug Hunters

A multifunctional Telegram based Android RAT without port forwarding.

Android Penetration Tool [ RAT for Android ]

This repo is a helpful starting point for those interested in exploring the world of Android hacking and bug bounties. The resources mentioned have personally assisted me.

Android Bug Hunting

Automation of some MAPT activities and interaction with the mobile Android device.

bevigil-cli provides a unified command line interface and python library for using BeVigil OSINT API.

A multifunctional Telegram based Android RAT without port forwarding.

Automated script to convert and push Burp Suite certificate in Android, and modify Android's IP table to redirect all traffic to Burp Suite.

The MPT (Mobile Pentest Toolkit) is a must-have solution for your android penetration testing workflow.

Advanced APK analysis tool with intelligent caching, pattern matching, and comprehensive security vulnerability detection

Apkx-Hunter is an Android Static Analysis Framework in Debian Package written entirely in C with OWASP MASVS scanning with 15 categories and 166 detection patterns for Android security assessments, reverse engineering, malware analysis, and penetration testing. It features ML-based secret scoring, and advanced static security analysis.

Mobile Reconnaissance Framework is a powerful, lightweight and platform-independent offensive mobile security tool designed to help hackers and developers identify and address sensitive information within mobile applications.

You can find hardcoded Api-Key,Secret,Token Etc..

FirmwareDroid is an analysis framework for Android firmware and Apps.

AStools is a powerful Android security tool designed as an LSPosed module. It's crafted for ethical hacking and security testing, offering features like SSL pinning bypass and AES encryption key hooking.

APKnife is an advanced APK analysis and modification tool designed for security researchers and ethical hackers. It allows users to extract, analyze, modify, and sign APK files. The tool provides features like APK extraction, AndroidManifest.xml editing, API call detection, vulnerability scanning, and APK signing

A professional tool to automate attack surface detection in Android applications by parsing Manifest files.

Android Snapshot and recording tool

Silent Android device management — real-time dashboard, remote control & headless agent over WebSocket