Open source. Open possibilities.

Threadbase Mobile is a local-first mobile control plane for monitoring and managing AI coding agent sessions, such as Claude Code and Codex, via a connected tb-streamer instance.

A curated list of Android security resources including tools for static/dynamic analysis, reverse engineering, fuzzing, and vulnerability scanning.

LeakCanary is an open-source memory leak detection library for Android, maintained by Square. It helps developers find and diagnose memory leaks in Android apps, with documentation hosted at square.github.io/leakcanary.

Appium is an open-source, cross-platform automation framework based on the W3C WebDriver protocol for native, hybrid, mobile web, and desktop applications.

A curated collection of awesome GitHub lists covering cybersecurity topics for hackers, pentesters, and security researchers — including bug bounty, OSINT, reverse engineering, CTF, malware analysis, web security, IoT, AI security, and more.

objection is a Frida-powered runtime mobile exploration toolkit for iOS and Android, enabling security assessment of mobile apps without jailbreak, including SSL pinning bypass, keychain dumping, and heap manipulation.

Browser‑based real‑device lab for Android, iOS and Tizen. Provides a web UI to manage and automate mobile device testing from a single workspace, with Docker and native host support.

LibrePods is a GPL-licensed project that reverse-engineers Apple's proprietary AirPods protocol to bring AirPods features to Linux and Android, including noise control modes, ear detection, battery status, head gestures and conversational awareness.

App Manager is a libre Android package manager and app viewer with Material 3 UI. It inspects app components, permissions and trackers, installs or backs up APKs, and offers root/ADB tools like freezing apps and editing shared preferences.

Detox is a gray box end-to-end testing framework for mobile apps, supporting React Native on Android and iOS. It automates user interactions, reduces flakiness, and integrates with CI/CD pipelines.

jadx is a Dex to Java decompiler with command-line and GUI tools that convert Android APK, dex, aar, aab and zip files into readable Java source code, decode resources, and include a deobfuscator.

Airtest is a cross-platform UI automation framework for games and apps, using image recognition to locate UI elements without code injection. It supports Android, iOS, and Windows, with a GUI tool (AirtestIDE) and CLI for running test cases.