Complete Solution for VAPT/AppSec and Pentesting Guide: Web | Mobile | API | Thick Client | Source Code Review | DevSecOps | Wireless | Network Pentesting | SAST | DAST etc...
-
Updated
Oct 5, 2026 - TypeScript
Complete Solution for VAPT/AppSec and Pentesting Guide: Web | Mobile | API | Thick Client | Source Code Review | DevSecOps | Wireless | Network Pentesting | SAST | DAST etc...
Work in progress...
Work in progress...
Mobile penetration testing android & iOS command cheatsheet
Automation of some MAPT activities and interaction with the mobile Android device.
As a bug hunter, are your bug bounty reports getting rejected because you don't use a "malicious" Proof of Concept (PoC) app to exploit the vulnerabilities? I've got you covered!
Android Penetration Testing setup tool. Garuda automates the installation of the required tools to perform Android Security Analysis.
Uncover usage of insecure functions, implementation of weak cryptography, encryption status, and the presence of security features like Position Independent Executable (PIE), Stack Canaries, and Automatic Reference Counting (ARC) in iOS Applications Binaries.
PoC demonstrating a use-after-free (UAF) memory corruption bug in the XNU kernel on iOS. For security research and verification only.
Phishing mobile application made in React Native for both Android and iOS devices.
Droz_scan is a automated script, that runs all the queries of drozer in a single run
Scrape files for sensitive information, and generate an interactive HTML report. Based on Rabin2.
Create PoC Android Apps for Deep Link Hijacking.
Extract and convert property list files from SQLite database files and from other property list files.
🐰 [HaHacking: Notes] Android Malware Analysis
🧪 Explore mobile security with Frida Reversing Lab, a toolkit for analyzing and manipulating Android apps to overcome obfuscation and security barriers.
A comprehensive collection of Frida scripts and Python tools for Android dynamic analysis. Includes PoCs for bypassing SSL pinning, root detection, obfuscation, and client-side cryptographic integrity checks.
Simple script to setup a local hosted network for Mobile Application Penetration Testing
r3NgineMobile Companion [Android|iOS] Tactical Reconnaissance Interface in Your Pocket. Designed for security professionals who need to maintain tactical awareness while away from their terminal, the mobile app provides a high-fidelity interface to your recon data
To associate your repository with the mobile-penetration-testing topic, visit your repo's landing page and select "manage topics."