Apkx-Hunter is an Android Static Analysis Framework written entirely in C with OWASP MASVS scanning with 15 categories and 166 detection patterns for Android security assessments, reverse engineering, malware analysis, bug bounty hunting, and penetration testing. It features ML-based secret scoring, and advanced static security analysis.

Nutcracker is a powerful, modular and extensible framework designed for mobile security analysis and offensive threat intelligence. Detects and bypasses anti-root/RASP protections, analyzes insecure manifest conf, extracts hardcoded secrets and launches OSINT recon — all in one tool. aligned with MASVS for comprehensive security compliance.

Agent skills for securing mobile apps: storage, transport, auth, obfuscation, and hardening.

Mobile Security Intelligence Platform - Transform mobile app security scans into actionable intelligence with static/dynamic analysis, framework detection, and OWASP MASVS mapping

Automated Android DAST framework: 9-phase VAPT coverage with drozer, adb, apktool & AI-ready reports

Aran — Code-to-Cloud RASP ecosystem: universal C++ RASP core + JNI bridges for Android/iOS/Cordova/Flutter/RN/Unity/Xamarin, Java 21 ingestion, OWASP MASVS + RBI mapped.

Integrated Android security platform: SAST + MobSF + emulator-based dynamic analysis + DAST (Nuclei) with AI-assisted reporting.

Intentionally vulnerable iOS application for mobile security training — 30 challenges across OWASP MASVS categories

Android APK Static Security Analysis Tool using Python, APKTool and JADX

Android file signing app. ECDSA P-256 over Android KeyStore (StrongBox/TEE). Detached DER-encoded .sig output. No INTERNET permission, no telemetry. Standalone sign and verify flows. BSI TR-02102-1, OWASP MASVS, NIST SP 800-186.

APK Static Analyzer

Damn Vulnerable Mobile — a self-contained, intentionally-vulnerable mobile backend lab with MASVS-mapped challenges, writeups, and a flag scoreboard. Training only.

Static + dynamic security analysis for iOS and Android apps — map reverse-engineering exposure to OWASP MASVS before shipping.