Topics / #mobile-security

Mobile-security projects on GitHub

Frameworks and guides for testing and securing mobile applications.

As of , the most-starred Mobile-security projects on GitHub are Mobile-Security-Framework-MobSF (22K stars), mvt (15.4K stars) and hacker101 (14.6K stars). GitHub.Locker tracks 12 Mobile-security repositories with 91.1K stars combined. The fastest-growing on October 16 was Fieldwatch, with +45 stars in a day.

12Projects
91.1KStars in total
+109Stars in a day
Browse in the catalog →github.com/topics/mobile-security ↗

Hot right now

Most stars gained in a day · Oct 16

+45

Fieldwatch

OffGridPete/Fieldwatch · ★ 3.9K

Fieldwatch is a receive-only Android app that passively listens for nearby Wi-Fi access points and Bluetooth LE advertisements, so you can see what wireless devices are around you.

+19

mvt

mvt-project/mvt · ★ 15.4K

MVT (Mobile Verification Toolkit) is a collection of forensic utilities that help gather and analyze traces on Android and iOS devices to identify a potential compromise, originally built by Amnesty International's Security Lab during the Pegasus Project.

+17

android-reverse-engineering-skill

SimoneAvogadro/android-reverse-engineering-skill · ★ 8.2K

A Claude Code skill that decompiles Android APK/XAPK/JAR/AAR files and extracts the HTTP APIs used by the app — Retrofit endpoints, OkHttp calls, hardcoded URLs, and authentication patterns — so you can document and reproduce them without the original source code.

+10

Mobile-Security-Framework-MobSF

MobSF/Mobile-Security-Framework-MobSF · ★ 22K

MobSF is an automated, all-in-one mobile security framework: it performs static and dynamic analysis, penetration testing, malware analysis and privacy analysis on Android, iOS and Windows Mobile apps.

The all-time top

12 projects · by stars

  1. #1 · MobSF/Mobile-Security-Framework-MobSF

    Mobile-Security-Framework-MobSF

    MobSF is an automated, all-in-one mobile security framework: it performs static and dynamic analysis, penetration testing, malware analysis and privacy analysis on Android, iOS and Windows Mobile apps.

    22K
  2. #2 · mvt-project/mvt

    mvt

    MVT (Mobile Verification Toolkit) is a collection of forensic utilities that help gather and analyze traces on Android and iOS devices to identify a potential compromise, originally built by Amnesty International's Security Lab during the Pegasus Project.

    15.4K
  3. #3 · Hacker0x01/hacker101

    hacker101

    Hacker101 is a free online class for web and mobile security from HackerOne (the Hacker0x01 org), aimed at everyone from programmers curious about bug bounties to seasoned security professionals.

    14.6K
  1. 4

    mastg

    13.3KOWASP/mastg · Python

    A comprehensive OWASP manual for mobile app security testing and reverse engineering. It gives technical processes for verifying the weaknesses listed in the OWASP Mobile Security Weakness Enumeration (MASWE).

  2. 5

    Resources-for-Beginner-Bug-Bounty-Hunters

    12.3Knahamsec/Resources-for-Beginner-Bug-Bounty-Hunters

    A curated collection of resources for people getting started with web hacking and bug bounty hunting, including blog posts, talks, books, tools, labs and vulnerability-type guides.

  3. 6

    android-reverse-engineering-skill

    8.2KSimoneAvogadro/android-reverse-engineering-skill · Shell

    A Claude Code skill that decompiles Android APK/XAPK/JAR/AAR files and extracts the HTTP APIs used by the app — Retrofit endpoints, OkHttp calls, hardcoded URLs, and authentication patterns — so you can document and reproduce them without the original source code.

  4. 7

    Fieldwatch

    3.9KOffGridPete/Fieldwatch · Kotlin

    Fieldwatch is a receive-only Android app that passively listens for nearby Wi-Fi access points and Bluetooth LE advertisements, so you can see what wireless devices are around you.

  5. 8

    FilzaSlop

    4480xjohnnydev/FilzaSlop · Objective-C

    FilzaSlop is a fork of FilzaJailedDS that adds a sandbox escape exploit and app container access to the Filza file manager on iOS 18, iOS 26, and iOS 27 beta 1-4, plus a bundled PosterBoard Wallpaper Lab.

  6. 9

    OhMyKeymint

    438ITxiao6666/OhMyKeymint · Rust

    Oh My Keymint (OMK) is a custom Android Keystore implementation that fully mirrors the AOSP AIDL interface, designed to spoof key attestation and make app behavior harder for detectors to distinguish from a genuine AOSP device.

  7. 10

    bad_query

    276forcequitOS/bad_query · C

    badquery is a proof-of-concept sandbox escape for iOS 26 and 27, written in C — code that demonstrates breaking out of the iOS app sandbox.

  8. 11

    UniRoot

    229kuuky29/UniRoot · Kotlin

    UniRoot is a one-tap rooting app for Samsung Galaxy devices. It ships a new unprivileged kernel exploit (DirtyFrag, CVE-2026-43284) that roots the phone with a single button press, plus an older CVE-2026-43499-based exploit with per-device profiles, and it automatically re-roots the device on every boot.

  9. 12

    badnotes

    149c22dev/badnotes · Objective-C

    BadNotes is a jailbreak tweak for iOS that unlocks GoodNotes Pro by spoofing the app's subscription check.

Often tagged together