APKHunt is a comprehensive static code analysis tool for Android apps that is based on the OWASP MASVS framework. Although APKHunt is intended primarily for mobile app developers and security testers, it can be used by anyone to identify and address potential security vulnerabilities in their code.
☆988Sep 24, 2026Updated last month
Alternatives and similar repositories for APKHunt
Users that are interested in APKHunt are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Mobile Edge-Dynamic Unified Security Analysis☆2,362Oct 16, 2026Updated 2 weeks ago
- Scanning APK file for URIs, endpoints & secrets.☆6,374Aug 20, 2025Updated last year
- Android security insights in full spectrum.☆1,016May 16, 2026Updated 5 months ago
- Runtime Mobile Security (RMS) 📱🔥 - is a powerful web interface that helps you to manipulate Android and iOS Apps at Runtime☆3,137Oct 12, 2026Updated 3 weeks ago
- Extract URLs, paths, secrets, and other interesting bits from JavaScript☆1,966May 22, 2024Updated 2 years ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- NucleiFuzzer is a robust automation tool that efficiently detects web application vulnerabilities, including XSS, SQLi, SSRF, and Open Re…☆1,862Apr 17, 2026Updated 6 months ago
- A simple Burp Suite extension to crawl JavaScript (JS) files in passive mode and display the results directly on the issues☆376Jul 25, 2023Updated 3 years ago
- The repo contains a series of challenges for learning Frida for Android Exploitation.☆1,334Feb 22, 2026Updated 8 months ago
- A collection of Semgrep rules derived from the OWASP MASTG specifically for Android applications.☆345Jun 5, 2026Updated 4 months ago
- A Burp Suite extension to add OpenAI (GPT) on Burp and help you with your Bug Bounty recon to discover endpoints, params, URLs, subdomain…☆905May 3, 2023Updated 3 years ago
- An advanced cross-platform tool that automates the process of detecting and exploiting SQL injection security flaws☆4,087Oct 4, 2025Updated last year
- reconFTW is a tool designed to perform automated recon on a target domain by running the best set of tools to perform scanning and findin…☆8,324Updated this week
- A curated list of Android Security materials and resources For Pentesters and Bug Hunters☆2,035Updated this week
- i will upload more templates here to share with the comunity.☆574Apr 17, 2024Updated 2 years ago
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- fuzzuli is a url fuzzing tool that aims to find critical backup files by creating a dynamic wordlist based on the domain.☆946Aug 24, 2023Updated 3 years ago
- A python tool used to discover endpoints, potential parameters, a target specific wordlist for a given target and secrets☆1,599Mar 8, 2026Updated 7 months ago
- Nuclei plugin for BurpSuite☆1,353Updated this week
- A python script to scan for Apache Tomcat server vulnerabilities.☆894Jan 12, 2026Updated 9 months ago
- Tool for discovering the origin host behind a reverse proxy. Useful for bypassing cloud WAFs!☆1,109Aug 5, 2026Updated 2 months ago
- jsleak is a tool to find secret , paths or links in the source code during the recon.☆596Sep 25, 2025Updated last year
- Basics on commands/tools/info on how to assess the security of mobile applications☆1,699Mar 19, 2026Updated 7 months ago
- The motive to build this repo is to help beginner to start learn Android Pentesting by providing a roadmap.☆440Jul 11, 2022Updated 4 years ago
- Hidden parameters discovery suite☆2,097Sep 8, 2024Updated 2 years ago
- GPU virtual machines on DigitalOcean Gradient AI • AdGet to production fast with high-performance AMD and NVIDIA GPUs you can spin up in seconds. The definition of operational simplicity.
- Community curated list of nuclei templates for finding "unknown" security vulnerabilities.☆106May 2, 2024Updated 2 years ago
- A Burp Suite extension that integrates OpenAI's GPT to perform an additional passive scan for discovering highly bespoke vulnerabilities …☆2,398Jun 9, 2024Updated 2 years ago
- A collection of awesome API Security tools and resources. The focus goes to open-source tools and resources that benefit all the communit…☆3,867May 1, 2026Updated 6 months ago
- Find way more from the Wayback Machine, Common Crawl, Alien Vault OTX, URLScan, VirusTotal, GhostArchive & Intelligence X!☆2,787Jun 11, 2026Updated 4 months ago
- Work in progress...☆424Feb 24, 2026Updated 8 months ago
- 🌙🦊 Dalfox is a powerful open-source XSS scanner and utility focused on automation.☆5,356Updated this week
- JSON Web Token Hack Toolkit☆1,092Updated this week
- Real-world infosec wordlists, updated regularly☆1,803Oct 16, 2026Updated 2 weeks ago
- This map lists the essential techniques to bypass anti-virus and EDR☆3,482Mar 28, 2025Updated last year
- Serverless GPU API endpoints on Runpod - Get Bonus Credits • AdSkip the infrastructure headaches. Auto-scaling, pay-as-you-go, no-ops approach lets you focus on innovating your application.
- Community edition nuclei templates, a simple tool that allows you to organize all the Nuclei templates offered by the community in one pl…☆1,051Jun 6, 2026Updated 4 months ago
- An IIS short filename enumeration tool☆1,234Nov 25, 2024Updated last year
- Massive Mobile Security Framework☆308Jun 8, 2026Updated 4 months ago
- Quickly discover exposed hosts on the internet using multiple search engines.☆3,103Updated this week
- Makes reverse engineering Android apps easier, automating repetitive tasks like pulling, decoding, rebuilding and patching an APK.☆3,859Jan 26, 2026Updated 9 months ago
- An XSS exploitation command-line interface and payload generator.☆1,498Jan 19, 2025Updated last year
- RedCloudOS is a Cloud Adversary Simulation Operating System for Red Teams to assess the Cloud Security of Leading Cloud Service Providers…☆674Feb 17, 2026Updated 8 months ago