Skip to main content

Software in Mobile Security Software

8 tools
Pricing
Platform
ToolPricing
Apktool

Reverse engineering tool for decoding, modifying, and rebuilding Android APK resources, assets, and Smali bytecode files.

Open Source
Corellium

Virtual iOS, Android, and ARM devices with instant root access for security testing and research.

Commercial
drozer

Security assessment framework for Android that interacts with the runtime, IPC endpoints, and OS as an installed app to find exposed components.

Open Source
Frida

Dynamic code instrumentation toolkit that injects JavaScript into live applications to trace, observe, and modify runtime behavior across platforms.

Open Source
jadx

Command-line and GUI decompiler for converting Android DEX files and APK packages back into readable Java source code for analysis.

Open Source
MobSF

Automated mobile application security assessment framework combining static and dynamic analysis for Android, iOS, and Windows (APPX) binaries.

Open Source
objection

Runtime mobile exploration toolkit powered by Frida that provides a CLI and REPL for SSL pinning bypass, keychain dumps, and app inspection.

Open Source
palera1n

Open source checkm8-based jailbreak for A8 through A11 devices on iOS 15 and later.

Open Source

About Mobile Security Software

Mobile security software analyzes, decompiles, and instruments Android and iOS applications to find security flaws. The category covers static analysis tools that decompile APK and IPA files to inspect source code, hardcoded secrets, and insecure storage patterns. Runtime instrumentation frameworks like Frida and objection hook functions in running applications, bypass certificate pinning, and trace calls to crypto APIs. Automated assessment suites like MobSF combine static and dynamic analysis of Android and iOS apps in a single framework. Tools like drozer test Android inter-process communication by interacting with exported activities and content providers from an external perspective. The category addresses threats specific to mobile platforms: insecure data storage, broken certificate validation, client-side authentication bypasses, and deep link hijacking. Mobile security testing differs from web application testing because the application runs on a device with a different trust model, limited filesystem access, and platform-specific security mechanisms like Android sandboxing and iOS code signing. Apktool, jadx, and drozer are Android-specific, while Frida, objection, and MobSF support both Android and iOS, and dynamic iOS testing often depends on a jailbroken device or a virtualized one.

Covered Topics

Static APK & IPA AnalysisDynamic Runtime InstrumentationCertificate Pinning VerificationIPC & Deep Link AuditingMobile App Vulnerability Scanning

In This Catalog

  • This category lists 8 tools: 7 open source and 1 commercial.
  • By platform, 7 run on Linux, 6 on Windows, 7 on macOS, and 1 on the web.
  • The most common license among the open-source tools is Apache-2.0 (2 tools).

Frequently Asked Questions

What is Mobile Security Software?→

Mobile security software and tools analyze, decompile, and dynamically instrument Android and iOS applications to identify insecure storage, weak cryptography, and vulnerable IPC mechanisms.

What topics does the Mobile Security Software category cover?→

Static APK & IPA Analysis, Dynamic Runtime Instrumentation, Certificate Pinning Verification, IPC & Deep Link Auditing, Mobile App Vulnerability Scanning

Which Mobile Security tools are open source?→

7 of the 8 tools in this category are open source: Apktool, drozer, Frida, jadx, MobSF, objection, and palera1n.

Related