OWASP MAS Crackmes
Reverse engineer Android and iOS apps to recover their hidden secrets
The MAS Crackmes, also called the UnCrackable Apps, are mobile reverse engineering challenges. You download an Android APK or iOS IPA, take it apart with tools such as a decompiler, debugger or Frida, and work out the secret the app checks for.
Free · No login · Desktop
About OWASP MAS Crackmes
It trains mobile app reverse engineering and an understanding of client-side protections. The levels get harder as they go, so it suits beginners to mobile security through to experienced reversers, and the apps are used as examples throughout the OWASP Mobile Application Security Testing Guide.
You download the apps and work on your own machine or device. They are free and need no account.
On Breakpoint since 25 Oct 2026.
Made this game? Claim it →
Tips and discussion
No tips yet. Solved it? Share how, and wrap answers in ||spoilers||.