A deliberately vulnerable mobile banking application designed for practicing mobile security testing. Features common vulnerabilities found in real-world applications, making it an ideal platform for security professionals, developers, and enthusiasts to learn mobile penetration testing..
☆100Nov 25, 2025Updated 8 months ago
Alternatives and similar repositories for vuln-bank-mobile
Users that are interested in vuln-bank-mobile are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Bash scripts to automate the burpsuite's certificate configuration and proxying of an Android device for penetration test.☆21May 26, 2025Updated last year
- A deliberately vulnerable banking application designed for practicing Security Testing of Web App, APIs, AI integrated App and secure cod…☆916Aug 5, 2026Updated last week
- Very Vulnerable Management API (VVMA) is a deliberately insecure RESTful API built with Node.js for educational and testing purposes. It …☆71Jun 5, 2025Updated last year
- This repository is dedicated to documenting and sharing bug bounty reports. The goal is to help security researchers and developers: Le…☆15Jun 22, 2026Updated last month
- Advanced JWT decoding & cracking toolkit with a user-friendly UI for security testing☆52Jul 10, 2026Updated last month
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- An advanced Out-of-Band and In-Band SSRF fuzzing scanner with dynamic request tracking.☆40Jun 18, 2026Updated 2 months ago
- HackList: Your go-to AI-powered guide to hands-on cybersecurity learning!☆23Jul 6, 2025Updated last year
- "Terrible Thick Client" is a vulnerable application developed in C# .NET framework.☆20Jul 9, 2023Updated 3 years ago
- Blast credentials across all 10 NetExec protocols in parallel — live hits, auto-skip timeouts, clean summaries. Built for fast iterative …☆17Mar 10, 2026Updated 5 months ago
- A powerful Burp Suite extension that imports Postman collections☆32Aug 1, 2025Updated last year
- Collection of all the resources published by Payatu.☆11May 14, 2026Updated 3 months ago
- Threat modeling playbook for cloud-native, AI (RAG, agents), and A2A systems with STRIDE, risk models, controls, and test plans.☆18Jul 3, 2026Updated last month
- This repo offers comprehensive information, necessary tools, and instructional videos for beginners in Android penetration testing, provi…☆25Jun 12, 2023Updated 3 years ago
- Find credentials and secret with 170+ rules covering across source code, Web URL, and CI/CD, verifies them against vendor APIs, and gene…☆116Jul 3, 2026Updated last month
- Proton VPN Special Offer - Get 70% off • AdSpecial partner offer. Trusted by over 100 million users worldwide. Tested, Approved and Recommended by Experts.
- pereprava is a minimal http/https redirector and reverse proxy for red team ops.☆16Oct 16, 2025Updated 10 months ago
- Android pentesting lab running natively on FreeBSD - tools, scripts, and setup guide☆17Apr 21, 2026Updated 3 months ago
- A simple web app to get the latest EPSS data for a CVE ID☆14Dec 14, 2025Updated 8 months ago
- USRLINKS v1.0 - The Ultimate Username Reconnaissance Tool☆24Oct 6, 2025Updated 10 months ago
- ☆79May 5, 2025Updated last year
- ☆21Mar 7, 2024Updated 2 years ago
- Damn Vulnerable API☆97Sep 22, 2025Updated 10 months ago
- specialized investigative framework to investigate cases of malicious actors in the OSINT and backup XSS Forum☆39Jul 28, 2025Updated last year
- JS+ is a browser extension that captures JS URLs from specified domains and scans them with AI.☆22Mar 16, 2026Updated 5 months ago
- Managed Kubernetes at scale on DigitalOcean • AdDigitalOcean Kubernetes includes the control plane, bandwidth allowance, container registry, automatic updates, and more for free.
- iOS traffic interception framework which route all device HTTP/HTTPS traffic through Burp Suite via a system-wide VPN tunnel☆47Feb 15, 2026Updated 6 months ago
- GBounty Profiles are customizable security test definitions used by the GBounty web scanner to identify vulnerabilities in web applicatio…☆25Mar 11, 2025Updated last year
- A blue team tool to help audit kerberoasting vulnerability status☆23Jan 31, 2026Updated 6 months ago
- Android interception tool for component communication and attack-surface mapping☆124Jun 5, 2026Updated 2 months ago
- A rewritten and enhanced WinRM execution tool based on wmiexec and winrmexec, providing a comprehensive remote management shell with adva…☆57Updated this week
- Collection of powershell scripts I used to complete my CARTP and CARTE courses.☆49Feb 27, 2026Updated 5 months ago
- Since the SecOps Group has offered free certification to Certified Appsec Practitioner I will be creating notes here. I will be working o…☆79May 31, 2023Updated 3 years ago
- A bash tool used to install famous bug bounty tools. Mainly used when setting up a fresh environment.☆16Mar 20, 2023Updated 3 years ago
- ☆103Aug 31, 2021Updated 4 years ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- Jenkins pre-auth RCE exploit. More info at https://jenkins.io/security/advisory/2019-01-08/#SECURITY-1266 https://blog.orange.tw/2019/02/…☆10Mar 15, 2019Updated 7 years ago
- ☆18May 25, 2026Updated 2 months ago
- Read PostgreSQL data files without credentials - forensics, data recovery, and security research tool☆48Apr 14, 2026Updated 4 months ago
- Active network shares enumeration tool.☆38Jul 17, 2026Updated last month
- AprilTag is a visual fiducial system popular for robotics research.☆12Jun 23, 2024Updated 2 years ago
- Documenting all the sources from where I'm learning Mobile(adnroid/IOS) bug bounty so if another researcher want to start with mobile bug…☆65May 23, 2026Updated 2 months ago
- An advanced, yet simple, tunneling/pivoting tool that uses a TUN interface. Implementation of ligolo-ng into sliver☆31Feb 27, 2025Updated last year