Nutcracker is a powerful, modular and extensible framework designed for mobile security analysis and offensive threat intelligence. Detects and bypasses anti-root/RASP protections, analyzes insecure manifest conf, extracts hardcoded secrets and launches OSINT recon — all in one tool. aligned with MASVS for comprehensive security compliance.

Agent skills for securing mobile apps: storage, transport, auth, obfuscation, and hardening.

Mobile Security Intelligence Platform - Transform mobile app security scans into actionable intelligence with static/dynamic analysis, framework detection, and OWASP MASVS mapping

Aran — Code-to-Cloud RASP ecosystem: universal C++ RASP core + JNI bridges for Android/iOS/Cordova/Flutter/RN/Unity/Xamarin, Java 21 ingestion, OWASP MASVS + RBI mapped.

APK Static Analyzer

Android file signing app. ECDSA P-256 over Android KeyStore (StrongBox/TEE). Detached DER-encoded .sig output. No INTERNET permission, no telemetry. Standalone sign and verify flows. BSI TR-02102-1, OWASP MASVS, NIST SP 800-186.