Mobile RE (RE Tooling): open-source projects that exist because someone reverse engineered a closed product, sorted by GitHub stars.
Dex to Java decompiler for Android apps
Tool for reverse engineering Android APK files
Static and dynamic analysis framework for Android and iOS app packages
Tools to convert Android .dex to Java .class files
Unity il2cpp metadata dumper for reverse engineering
Runtime mobile exploration toolkit powered by Frida
Extracts Unity serialized assets and projects
Android device control platform with remote desktop, automation, MITM and built-in Frida
Python toolkit for Android app analysis
Frida-based Android reverse engineering toolkit with CLI and universal scripts
Emulates Android native libraries (and experimentally iOS) to run app signing code
Windows-native Dalvik decompiler and Android analysis workbench
Cross-platform Qt IDE for reverse engineering and rebuilding Android APKs
Android virtual machine and generic Dalvik deobfuscator
Forces the developer tools open in WeChat mini programs and built-in browser
Android reverse-engineering workbench for VS Code (apktool, jadx, smali)
Bash script automating pull, decode, rebuild and Frida-gadget patching of Android APKs
Library providing access to Android hidden APIs and internal resources
Generates Objective-C headers from Mach-O files
Dumps IL2CPP metadata at runtime on Android via Zygisk
Decompiler that restores WeChat mini program .wxapkg packages to source code
Decompiler for iOS and macOS apps (IPA/Mach-O) built on Ghidra
Frida-based web UI to manipulate Android and iOS apps at runtime
Recovers managed .NET assemblies from Unity IL2CPP builds
Automated reverse-engineering tool for Unity IL2CPP binaries
Flutter app reverse engineering tool that recovers Dart objects and functions from libapp.so
Flutter reverse engineering framework that patches libflutter to expose Dart snapshot info
On-demand Android decompiler front-end, much faster than JADX
Unity Asset Bundle Extractor Avalonia: view and edit Unity assets
APK editor that decodes binary resources and DEX into editable JSON, XML and smali
Modular Frida-based framework for runtime analysis of Android and iOS apps
Frida-based tracer for JNI API usage in Android apps
Frida module to dump and trace IL2CPP Unity apps at runtime
Frida-based monitoring and tampering of system API calls in Android, iOS and macOS apps
Android app reverse engineering workshop
Modular Frida scripts for Android Java and JNI tracing
Tool that decompiles WeChat mini program and mini game .wxapkg files
GUI APK reverse engineering and analysis toolkit
Magisk module running frida-server on boot
Runtime mobile app analysis toolkit with a web GUI, powered by Frida
Framework that patches the Flutter engine to help reverse engineer Flutter apps
Runtime iOS application analysis tool built on Frida
Restores the stripped symbol table of iOS app binaries
Disassembler and decompiler for React Native Hermes bytecode
Android unpacker presented at DEF CON 22
Platform that automates reverse engineering of Android and embedded apps with Frida
Extracts and decompiles Android Dex bytecode from Vdex files
Zygisk module that injects Frida gadget into Android apps
High-performance dex deobfuscation and search library
One-click decompiler for apk/aar/dex/jar using jadx, dex2jar and enjarify
Frida-based Android hooking framework
Script to quickly analyze and decompile Android APK packages
Fast Java/Android APK and DEX decompiler written in pure C
Frida-based tool to inspect Java classes and objects in Android app memory
Reverse engineering tool that parses Flutter/Dart AOT snapshots
eBPF-based lightweight Android debugger with MCP support
Scripts to decompile APKs
Tool that converts an iOS app executable into a loadable dylib
One-step APK decompilation tool
AI-assisted reverse engineering tool for HarmonyOS NEXT (HAP/ABC), Android and iOS packages
Intercepts and parses Android Binder messages, like Wireshark for Binder
JADX-gui plugin for dynamic scripting of the decompiler
Maintained continuation of Il2CppInspector supporting newer metadata
Android app that disassembles .so, PE and ELF files on the device
Interactive reverse engineering tool for Android applications
Node-based WeChat mini program unpacker and decompiler
CLI tool that decompiles Android APKs to Java source and resources
APK/DEX packer and compiler detector
MCP server that lets AI agents read the iPhone screen, tap, type and read logs
MCP server that drives Apktool so agents can decode, search and edit Android APKs
Finds JNI function signatures in APKs and applies them to RE tools
Mobile app reverse engineering and analysis framework combining common tools
Custom Android ROM with built-in tracing and unpacking for app reverse engineering
Assembler/disassembler for React Native Hermes bytecode
Lightweight framework for emulating crypto algorithms in iOS executables
Scriptable Android debugger for reverse engineering
Decompiler for HarmonyOS ABC bytecode
Agent skill that decompiles APKs and extracts endpoints, auth headers and signing logic
OpenHarmony reverse engineering toolkit with early decompilation support
Pattern-based Dalvik deobfuscator using limited execution
Xposed module that shows current activities and enables disabled views for Android RE
Revived classic Android decompilation tool
Dumps Android ELF libraries from memory and rebuilds section headers
Deobfuscator for Android applications
Magisk module running a less detectable Frida server on boot
Android binary resources (ARSC/AXML) read and write library
Theos module for developing jailed iOS tweaks
Interop between CoreCLR and IL2CPP at runtime for modding
Builds a Frida server from source with anti-detection patches
GUI toolbox around apktool and related APK tools
Decompiles React Native Android/iOS bundles
Ghidra scripts for analysing Android NDK libraries
Unity IL2CPP disassembler for APK files
Apktool for decoding and rebuilding Android APK files
Dart / Flutter VM snapshot analyzer
APK reverse engineering toolkit
Auto-unpacks WeChat mini programs and extracts sensitive data and API endpoints
Engine used by jnitrace to intercept JNI API calls
Static code analysis for Smali files
One-step APK decompilation with multiple backends
Property extractor for Android apps
Android app security and privacy analysis platform
Tool to analyze Android APK packages (manifest, dex, certificates)
One-step iOS binary runtime instrumentation
WeChat mini program decompiler
Android reverse engineering tool and smali editor
Library for parsing compiled Android XML manifests
Runs Android app methods on a standard JVM for analysis
Mobile reverse engineering framework
Tools and scripts to manipulate Android APKs
SQL queries over Android apk and dex files
Android APK analysis and feature extraction library
Restores stripped Mach-O symbols and dumps Objective-C/Swift types
Android loadable kernel modules for reversing and debugging
Spring Boot service wrapping unidbg to run Android native code
Android Dalvik bytecode (DEX) editor
On-device MCP server for reverse engineering Android native .so libraries
Scripts to unpack APKs protected by Tencent Legu
unidbg as a service for computing request signatures of Chinese apps
Dumps IL2CPP executables and metadata from Android process memory
HarmonyOS NEXT ArkTS bytecode decompiler
SDK for building Android app runtime instrumentation tools without source
Toolkit app for smali grammar, DEX repair and Flutter analysis
Android APK deobfuscation tool based on fuzzy comparison between builds
Decompiles Unity APK/IPA builds back into a Unity project
Decompiler for React Native Hermes bytecode (.hbc)
Android analysis tools: JNI tracing by native hook and Java object to JSON
IDA plugin that eases reversing iOS binaries
Decompile and recompile Android apps in Termux without OpenJDK
Android RE toolset with ELF reader, Frida dump scripts, DexDump and SO dumping
Unpacker for Douyin (ByteDance) mini program TTPKG packages
Shim for loading native JNI libraries for Android active debugging
Experiments on reverse engineering Flutter applications
Modern Objective-C class dump based on LIEF and LLVM
Go WeChat mini program wxapkg unpacker with auto scanning
Rust Android ARM64 emulator rewritten from unidbg
Emulator that executes Android Dalvik bytecode instruction by instruction
VS Code extension for iOS reverse engineering projects
Decompiler for HarmonyOS Next Panda (.abc) executables
Reimplementations of app request signature algorithms
Advanced DEX editor for Android
Improved nm plus Objective-C and Swift class-dump
Static unpacker for Tencent Legu-protected .so libraries
Converts an APK into an editable Android project with native hook support
On-device Android reverse engineering with radare2 and Java decompilers
Jadx GUI plugin to trace and hook methods with Frida
Frida-powered mobile app sandbox file browser
Decompiles Flutter Android AOT libapp.so into Dart-like pseudocode
Cross-platform APK decompilation and rebuilding tool
Android Killer plugin for APKs it cannot decompile
ART-integrated DEX dumper and repair toolkit for Android 16
Fast Android decompiler for humans and AI agents
Kernel-based Android Binder transaction observer
WeChat mini program decompiler
WPF frontend for apktool and signing
Dex analyzer for finding obfuscated code dynamically
Decompile React Native JavaScript bundles
Tools and guidelines for reverse engineering Flutter apps
Reverse engineering tool for Android AutoJS applications
Steps to build an android.jar exposing AOSP hidden APIs
Guide to sniff Android HTTPS traffic with Waydroid and mitmproxy
jni.h compiled as a Ghidra data type archive
Fast, lightweight Android decompiler for agents and mobile researchers
Deobfuscates Android apps protected with the Paranoid string obfuscator
Unity and Cocos2d-x Lua game reverse engineering toolkit for Android
WeChat mini program and mini game wxapkg unpacker with PC encrypted package support
Decompiler plus extensions for Android app analysis
Type diagram plugin for the JADX decompiler
Loads FLEX to debug arbitrary third-party iOS apps
Frida-based tool that extracts native .so libraries from Android apps at runtime
Android DEX disassembler and Binary Ninja plugin
Reverse engineering tool for Android Cocos2d-JS apps
Run Android Java methods inside Jadx without a device
Fast Android DEX decompiler integrated into radare2
Command-line tool for reverse engineering Hermes (React Native) bytecode
Static inspector for Flutter/Dart AOT libapp.so files that recovers classes and call edges
Reverse engineers mobile app user interfaces from screenshots into code
Unified Android RE CLI for Hermes bytecode, DEX and APK signing, with JSON output and MCP server
Fast Flutter/Dart AOT decompiler for agents and mobile researchers
Agent skill for Android reverse engineering and modding with apktool, DexKit and Xposed
Graphical reverse engineering UI for Frida on Android
On-device Flutter/Dart AOT reverse engineering for Android, based on Blutter
Config-driven Frida instrumentation engine for Android
Modular toolkit for Android runtime instrumentation with Frida
Emulates Android native libraries and DEX/Java classes off-device, driven by AI through MCP
Toolkit to inspect, disassemble, decompile and patch React Native Hermes bytecode
Decompiles React Native Hermes bytecode to pseudocode