An automated framework for monitoring and tampering with system API calls of native macOS, iOS, and Android apps using Frida.
AppMon is an automated framework for monitoring and tampering with system API calls of native macOS, iOS, and Android applications. It is built on Frida and provides tools for intercepting, analyzing, and manipulating API calls to understand app behavior and perform security testing. The framework enables runtime analysis without requiring jailbroken or rooted devices.
Security researchers, penetration testers, and mobile app developers who need to analyze, profile, or test the security of native applications on macOS, iOS, and Android.
AppMon offers a comprehensive, automated suite of tools built on Frida, specializing in runtime API monitoring and tampering across multiple platforms. Its ability to create inspectable apps for non-jailbroken/rooted devices makes it a practical choice for real-world security testing and behavioral analysis.
Documentation:
Open-Awesome is built by the community, for the community. Submit a project, suggest an awesome list, or help improve the catalog on GitHub.
AppMon supports macOS, iOS, and Android native applications, providing a unified framework for multi-platform security testing, as stated in the README.
The AppMon Android Tracer automatically traces Java classes, methods, arguments, and data types in Android APKs, simplifying behavioral analysis according to the README.
With IPA Installer and APK Builder, AppMon enables inspection on non-jailbroken iOS and non-rooted Android devices, making real-world testing practical.
AppMon Intruder manipulates API call data to alter app behavior, combining monitoring and active testing in one framework, as highlighted in the README.
AppMon is built on Frida, requiring users to set up and understand Frida first, which can introduce compatibility issues and a steep learning curve.
The README lists new/experimental features separately, indicating that some components may be unstable or lack thorough documentation, leading to potential unreliability.
Separate tools for iOS and Android, such as IPA Installer and APK Builder, necessitate platform-specific configurations, increasing initial setup complexity.