
slythestx
Mobile app security auditing tool focused on automating SAST analysis, identifying underlying technologies (React Native, Flutter, Xamarin, native),…

Mobile app security auditing tool focused on automating SAST analysis, identifying underlying technologies (React Native, Flutter, Xamarin, native),…

Extracts decrypted IPA files from jailbroken iOS devices using Frida for reverse engineering, security analysis, and mobile app pentesting.

Blackbox tool to disable SSL certificate validation - including certificate pinning - within iOS and macOS applications.

An updated Frida iOS dump tool supporting the latest Frida 17.5.2 APIs

Command-line tool that allows searching and downloading app packages (known as ipa files) for iOS, iPadOS, tvOS, and visionOS from the App Store.

Android penetration testing tool for Kali linux

SecurityExplained is a new series after the previous learning challenge series #Learn365. The aim of #SecurityExplained series is to create…

Binder Trace is a tool for intercepting and parsing Android Binder messages. Think of it as "Wireshark for Binder".

Tool for finding URLs, paths, secrets and generating raw HTTP requests and OpenApi specifications from config files and annotations used in JAR / WAR…

bash script to facilitate some aspects of an Android application assessment

Utility to decrypt App Store apps on jailbroken iOS 11.x

An all-in-one hacking tool to remotely take over Android devices.

Robust Frida-based tool to dump decrypted iOS apps as .ipa from a jailbroken device supports App Store, sideloaded and system.

PulseAPK Core: Cross-Platform tool for working with APK files: Decompilation, Analysis, Building

Android Package Inspector - dynamic analysis with api hooks, start unexported activities and more. (Xposed Module)

Python script to inject existing Android applications with a Meterpreter payload.

idb is a tool to simplify some common tasks for iOS pentesting and research

Command-line and GUI tool for decompiling Android Dex and APK files into readable Java source code, with resource decoding, deobfuscation, and Smali…