[opensourcedex]

PhoneSploit-Pro is a free, open source threat detection & response project written in Python and released under GPL-3.0. It has 6,310 GitHub stars, 896 forks and 1 open issues, and was last pushed 13 days ago. On this registry it ranks #15 of 36 tracked projects in Threat Detection & Response, with 5 head-to-head comparisons available.

What is PhoneSploit-Pro?

PhoneSploit Pro is a free, GPL-3.0-licensed Python tool that bundles ADB, scrcpy, Nmap and Metasploit-Framework behind a single numbered menu, letting security professionals and penetration testers take remote control of Android devices over USB or Wi-Fi without memorising command syntax.

What it is

PhoneSploit Pro is an all-in-one Android hacking tool written in Python and distributed under the GPL-3.0 licence. It lives in the Android security and penetration-testing ecosystem, building on ADB (Android Debug Bridge) and drawing in scrcpy for screen mirroring and control, Nmap, and the Metasploit-Framework. The repository carries 6,310 stars and 896 forks, with one open issue and its most recent push in September 2026. Operators interact with it through a console menu: pick a number and the underlying command runs.

The concrete problem it solves is the memorisation of ADB commands and arguments. As the README puts it, "You no longer need to memorize commands and arguments, PhoneSploit Pro does it for you." What would otherwise be a sequence of manual adb invocations — connecting over USB or network, listing devices, opening a shell, pulling files, dumping messages and contacts — becomes a set of numbered choices, and a full Metasploit compromise can be automated from that same menu.

Key capabilities

  • Connect to a device over USB or Wi-Fi through ADB; list attached devices, disconnect every session, and stop or restart the ADB server.
  • Multi-device selection: when several devices are attached over USB or network, the session target is chosen with ANDROID_SERIAL.
  • Device control: open an interactive device shell, send keycodes, unlock the screen (turn on, swipe up, enter a password), lock it, power it off, and reboot to System, Recovery, Bootloader or Fastboot.
  • Capture: take screenshots or record the screen for a specified time, pull the result to the computer automatically, and remove the file from the target device for an anonymous capture.
  • Mirror and control the target screen, list files and folders, download from the device, and send files or folders to it.
  • Data extraction: copy WhatsApp data, screenshots and camera photos; dump SMS, contacts and call logs; stream live video from the front or back camera.
  • App management and exploitation: run an application, install an APK or split APKs, and automate a full Metasploit compromise.

Who uses it and how

  • Penetration testers and red teams assessing an Android handset they are authorised to test, working over USB or Wi-Fi once ADB access exists.
  • Post-exploitation work, where a Metasploit-Framework compromise is driven from the same menu used for ADB tasks instead of a separate console.
  • Mobile data-review workflows: dumping SMS, contacts and call logs, or copying WhatsApp data, camera photos and screenshots to the operator's computer.
  • Multi-device labs, where ANDROID_SERIAL selection lets one operator target a specific handset while several are attached.
  • Contributors: the repository is tagged collaborate and hacktoberfest.

Getting started

Install the dependencies listed in the README's "Installing dependencies" section — Python 3.10 or newer plus the ADB, scrcpy, Nmap and Metasploit-Framework tooling covered under "Installing tools manually" — then run the tool and choose a numbered option. A project homepage is available at https://phonesploitpro.vercel.app.

How it compares

Among the tools named in the project's own material, Metasploit-Framework is the closest relative, and PhoneSploit Pro complements rather than replaces it: it drives Metasploit while adding the Android-specific ADB, scrcpy and Nmap operations around it. Metasploit is a general exploitation framework, whereas PhoneSploit Pro is scoped narrowly to Android device control and data extraction.

When to use it — and when not to

A self-hoster must supply Python 3.10 or newer, install ADB, scrcpy, Nmap and Metasploit-Framework, and prepare the target device as the README's device setup tutorial describes, which in practice means ADB access and an accepted authorisation prompt. It is not a remote exploit for a locked or unconfigured handset: with no prior ADB access there is nothing for it to connect to. The README carries a disclaimer, and the tool is intended only for devices the operator owns or has written permission to test.

project readme (upstream, from github) — read inline

PhoneSploit Pro

The Swiss Army knife for Android.

An all-in-one hacking tool written in Python to remotely take over Android devices using ADB, scrcpy, Nmap, and Metasploit-Framework.

GitHub release (latest by date) Python GitHub Repo stars GitHub forks

Table of contents

Overview

Own the device. Every way that matters.

Connect over USB or Wi‑Fi, then control the device, extract data, stream camera and microphone, manage apps, and automate a full Metasploit compromise, all from one menu.

You no longer need to memorize commands and arguments, PhoneSploit Pro does it for you. Pick a number and run.

Screenshots

Screenshot

Features

Feature Description
Connect a device Connect to a device remotely using ADB.
List connected devices Show all devices currently attached to ADB.
Disconnect all devices Disconnect every ADB session.
Multi-device selection If several ADB devices are connected (USB or network), choose which device to use for the session (ANDROID_SERIAL).
Stop ADB server Stop the ADB server process.
Restart ADB server Restart the ADB server process.
Access device shell Open an interactive shell on the connected device.
Keycodes Send keycodes to control the device remotely.
Unlock device Turn the screen on, swipe up, and enter a password when needed.
Lock device Lock the device.
Restart / reboot Restart or reboot the device to System, Recovery, Bootloader, or Fastboot.
Power off Power off the target device.
Screenshot Take a screenshot and pull it to the computer automatically.
Screen recording Record the target device’s screen for a specified time and pull the recording to the computer automatically.
Anonymous screenshot / screen record Take screenshots or screen recordings and remove the file from the target device afterward.
Mirror and control Mirror the screen and control the target device.
List files and folders List all files and folders on the target device.
Download from device Download a file or folder from the target device.
Send to device Send a file or folder from the computer to the target device.
Copy WhatsApp data Copy all WhatsApp data to the computer.
Copy screenshots Copy all screenshots to the computer.
Copy camera photos Copy all camera photos to the computer.
Camera live Stream live video from the front or back camera on the target device.
Dump SMS Export all SMS from the device to the computer.
Dump contacts Export all contacts from the device to the computer.
Dump call logs Export all call logs from the device to the computer.
Run an app Launch an application on the device.
Install APK Install an APK from the computer to the target device.
Install split APKs Install apps shipped as multiple APK splits (e.g. split bundles).
Uninstall an app Remove an installed application.
List installed apps List all apps installed on the target device.
Extract APK Extract the APK from an installed app.
Force-stop app Force-stop a running application.
Clear app data Clear storage/data for a chosen app (factory reset for that app).
Restart app Restart an application (force-stop then relaunch).
Grant / revoke permission Grant or revoke a runtime permission for an app.
Open a link Open a URL on the target device.
Display a photo Show an image or photo on the target device.
Play audio Play an audio file on the target device.
Play video Play a video on the target device.
Send SMS Send SMS messages through the target device.
Device information Read device information.
Battery information Read battery status and related details.
Record microphone audio Record audio from the microphone.
Stream microphone audio Stream live microphone audio.
Record device audio Record internal device audio.
Stream device audio Stream live device audio.
Hack device completely Automated Metasploit flow: fetch your IP address to set LHOST; create a payload with msfvenom, install it, and run it on the target device; launch and configure Metasploit-Framework to obtain a meterpreter session. A meterpreter session means the device is fully compromised via Metasploit-Framework, and you can run further actions from the session.
LAN network scan Discover hosts on the local network to help find a target IP address; probe TCP ports 5555 and 5554 with service detection and show ADB-related fingerprints and hints for likely Android/ADB targets.
TCP port forwarding Forward, reverse, list, remove, or remove all TCP port forwarding rules over ADB.
Save logcat snippet Capture a slice of logcat output and save it to a file on the computer.
Live logcat stream Stream logcat live from the device.
Network snapshot Show a snapshot of network interfaces and connectivity on the device.
Developer settings Open the system Developer options screen on the device.
Read locale Read locale and language settings from the device.
Screen stay-on Set svc power stayon (stay on over USB, stay on always, or turn stay-on off).
Wi‑Fi status dump Dump detailed Wi‑Fi status from the device.
WLAN IP info Show WLAN IP addressing information.
Wi‑Fi radio toggle Turn the Wi‑Fi radio on or off.
Ping connectivity Run ping checks against a host to test connectivity.
Saved Wi‑Fi networks List saved Wi‑Fi networks known to the device.
Root heuristics Heuristic checks for common signs of root access.
Set resolution & display size View current display settings; set screen resolution (wm size) from 720p/1080p/2K/4K presets in portrait or landscape, or a custom WxH; set display density (wm density) from common DPI presets or a custom value; toggle display scaling (wm scaling); and reset everything to device defaults.
Clipboard management Read, set, or clear the device clipboard.
GPS / location Retrieve the device's last-known GPS location (latitude, longitude, provider).
IMEI / device identifiers Read IMEI, Android ID, serial number, and other hardware/software identifiers.
App usage statistics Show foreground app usage stats over 1 day / 7 days / all time.
Radio toggles Toggle mobile data, Bluetooth, NFC, and airplane mode.
Mock battery Fake a battery level, simulate plugged or unplugged, or reset readings.
Sound & display settings Set media volume, screen brightness, screen timeout, and Do Not Disturb mode.
Notifications Post a notification, expand or collapse the notification panel and quick settings.
Set wallpaper Push an image to the device and open the system wallpaper picker.
Nearby Wi‑Fi scan Scan and list nearby Wi‑Fi networks with SSID, BSSID, frequency, and signal.
Local hotspot Start or stop a local-only Wi‑Fi hotspot directly from the device.
Wireless ADB setup Pair, connect, switch to TCP/IP, or switch back to USB — all wireless ADB commands.
Enable / disable app Disable a system or user app, or re-enable it later.
Suspend / unsuspend app Suspend an app (icon greyed out, no data usage) or unsuspend it.
Ignore battery optimization Whitelist an app from Doze battery optimization, un-whitelist it, or show the battery whitelist.
Set default home app Change the default launcher/home app to any installed launcher package, or show the current home app.

Requirements

  • python3 — Python 3.10 or newer
  • pip — Package installer for Python
  • adb — Android Debug Bridge (ADB) from Android SDK Platform Tools
  • metasploit-framework — Metasploit-Framework (msfvenom and msfconsole)
  • scrcpy — scrcpy
  • nmap — Nmap

Installing dependencies

Use the bundled installer to set up all dependencies automatically. It detects your OS and uses the appropriate package manager.

Linux / macOS / Termux

chmod +x install.sh
./install.sh

To install specific tools only: ./install.sh --components adb,nmap,pip
For per-component prompts: ./install.sh --interactive

Windows

Run PowerShell as Administrator, then:

Set-ExecutionPolicy -Scope Process Bypass
.\install.ps1

To install specific tools only: .\install.ps1 -Components adb,nmap,pip
For per-component prompts: .\install.ps1 -Interactive

From PhoneSploit Pro

If a dependency is missing, the program shows a Missing Dependencies warning. Press I to run the installer, Y to continue anyway, or N to exit.

Getting started

[!IMPORTANT] PhoneSploit Pro requires Python version 3.10 or higher. Please update Python before running the program.

Linux and macOS

Make sure all required software is installed.

git clone https://github.com/AzeemIdrisi/PhoneSploit-Pro.git
cd PhoneSploit-Pro/

python3 -m venv .venv
source .venv/bin/activate
pip install -r requirements.txt

python3 phonesploitpro.py

[!TIP] You only need to activate the virtual environment (source .venv/bin/activate) each time you open a new terminal before running the program.

Windows

Make sure all required software is installed.

git clone https://github.com/AzeemIdrisi/PhoneSploit-Pro.git
cd PhoneSploit-Pro/

python -m venv .venv
.\.venv\Scripts\activate
pip install -r requirements.txt

  1. Download and extract the latest platform-tools from here.

  2. Copy all files from the extracted platform-tools or adb directory into the PhoneSploit-Pro directory, then run:

python phonesploitpro.py

Device setup tutorial

Setting up an Android phone for the first time

  • Enabling Developer Options
  1. Open Settings.
  2. Go to About Phone.
  3. Find Build Number.
  4. Tap Build Number seven times.
  5. Enter your pattern, PIN, or password to enable the Developer options menu.
  6. The Developer options menu will now appear in your Settings menu.
  • Enabling USB debugging
  1. Open Settings.
  2. Go to System > Developer options.
  3. Scroll down and enable USB debugging.
  • Connecting with a computer
  1. Connect your Android device and the adb host computer to the same Wi‑Fi network.
  2. Connect the device to the host computer with a USB cable.
  3. Open a terminal on the computer and run the following command:
adb devices
  1. A pop-up will appear on the Android phone when you connect to a new PC for the first time: Allow USB debugging?.
  2. Select Always allow from this computer, then tap Allow.
  3. Then, in the terminal, run the following command:
adb tcpip 5555
  1. You can now connect the Android phone to the computer over Wi‑Fi using adb.
  2. Disconnect the USB cable.
  3. Go to Settings > About Phone > Status > IP address and note the phone’s IP address.
  4. Run PhoneSploit Pro, choose Connect a device, and enter the target’s IP address to connect over Wi‑Fi.

Connecting the Android phone the next time

  1. Connect your Android device and host computer to the same Wi‑Fi network.
  2. Run PhoneSploit Pro, choose Connect a device, and enter the target’s IP address to connect over Wi‑Fi.

Compatibility

This tool is tested on:

  • ✅ Ubuntu
  • ✅ Linux Mint
  • ✅ Kali Linux
  • ✅ Fedora
  • ✅ Arch Linux
  • ✅ Parrot Security OS
  • ✅ Windows 11
  • ✅ Termux (Android)

[!NOTE] New features are primarily tested on Linux, so Linux is recommended for running PhoneSploit Pro. Some features might not work properly on Windows.

Installing tools manually

If you prefer to install tools yourself, or the automatic installer is not available for your platform, use the sections below.

ADB

Linux

Open a terminal and run the following commands:

  • Debian / Ubuntu
sudo apt update

sudo apt install adb
  • Fedora
sudo dnf install android-tools
  • Arch Linux / Manjaro
sudo pacman -Sy android-tools

For other Linux distributions, see: Android platform-tools downloads

macOS

Open a terminal and run the following command:

brew install android-platform-tools

Or download from: Android platform-tools downloads

Windows

Download from: Android platform-tools downloads

Termux
pkg update

pkg install android-tools

Metasploit-Framework

Linux and macOS
curl https://raw.githubusercontent.com/rapid7/metasploit-omnibus/master/config/templates/metasploit-framework-wrappers/msfupdate.erb > msfinstall && \
  chmod 755 msfinstall && \
  ./msfinstall
  • macOS (Homebrew) — Metasploit is distributed as a Homebrew Cask (not brew install without --cask):
brew install --cask metasploit

Or follow: Installing Metasploit on Linux / macOS

Or visit: Metasploit download

Windows

Visit: Metasploit download

Or see: Windows: antivirus and installers

scrcpy

Visit the scrcpy GitHub page for the latest installation instructions: scrcpy — get the app

On Windows: Copy all files from the extracted scrcpy folder into the PhoneSploit-Pro folder.

[!IMPORTANT]
If scrcpy is not available for your Linux distribution (for example Kali Linux), you can install it manually (Linux guide) or build it in a few steps (Build guide).

Nmap

Linux

Open a terminal and run the following commands:

  • Debian / Ubuntu
sudo apt update

sudo apt install nmap
  • Fedora
sudo dnf install nmap
  • Arch Linux / Manjaro
sudo pacman -Sy nmap

For other Linux distributions, see: Nmap download

macOS

Open a terminal and run the following command:

brew install nmap

Or visit: Nmap download

Windows

Download and install the latest stable release: Nmap for Windows

Termux
pkg update

pkg install nmap

Disclaimer

  • This project and its developer do not promote any illegal activity and are not responsible for any misuse or damage caused by this project.
  • This project is for educational purposes only.
  • Please do not use this tool on other people’s devices without their permission.
  • Do not use this tool to harm others.
  • Use this project responsibly and only on your own devices or with explicit authorization.
  • It is the end user’s responsibility to obey all applicable local, state, federal, and international laws.

Developer

Azeem Idrisi - @AzeemIdrisi

Support

If you like my work, you can support me via:

PayPal Buy Me A Coffee

Attribution

PhoneSploit Pro is built upon and gratefully acknowledges the contributions of the following open-source projects:

Copyright © 2026 Azeem Idrisi (github.com/AzeemIdrisi)

Frequently asked questions

Is PhoneSploit-Pro free to use?

PhoneSploit-Pro is open source under the GPL-3.0 licence. There is no licence fee and no seat count — you can self-host it or, where the project offers one, pay a vendor for a managed version instead.

What does PhoneSploit-Pro do?

An all-in-one hacking tool to remotely take over Android devices.

What is PhoneSploit-Pro written in?

PhoneSploit-Pro is primarily written in Python. Its source is publicly available at https://github.com/AzeemIdrisi/PhoneSploit-Pro, and it has 6,310 GitHub stars.