Security tooling is not written in a single language. Python powers most automation. C sits at the exploit layer. PowerShell ...
Target application IPA (iOS) and APK (Android) files or access to download from a private distribution channel Rooted Android device or emulator (Genymotion, Android Studio AVD) with Frida, Objection, ...