Tools

dpnishant/raptor

Web-based Source Code Vulnerability Scanner

cy-clon3/awesome-ios-security

A curated list of awesome iOS application security resources.

soulghost/iblessing

iOS security toolkit for static and dynamic binary analysis, Mach-O parsing, Objective-C class introspection, and vulnerability mining via…

amrudesh1/morf

Mobile Reconnaissance Framework is a powerful, lightweight and platform-independent offensive mobile security tool designed to help hackers and…

owasp/mastg

Comprehensive OWASP guide for mobile app security testing, reverse engineering, and verifying MASVS/MASWE weaknesses through static, dynamic, and…

mobsf/mobile-security-framework-mobsf

Automated mobile application security testing framework for Android, iOS, and Windows. Performs static and dynamic analysis, malware detection, and…

frida/frida

Dynamic instrumentation toolkit for runtime code injection, function hooking, and memory inspection across desktop and mobile platforms, enabling…

vaib25vicky/awesome-mobile-security

An effort to build a single place for all useful android and iOS security related stuff. All references and tools belong to their respective owners.…

isecpartners/introspy-ios

Runtime iOS security profiler that hooks and logs security-sensitive API calls on jailbroken devices, generating HTML vulnerability reports via an…

nightwatchcybersecurity/truegaze

Static analysis tool for Android/iOS apps focusing on security issues outside the source code

ashishsecdev/mobsf_ai

AI powered security analysis extension for Mobile Security Framework MobSF

stuxctf/slythestx

Mobile app security auditing tool focused on automating SAST analysis, identifying underlying technologies (React Native, Flutter, Xamarin, native),…

kelvinben/appinfoscanner

一款适用于以HW行动/红队/渗透测试团队为场景的移动端(Android、iOS、WEB、H5、静态网站)信息收集扫描工具，可以帮助渗透测试工程师、攻击队成员、红队成员快速收集到移动端或者静态WEB站点中关键的资产信息并提供基本的信息输出,如：Title、Domain、CDN、指纹信息、状态信息等。

pranshuchittora/simvyn

Universal mobile devtool for Agents & Humans - control iOS Simulators, Android Emulators, and real devices from a single dashboard and CLI

moloch--/cve-2016-1764

Proof-of-concept exploit for CVE-2016-1764 demonstrating XSS in Apple's OS X iMessage client to recover plaintext chat history and attachments via…

mvt-project/mvt

Forensic collection and analysis toolkit for Android and iOS devices to identify potential compromise by known spyware using public and private…

lief-project/lief

Cross-platform library to parse, modify, and abstract ELF, PE, and MachO executable formats. Supports C++, Python, and Rust APIs with disassembler,…

tanprathan/mobileapp-pentest-cheatsheet

The Mobile App Pentest cheat sheet was created to provide concise collection of high value information on specific mobile application penetration…