simoneavogadro/android-reverse-engineering-skillDecompiles Android APK/XAPK/JAR/AAR files and extracts HTTP APIs, authentication patterns, and call flows using jadx, with R8-resistant Kotlin name…
tanprathan/mobileapp-pentest-cheatsheetThe Mobile App Pentest cheat sheet was created to provide concise collection of high value information on specific mobile application penetration…
m4sc3r4n0/evil-droidFramework to create, generate, and embed APK payloads for Android penetration testing, leveraging Metasploit for exploitation and Apktool for…
ernw/androticklerPenetration testing and auditing toolkit for Android apps.
dzmitry-savitski/android-pentest-toolAndroid penetration testing tool for Kali linux
nu11secur1ty/andr01dexploitsAndroid exploit collection with C-based payloads for mobile device penetration testing and security research.
prateek147/dvia-v2Damn Vulnerable iOS App (DVIA) is an iOS application that is damn vulnerable. Its main goal is to provide a platform to mobile security…
xcodeon1/ipa-scopeStatic analysis tool for iOS applications that extracts links, API keys, subdomains, binary info, linked libraries, and strings to aid mobile…
mitmproxy/mitmproxyAn interactive TLS-capable intercepting HTTP proxy for penetration testers and software developers.
mobsf/mobile-security-framework-mobsfAutomated mobile application security testing framework for Android, iOS, and Windows. Performs static and dynamic analysis, malware detection, and…
owasp/mastgComprehensive OWASP guide for mobile app security testing, reverse engineering, and verifying MASVS/MASWE weaknesses through static, dynamic, and…
chichou/grapefruitOpen-source mobile security testing suite for iOS and Android. Previously Passionfruit
xtiankisutsa/mara_frameworkMARA is a Mobile Application Reverse engineering and Analysis Framework. It is a toolkit that puts together commonly used mobile application reverse…
rewanthtammana/damn-vulnerable-bankIntentionally vulnerable Android banking app for practicing mobile security testing, featuring root detection, anti-debugging, SSL pinning, and…
stuxctf/slythestxMobile app security auditing tool focused on automating SAST analysis, identifying underlying technologies (React Native, Flutter, Xamarin, native),…
michaelsplayground/cve-2019-9465Demo Android application demonstrating CVE-2019-9465 for security testing and vulnerability analysis on mobile platforms.
ratiros01/cve-2014-8609-exploitProof-of-concept exploit for CVE-2014-8609, demonstrating Android pending intent vulnerability exploitation for security research and mobile…
shoucheng3/jenkinsci__perfecto-plugin_cve-2020-2261_1-17Jenkins plugin for automated mobile app testing via Perfecto cloud, managing secure tunnel connections and app uploads within CI/CD pipelines.
