Mobile App Pentesting

dere-ad2001/frida-labs

The repo contains a series of challenges for learning Frida for Android Exploitation.

honeynet/apkinspector

APKinspector is a powerful GUI tool for analysts to analyze the Android applications.

m4sc3r4n0/evil-droid

Framework to create, generate, and embed APK payloads for Android penetration testing, leveraging Metasploit for exploitation and Apktool for…

thakur2309/pagasus-pro

Python ADB-based Android device management and security audit toolkit with an interactive menu for root detection, permission dumps, debuggable app…

sensepost/kwetza

Python script to inject existing Android applications with a Meterpreter payload.

1n3/reverseapk

Quickly analyze and reverse engineer Android packages

bishopfox/bfinject

Dylib injection for iOS 11.0 - 11.1.2 with LiberiOS and Electra jailbreaks

xtiankisutsa/mara_framework

MARA is a Mobile Application Reverse engineering and Analysis Framework. It is a toolkit that puts together commonly used mobile application reverse…

prateek147/dvia-v2

Damn Vulnerable iOS App (DVIA) is an iOS application that is damn vulnerable. Its main goal is to provide a platform to mobile security…

ralireza/android-security-teryaagh

Android security guides, roadmap, docs, courses, write-ups, and teryaagh.

dmayer/idb

idb is a tool to simplify some common tasks for iOS pentesting and research

chichou/vscode-frida

Unofficial frida extension for VSCode

mitmproxy/mitmproxy_rs

Rust components for traffic interception and redirection, enabling WireGuard device proxying and local app redirection across macOS, Windows, and…

cy-clon3/awesome-ios-security

A curated list of awesome iOS application security resources.

ginsudev/wdbfontoverwrite

Proof-of-concept app to overwrite fonts on iOS using CVE-2022-46689.

rewanthtammana/damn-vulnerable-bank

Intentionally vulnerable Android banking app for practicing mobile security testing, featuring root detection, anti-debugging, SSL pinning, and…