As a bug hunter, are your bug bounty reports getting rejected because you don't use a "malicious" Proof of Concept (PoC) app to exploit the vulnerabilities? I've got you covered!
☆151Jul 1, 2026Updated last month
Alternatives and similar repositories for malware-apk
Users that are interested in malware-apk are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- A lightweight Python-based tool to extract and enumerate Android components and automatically generate practical ADB commands☆119Jun 14, 2025Updated last year
- Browser-based Android security auditing tool.☆81Aug 7, 2026Updated 2 weeks ago
- Ostorlab Pentest Benchmarks☆18Aug 10, 2026Updated last week
- An automated exploit for CVE-2026-0073 (Android ADB TLS Auth Bypass). Features a built-in mDNS/Zeroconf scanner to instantly discover ran…☆24May 20, 2026Updated 3 months ago
- Live runtime audit for installed Android apps. Runs on the rooted phone, serves a browser dashboard.☆31May 23, 2026Updated 3 months ago
- Managed Database hosting by DigitalOcean • AdPostgreSQL, MySQL, MongoDB, Kafka, Valkey, and OpenSearch available. Automatically scale up storage and focus on building your apps.
- Generate Frida bypass scripts for Android APK root and SSL checks.☆218Jun 7, 2025Updated last year
- Analyze Android native `.so` files☆127Jul 28, 2025Updated last year
- Magisk Plugin for Updating iptables When Proxy Changes☆11Mar 17, 2025Updated last year
- A universal Frida Script that prevents application self-termination for iOS Applicaitons.☆17Apr 29, 2026Updated 3 months ago
- Intent Runtime Inspection System☆72May 28, 2026Updated 2 months ago
- A simple script that pushes a file to the Android device and hooks the relevant functions with Frida to override the application's behavi…☆15Oct 9, 2024Updated last year
- Repository for download all version of @hpAndro1337 (Android AppSec) application.☆104Dec 26, 2023Updated 2 years ago
- Hands-on challenges for learning how to reverse engineer Flutter applications.☆56Aug 17, 2026Updated last week
- 🔓A Curated List Of Modern Android Exploitation Conference Talks☆800Jul 31, 2026Updated 3 weeks ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- ☆16Sep 4, 2025Updated 11 months ago
- Work in progress...☆487Apr 18, 2026Updated 4 months ago
- A burp for intents wannabe☆86Jul 29, 2024Updated 2 years ago
- A powerful subdomain enumeration tool that aggregates data from multiple sources to create comprehensive lists of root subdomains.☆66May 2, 2026Updated 3 months ago
- ☆14Aug 22, 2025Updated last year
- ☆441Jun 1, 2021Updated 5 years ago
- iOS traffic interception framework which route all device HTTP/HTTPS traffic through Burp Suite via a system-wide VPN tunnel☆47Feb 15, 2026Updated 6 months ago
- Significant security enchancements of recent major Android versions.☆187Jun 25, 2026Updated last month
- Contains all the scripts and sample apps related to android in app protections.☆45Apr 19, 2026Updated 4 months ago
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- Some Useful Tricks for Pentest Android and iOS Apps☆181Nov 10, 2025Updated 9 months ago
- Search Termux Commands and Guide in Termux !!☆13Apr 9, 2026Updated 4 months ago
- The Android Penetration Testing Steps repository is intended for security professionals, penetration testers, developers, and anyone who …☆132Feb 24, 2023Updated 3 years ago
- Self-hosted external attack surface scanner. Subdomain enumeration + takeover detection, ports, CVEs, TLS, SSH, web vulns, EPSS/KEV prior…☆22Updated this week
- AI Security tool to deobfuscate and find any potential vulnerabilities in android apps.☆376Jan 29, 2026Updated 6 months ago
- A tool for inspecting and analyzing mobile application storage files.☆51May 31, 2026Updated 2 months ago
- Mobile Edge-Dynamic Unified Security Analysis☆2,331Aug 11, 2026Updated last week
- Token Tailor is a Burp Suite Community Edition extension that aims to simplify security testing by automating JWT renewal.☆38Sep 30, 2025Updated 10 months ago
- Delve into a comprehensive checklist, your ultimate companion for Android app penetration testing. Identify vulnerabilities in network, d…☆471Oct 20, 2024Updated last year
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- Inspect and instrument React Native applications at runtime☆125Nov 19, 2024Updated last year
- Reverse engineering CTFs.☆69Jan 25, 2026Updated 6 months ago
- Jarida (Jadx + Frida) is a Jadx GUI plugin that lets you trace and optionally patch Java method return values at runtime using Frida, dir…☆125Apr 17, 2026Updated 4 months ago
- Exploit app for CVE-2022-20494, a high severity permanent denial-of-service vulnerability that leverages Android's DND (Do not disturb) f…☆27Mar 3, 2023Updated 3 years ago
- A list of bizarre crackmes☆148Mar 24, 2026Updated 5 months ago
- Enhanced, Faster, Better version of the exploit☆25Dec 27, 2025Updated 7 months ago
- Pure-Rust Android decompiler and security-audit suite. DEX → Java, Hermes → JavaScript. Cross-layer taint across the React Native bridge.…☆27Jun 11, 2026Updated 2 months ago