APKHunt is a comprehensive static code analysis tool for Android apps that is based on the OWASP MASVS framework. Although APKHunt is intended primarily for mobile app developers and security testers, it can be used by anyone to identify and address potential security vulnerabilities in their code.
☆971Jan 17, 2025Updated last year
Alternatives and similar repositories for APKHunt
Users that are interested in APKHunt are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Mobile Edge-Dynamic Unified Security Analysis☆2,311Jul 2, 2026Updated 3 weeks ago
- A simple Burp Suite extension to crawl JavaScript (JS) files in passive mode and display the results directly on the issues☆380Jul 25, 2023Updated 2 years ago
- Scanning APK file for URIs, endpoints & secrets.☆6,178Aug 20, 2025Updated 11 months ago
- A Burp Suite extension to add OpenAI (GPT) on Burp and help you with your Bug Bounty recon to discover endpoints, params, URLs, subdomain…☆904May 3, 2023Updated 3 years ago
- Runtime Mobile Security (RMS) 📱🔥 - is a powerful web interface that helps you to manipulate Android and iOS Apps at Runtime☆3,052Updated this week
- Managed Database hosting by DigitalOcean • AdPostgreSQL, MySQL, MongoDB, Kafka, Valkey, and OpenSearch available. Automatically scale up storage and focus on building your apps.
- An advanced cross-platform tool that automates the process of detecting and exploiting SQL injection security flaws☆4,044Oct 4, 2025Updated 9 months ago
- Community curated list of nuclei templates for finding "unknown" security vulnerabilities.☆107May 2, 2024Updated 2 years ago
- A python tool used to discover endpoints, potential parameters, a target specific wordlist for a given target and secrets☆1,576Mar 8, 2026Updated 4 months ago
- NucleiFuzzer is a robust automation tool that efficiently detects web application vulnerabilities, including XSS, SQLi, SSRF, and Open Re…☆1,859Apr 17, 2026Updated 3 months ago
- A Burp Suite extension that integrates OpenAI's GPT to perform an additional passive scan for discovering highly bespoke vulnerabilities …☆2,340Jun 9, 2024Updated 2 years ago
- jsleak is a tool to find secret , paths or links in the source code during the recon.☆591Sep 25, 2025Updated 9 months ago
- Extract URLs, paths, secrets, and other interesting bits from JavaScript☆1,871May 22, 2024Updated 2 years ago
- i will upload more templates here to share with the comunity.☆572Apr 17, 2024Updated 2 years ago
- Escalate your SSRF vulnerabilities on Modern Cloud Environments. `surf` allows you to filter a list of hosts, returning a list of viable …☆756Jul 10, 2026Updated 2 weeks ago
- Proton VPN Special Offer - Get 70% off • AdSpecial partner offer. Trusted by over 100 million users worldwide. Tested, Approved and Recommended by Experts.
- Smart context-based SSRF vulnerability scanner.☆364May 5, 2022Updated 4 years ago
- A collection of tools which integrate with Cobalt Strike (and possibly other C2 frameworks) through BOF and reflective DLL loading techni…☆1,402Oct 27, 2023Updated 2 years ago
- Android security insights in full spectrum.☆999May 16, 2026Updated 2 months ago
- A simple tool for bypassing file upload restrictions.☆910Jul 22, 2024Updated 2 years ago
- Work in progress...☆419Feb 24, 2026Updated 5 months ago
- Hidden parameters discovery suite☆2,085Sep 8, 2024Updated last year
- A python script to scan for Apache Tomcat server vulnerabilities.☆892Jan 12, 2026Updated 6 months ago
- fuzzuli is a url fuzzing tool that aims to find critical backup files by creating a dynamic wordlist based on the domain.☆944Aug 24, 2023Updated 2 years ago
- Nuclei plugin for BurpSuite☆1,340Oct 22, 2025Updated 9 months ago
- End-to-end encrypted email - Proton Mail • AdSpecial offer: 40% Off Yearly / 80% Off First Month. All Proton services are open source and independently audited for security.
- A collection of Semgrep rules derived from the OWASP MASTG specifically for Android applications.☆335Jun 5, 2026Updated last month
- User-Agent , X-Forwarded-For and Referer SQLI Fuzzer☆387May 19, 2023Updated 3 years ago
- Web Cache Vulnerability Scanner is a Go-based CLI tool for testing for web cache poisoning. It is developed by Hackmanit GmbH (http://hac…☆1,192Jan 21, 2026Updated 6 months ago
- Makes reverse engineering Android apps easier, automating repetitive tasks like pulling, decoding, rebuilding and patching an APK.☆3,812Jan 26, 2026Updated 5 months ago
- The repo contains a series of challenges for learning Frida for Android Exploitation.☆1,304Feb 22, 2026Updated 5 months ago
- An XSS exploitation command-line interface and payload generator.☆1,438Jan 19, 2025Updated last year
- A comprehensive resource for Android static analysis and vulnerability assessment. Tutorials, tools, and resources for identifying and mi…☆179Jul 6, 2023Updated 3 years ago
- Nginxpwner is a simple tool to look for common Nginx misconfigurations and vulnerabilities.☆1,599Mar 4, 2024Updated 2 years ago
- reconFTW is a tool designed to perform automated recon on a target domain by running the best set of tools to perform scanning and findin…☆7,879Jun 29, 2026Updated 3 weeks ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- linWinPwn is a bash script that streamlines the use of a number of Active Directory tools☆2,190Jul 16, 2026Updated last week
- Fast and customizable subdomain wordlist generator using DSL☆982Jul 10, 2026Updated 2 weeks ago
- Tool for discovering the origin host behind a reverse proxy. Useful for bypassing cloud WAFs!☆1,093Mar 24, 2026Updated 4 months ago
- Quickly discover exposed hosts on the internet using multiple search engines.☆3,023Jul 10, 2026Updated 2 weeks ago
- Standalone utility for service discovery on open ports!☆760Jan 13, 2026Updated 6 months ago
- A lightweight tool for orchestrating and organizing your bug hunting recon / pentesting command-line workflows☆307Sep 8, 2023Updated 2 years ago
- A Powerful Sensor Tool to discover login panels, and POST Form SQLi Scanning☆524Jul 5, 2023Updated 3 years ago