Alternatives and similar repositories for owasp-mstg

Users that are interested in owasp-mstg are comparing it to the libraries listed below

• RajQureshi / APK-Penetration-testing-Guide
  The Android Penetration Testing Steps repository is intended for security professionals, penetration testers, developers, and anyone who …
  ☆122Updated 2 years ago
• t4kemyh4nd / vulnwebview
  Intentionally vulnerable webview implementions in Android
  ☆56Updated 3 years ago
• ari5ti / Janus-Exploit
  ☆41Updated last year
• Sambal0x / firebaseEnum
  Tool to mass analyse potentially exposed Firebase databases on Android apps
  ☆59Updated 5 years ago
• satishpatnayak / ScanAndroidXML
  Identifies vulnerabilities in network_security_config.xml, AndroidManifest.xml and if Firebase URL are accessible publicly
  ☆49Updated 2 years ago
• t0thkr1s / allsafe
  Intentionally vulnerable Android application.
  ☆247Updated last month
• rodolfomarianocy / Tricks-Pentest-Android-and-iOS-Applications
  Some Useful Tricks for Pentest Android and iOS Apps
  ☆113Updated last month
• stefan2200 / aparoid
  Static and dynamic Android application security analysis
  ☆73Updated 11 months ago
• androbugs2 / androbugs2
  AndroBugs Framework is an efficient Android vulnerability scanner that helps developers or security researchers find potential security v…
  ☆45Updated 2 years ago
• kyawthiha7 / Mobile-App-Pentest
  ☆141Updated 5 years ago
• mindedsecurity / semgrep-rules-android-security
  A collection of Semgrep rules derived from the OWASP MASTG specifically for Android applications.
  ☆282Updated 9 months ago
• carlospolop / Tapjacking-ExportedActivity
  ☆27Updated last year
• shivsahni / FireBaseScanner
  The scripts helps security analsts to identify misconfigured firebase instances.
  ☆214Updated 2 years ago
• jaiswalakshansh / Vuldroid
  Vuldroid is a Vulnerable Android Application made with security issues in order to demonstrate how they can occur in code
  ☆64Updated 3 years ago
• rammarj / csrf-poc-creator
  A Burp Suite extension for CSRF proof of concepts.
  ☆51Updated 2 years ago
• inesmartins / Android-App-Link-Verification-Tester
  Checks if an Android application has successfully completed the "App Link Verification" process for Android App Links.
  ☆56Updated last year
• hax0rgb / InsecureShop
  An Intentionally designed Vulnerable Android Application built in Kotlin.
  ☆158Updated last year
• payatu / BugBazaar
  Android BugBazaar: Your mobile appsec playground to Explore, Exploit, Excel
  ☆49Updated 9 months ago
• az0mb13 / Task_Hijacking_Strandhogg
  A Proof of Concept for demonstrating Task hijacking in Android using an attacker and a victim app.
  ☆41Updated 4 years ago
• iamsarvagyaa / AndroidSecNotes
  An actively maintained, Self curated notes related to android application security for security professionals, bugbounty hunters, pentes…
  ☆217Updated 3 years ago
• tauh33dkhan / Hacking-Insecure-Firebase-Database
  Insecure Firebase | Bugbounty | Hacking Insecure Firbase
  ☆90Updated 3 years ago
• shabarkin / CodeAllTheThings
  A list of threat sinks used in the manual security source code review for application security
  ☆71Updated 2 years ago
• simplylu / jpeg_polyglot_xss
  Exploiting XSS with Javascript/JPEG Polyglot (by @medusa_0xf)
  ☆20Updated 3 years ago
• dzmitry-savitski / tapjacker
  Android tapjacking quick PoC tool
  ☆31Updated 2 years ago
• kiber-io / apkd
  APK downloader from few sources
  ☆130Updated last month
• NotSoSecure / NotSoCereal-Lab
  NotSoCereal: A Deserialization exploit playground
  ☆52Updated 3 years ago
• themalwarenews / Garuda
  Android Penetration Testing setup tool. Garuda automates the installation of the required tools to perform Android Security Analysis.
  ☆68Updated last year
• snyk / socketsleuth
  Burp Extension to add additional functionality for pentesting websocket based applications
  ☆93Updated 11 months ago
• m4ll0k / autobreakpointer
  Automated JavaScript Debugging Tool using CDP - Automatically sets breakpoints for specified strings/patterns in JavaScript code
  ☆89Updated 4 months ago
• kljunowsky / XXElixir
  This tool is designed to test for file upload and XXE vulnerabilities by poisoning XLSX files.
  ☆77Updated last year