Security Tools For Android Pentesting

Decompile/modify APK (smali-level)

Convert DEX to readable Java code

Automated static + dynamic scanner

Python tool for APK/DEX/smali analysis

Reverse engineering with multiple decompilers

Explore APK classes/methods/manifest

Detects security issues in APKs

DEX to Java JAR conversion

Extract secrets, tokens, and URLs

Hook/modify functions at runtime

Runtime exploitation via Frida (no root required)

Framework for modifying app behavior

Intercept/modify network traffic

Android app attack framework

Systemless root; works with LSPosed modules

Debugging bridge for Android device

Default Android logging system (adb logcat)

Filtered Logcat output by package

GUI log reader (useful for non-rooted devices)

In-app logging libraries used in apps

Android logging daemon behind logcat

For rooted devices to log everything (system + kernel)