Mobile App Pentesting

dwisiswant0/apkleaks

Scanning APK file for URIs, endpoints & secrets.

takito1812/firestorepwn

fsp - Firestore Database Vulnerability Scanner Using APKs

frida/frida

Main repo for hosting release binaries

codinggay/blackdex

Android APK unpacker that dumps DEX files from running or installed apps on Android 5.0–12 without root, Xposed, or Frida, supporting deep unpacking…

mpast/mobileaudit

Django application that performs SAST and Malware Analysis for Android APKs

notsosecure/android_application_analyzer

The tool is used to analyze the content of the android application in local storage.

mzfr/slicer

A tool to automate the boring process of APK recon

reverseclabs/drozer

The Leading Security Assessment Framework for Android.

rewanthtammana/damn-vulnerable-bank

Intentionally vulnerable Android banking app for practicing mobile security testing, featuring root detection, anti-debugging, SSL pinning, and…

sterrasec/ipa-medit

Memory modification tool for re-signed ipa supports iOS apps running on iPhone and Apple Silicon Mac without jailbreaking.

t0thkr1s/allsafe-android

Intentionally vulnerable Android application.

ev-flow/quark-engine

Rule-based Android malware scoring engine that analyzes APKs using static and dynamic analysis to detect vulnerabilities, identify malware families,…

stuxctf/mhf

Mobile Helper Framework (mhf) is a tool that automates the process of identifying the framework/technology used to create a mobile application.…

0xdsm/apepe

Extracts app settings, permissions, deeplinks, and SSL pinning bypass suggestions from Android APK files via static analysis of AndroidManifest.xml,…

a-yatta/amdh

Android Mobile Device Hardening

honeynet/apkinspector

APKinspector is a powerful GUI tool for analysts to analyze the Android applications.

nowsecure/r2frida

Radare2 and Frida better together.