Apktool
Reverse engineering tool for Android APK files
Decodes Android APK resources and code to a near-original form (smali) and rebuilds them after modification, for analysis and testing.
- Stars
- 26k
- Forks
- 4.1k
- Last commit
- 2 days ago

Dynamic instrumentation toolkit
Injects a JavaScript engine into running processes on Windows, macOS, Linux, iOS and Android to trace, hook and modify functions at runtime.

Frida lets researchers and testers write JavaScript (or use bindings from Python and other languages) that runs inside a target process, intercepting function calls, reading memory and changing behaviour. It works on desktop systems and on mobile devices, rooted or through a gadget library embedded in an app.
It underpins many mobile testing tools, including MobSF's dynamic analysis and objection. This repository is the main project hub; components live in sub-repositories.
LGPL-2.0-or-later WITH WxWindows-exception-3.1 · wxWindows Library Licence 3.1 · Open source
GitHub does not detect the licence; COPYING is the wxWindows Library Licence 3.1 (LGPL with an exception for binary distribution), which is OSI-approved.
Checked by ThreatWire against the repository's licence file on 2026-10-20. GitHub detects: NOASSERTION.
No published advisory found for Frida in GitHub repository advisories. That does not mean the tool has no vulnerabilities.
Sources: GitHub repository advisories · checked 2026-10-20.
Reverse engineering tool for Android APK files
Decodes Android APK resources and code to a near-original form (smali) and rebuilds them after modification, for analysis and testing.
Automated mobile app security testing
Mobile Security Framework: automated static and dynamic analysis of Android and iOS apps, with malware analysis and a REST API for CI.
Software reverse engineering framework from the NSA
Reverse engineering suite released by the NSA with disassembly, decompilation, graphing and scripting for many processor architectures.
UNIX-like reverse engineering framework
Command-line reverse engineering framework with a disassembler, debugger, hex editor and scripting for many architectures and file formats.
Pattern matching for malware research
Tool and rule language from VirusTotal to identify and classify malware samples using textual and binary patterns plus conditions.
Memory forensics framework
Framework for extracting digital artefacts from memory images (RAM dumps) of Windows, Linux and macOS systems, rewritten in Python 3.