I built Exfault, agentic mobile app pentesting tool
Hi HN, I am the creator of Exfault. I am building autonomous AI agents that find vulnerabilities in Android apps. I have noticed there are growing number of AI native pentesting tools for web apps but very few for mobile or Android. With more mobile apps being shipped quickly due to vibe coding, I wanted to build an AI native security tool specifically for Android apps. Exfault combines static and dynamic analysis with AI agents using tools like adb,jadx, apktool for static analysis and reverse engineering, frida for dynamic analysis, hermes-dec for React native decompilation. The AI agents…
I built Exfault, agentic mobile app pentesting tool launched on June 29, 2026 with 6 votes, #2,066 of 22,647 launches that month and more than 75% of that year's launches.
What it does
Exfault is an autonomous mobile security researcher for Android apps, using AI agents, static analysis, dynamic analysis, authenticated workflows, and real Android cloud emulators to produce reproducible security findings. Exfault combines static and dynamic analysis with AI agents. The AI agents have access to real Android emulators to peform navigation, explore functionality and validate vulnerabilities before reporting them, improving both the quality of reports and false positive rates.
Exfault is an autonomous mobile security researcher for Android apps, using AI agents, static analysis, dynamic analysis, authenticated workflows, and real Android cloud emulators to produce reproducible security findings.
In the maker’s words, at launch
Hi HN, I am the creator of Exfault. I am building autonomous AI agents that find vulnerabilities in Android apps. I have noticed there are growing number of AI native pentesting tools for web apps but very few for mobile or Android. With more mobile apps being shipped quickly due to vibe coding, I wanted to build an…
Does a similar job
all alternatives →
QA.tech 1.02025 · qa.tech · ▲413Hi, I'm Daniel, CEO of QA.tech. We've spent the past 18 months developing a cool tool that allows you to run end-to-end tests on any web application using natural language. Check it out and let us know what you think! I used to be a CTO at a B2C marketplace and was taken aback that all qa agencies we talked to wanted to create a custom suite of tests from scratch. Even though we were essentially a e-com with the same functionality as everyone else. Why weren't there any best practices? Some time later my co-founders and I had moved on and were looking for the next thing to do. AI agents…
FabraixMay 2026 · fabraix.com · ▲196We built Adversarial Cost to Exploit (ACE), a benchmark that measures the token expenditure an autonomous adversary must invest to breach an LLM agent. Instead of binary pass/fail, ACE quantifies adversarial effort in dollars, enabling game-theoretic analysis of when an attack is economically rational. We tested six budget-tier models (Gemini Flash-Lite, DeepSeek v3.2, Mistral Small 4, Grok 4.1 Fast, GPT-5.4 Nano, Claude Haiku 4.5) with identical agent configs and an autonomous red-teaming attacker. Haiku 4.5 was an order of magnitude harder to break than every other model; $10.21 mean…
Astra Autonomous PentestJun 2026 · getastra.com · ▲406AI agents that find, validate, and fix every vulnerability
QualGentDec 2025 · qualgent.ai · ▲296I built an AI agent that can do mobile app QA after working at Google for years and waiting weeks for QA results. It runs on real devices and uses an ensemble of agents (including computer use) to test like a human. Happy to answer questions and hope it helps app devs ship faster without bugs!
Use functional tokens for AI agents to simplify app workflows2024 · nexa4ai.com · ▲80Hi HN! I want to share our latest project at NEXA AI. We developed AI agent foundation models designed to transform how developers create AI agent powered apps. One major challenge we've observed with current human-computer interactions is that many simple, one-step tasks become unnecessarily complex, multi-step workflows due to limitations of current GUIs. AI agents can solve this, but existing AI agent models are slow and costly. To tackle these issues, we built lightweight AI agent models based on our Octopus V2, small language models for function calling (You can learn more about our…
Agent-desktop – Native desktop automation CLI for AI agentsMay 2026 · github.com · ▲99I've been building computer-use tools for a while, and I quietly launched this about a month ago (122 Stars on GH). I figured it was worth sharing here. Over the last few months, a lot of computer-use agents have come out: Codex, Claude Code, CUA, and others. Most of them seem to work roughly like this: 1. Take a screenshot 2. Have the model predict pixel coordinates 3. Click x,y 4. Take another screenshot 5. Repeat That works, but it's slow, expensive in tokens, and fragile. If the UI shifts a few pixels, things break. And the model still doesn't know what any element actually is. But the…
More dev tools this month
the category →
open-source IDE for thoughtful software design. Contribute to devdotfast/whiteboard development by creating an account on GitHub.
Dev tools · 28d ago · github.com
Contribute to reladraw/reladraw development by creating an account on GitHub.
Dev tools · 26d ago · github.com
OpenBot▲362Grok Bot alternative: free, local, open-source, multiplayer
Dev tools · 23d ago · openbot.run
Talanoa▲346Hi HN, I’m a fullstack developer, and honestly, I’ve lost count of how many side projects I’ve worked on over the years. But one idea kept coming back to me: a different kind of email client. It first came to me in 2014: “What if we could handle emails more like conversations?” Every year, I’d revisit this concept in my “Build Notes.” Ten years later, no one had built exactly what I had in mind — so I finally decided to do it myself. That’s how Talanoa was born. I wanted something focused on people, not timelines. I was tired of marking messages as unread just to remember to reply later, or…
Dev tools · 21d ago · talanoa.email
CoreSpeed▲332One MCP for everything your agents need: apps, memory, tools
Dev tools · 28d ago · corespeed.io
Source: Show HN post ↗ · launch text quoted in part
Launched alongside, June 2026
the whole month →
Fundraisly▲1,537AI fundraising agent that finds investors and books meetings
AI · Jun 2026 · fundraisly.com
Homebrew 6.0.0▲1,481Today, I’m proud to announce Homebrew 6.0.0. The most significant changes since 5.1.0 are a new tap trust security mechanism, the new faster, smaller, default internal Homebrew JSON API, sandboxing on Linux, better defaults informed by our user survey, many brew bundle improvements, improved performance and initial support for macOS 27 (Golden Gate). Happy to discuss any questions here!
Dev tools · Jun 2026 · brew.sh
Hi HN! I was super frustrated at apps like tiktok and wechat preventing me from saving or downloading the animated gifs, so I made a little tool to turn a screen recording into a slack-sized emoji. Hope you get some value from this!
Life & fun · Jun 2026 · vorpus.github.io
Search 18 years of Hacker News and chart how any topic, tool, or person trended. Overlay terms to compare their rise and fall across 45M posts and comments.
Life & fun · Jun 2026 · hackernewstrends.com