APKHunt is a comprehensive static code analysis tool for Android apps that is based on the OWASP MASVS framework. Although APKHunt is intended primarily for mobile app developers and security testers, it can be used by anyone to identify and address potential security vulnerabilities in their code.
☆960Jan 17, 2025Updated last year
Alternatives and similar repositories for APKHunt
Users that are interested in APKHunt are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Mobile Edge-Dynamic Unified Security Analysis☆2,218Updated this week
- A simple Burp Suite extension to crawl JavaScript (JS) files in passive mode and display the results directly on the issues☆375Jul 25, 2023Updated 2 years ago
- Scanning APK file for URIs, endpoints & secrets.☆6,024Aug 20, 2025Updated 7 months ago
- Runtime Mobile Security (RMS) 📱🔥 - is a powerful web interface that helps you to manipulate Android and iOS Apps at Runtime☆2,996Mar 28, 2026Updated 2 weeks ago
- A Burp Suite extension to add OpenAI (GPT) on Burp and help you with your Bug Bounty recon to discover endpoints, params, URLs, subdomain…☆889May 3, 2023Updated 2 years ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- An advanced cross-platform tool that automates the process of detecting and exploiting SQL injection security flaws☆3,965Oct 4, 2025Updated 6 months ago
- A Burp Suite extension that integrates OpenAI's GPT to perform an additional passive scan for discovering highly bespoke vulnerabilities …☆2,288Jun 9, 2024Updated last year
- A python tool used to discover endpoints, potential parameters, a target specific wordlist for a given target and secrets☆1,543Mar 8, 2026Updated last month
- Community curated list of nuclei templates for finding "unknown" security vulnerabilities.☆91May 2, 2024Updated last year
- NucleiFuzzer is a robust automation tool that efficiently detects web application vulnerabilities, including XSS, SQLi, SSRF, and Open Re…☆1,830Updated this week
- jsleak is a tool to find secret , paths or links in the source code during the recon.☆584Sep 25, 2025Updated 6 months ago
- Extract URLs, paths, secrets, and other interesting bits from JavaScript☆1,808May 22, 2024Updated last year
- A simple tool for bypassing file upload restrictions.☆899Jul 22, 2024Updated last year
- Hidden parameters discovery suite☆2,044Sep 8, 2024Updated last year
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- A collection of tools which integrate with Cobalt Strike (and possibly other C2 frameworks) through BOF and reflective DLL loading techni…☆1,375Oct 27, 2023Updated 2 years ago
- Escalate your SSRF vulnerabilities on Modern Cloud Environments. `surf` allows you to filter a list of hosts, returning a list of viable …☆753Dec 19, 2023Updated 2 years ago
- i will upload more templates here to share with the comunity.☆569Apr 17, 2024Updated last year
- A python script to scan for Apache Tomcat server vulnerabilities.☆891Jan 12, 2026Updated 3 months ago
- Android security insights in full spectrum.☆957Jul 26, 2025Updated 8 months ago
- Work in progress...☆411Feb 24, 2026Updated last month
- Smart context-based SSRF vulnerability scanner.☆361May 5, 2022Updated 3 years ago
- fuzzuli is a url fuzzing tool that aims to find critical backup files by creating a dynamic wordlist based on the domain.☆939Aug 24, 2023Updated 2 years ago
- A collection of Semgrep rules derived from the OWASP MASTG specifically for Android applications.☆326Nov 12, 2025Updated 5 months ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- Web Cache Vulnerability Scanner is a Go-based CLI tool for testing for web cache poisoning. It is developed by Hackmanit GmbH (http://hac…☆1,169Jan 21, 2026Updated 2 months ago
- Nuclei plugin for BurpSuite☆1,330Oct 22, 2025Updated 5 months ago
- Makes reverse engineering Android apps easier, automating repetitive tasks like pulling, decoding, rebuilding and patching an APK.☆3,772Jan 26, 2026Updated 2 months ago
- reconFTW is a tool designed to perform automated recon on a target domain by running the best set of tools to perform scanning and findin…☆7,416Mar 25, 2026Updated 2 weeks ago
- User-Agent , X-Forwarded-For and Referer SQLI Fuzzer☆384May 19, 2023Updated 2 years ago
- An XSS exploitation command-line interface and payload generator.☆1,421Jan 19, 2025Updated last year
- A comprehensive resource for Android static analysis and vulnerability assessment. Tutorials, tools, and resources for identifying and mi…☆177Jul 6, 2023Updated 2 years ago
- Nginxpwner is a simple tool to look for common Nginx misconfigurations and vulnerabilities.☆1,587Mar 4, 2024Updated 2 years ago
- Tool for discovering the origin host behind a reverse proxy. Useful for bypassing cloud WAFs!☆1,069Mar 24, 2026Updated 3 weeks ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- linWinPwn is a bash script that streamlines the use of a number of Active Directory tools☆2,161Mar 8, 2026Updated last month
- Fast and customizable subdomain wordlist generator using DSL☆937Feb 5, 2026Updated 2 months ago
- Quickly discover exposed hosts on the internet using multiple search engines.☆2,895Mar 25, 2026Updated 2 weeks ago
- Tool to automatically exploit Active Directory privilege escalation paths shown by BloodHound☆685Oct 23, 2025Updated 5 months ago
- An IIS short filename enumeration tool☆1,139Nov 25, 2024Updated last year
- Community edition nuclei templates, a simple tool that allows you to organize all the Nuclei templates offered by the community in one pl…☆1,037Aug 23, 2025Updated 7 months ago
- Standalone utility for service discovery on open ports!☆748Jan 13, 2026Updated 3 months ago