Android APK Decompiler & Analyzer
APK extraction and manifest parsing Dangerous permission detection Hardcoded secret scanning (API keys, tokens, passwords, URLs) Native library analysis Exporte
Arsenal
Professional offensive security tools & exploit frameworks
98
Tools
12
Categories
Frida Script Collection
Frida script collection with 10 real, load-ready scripts (node --check clean) for Android and iOS: SSL pinning bypass, root/jailbreak bypass, crypto hooks, meth
iOS IPA Analyzer
IPA extraction and Info.plist parsing App Transport Security (ATS) configuration audit Entitlements extraction and dangerous entitlement detection Binary protec
Mobile API Interceptor Proxy Config
BOLA (Broken Object Level Authorization) detection Missing authentication header detection Sensitive data exposure in responses Excessive data exposure analysis
Magisk Module for Pentest
Frida server auto-start on boot System CA certificate injection (for Burp/mitmproxy) SELinux permissive toggle Global proxy auto-configuration Enhanced root hid
Android Intent Fuzzer
Enumerate exported activities, services, receivers, providers Fuzz string extras with injection payloads (SQLi, XSS, path traversal) Fuzz URI schemes (file://,
Mobile Forensics Data Extractor
SMS/MMS messages with timestamps Call logs (incoming, outgoing, missed) Saved WiFi networks with PSKs Chrome browser history and saved logins WhatsApp/Telegram