The Mobile Security Testing Guide (MSTG) is a comprehensive manual for mobile app security development, testing and reverse engineering.
☆79Jan 26, 2023Updated 3 years ago
Alternatives and similar repositories for owasp-mstg
Users that are interested in owasp-mstg are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Alternative Mimikatz LSASS DUMPER☆14Apr 2, 2020Updated 6 years ago
- httptools helps you to capture, repeat and live intercept HTTP requests with scripting capabilities. It is built on top of mitmproxy☆83Mar 12, 2026Updated 3 weeks ago
- MobSF Documentation☆40Mar 25, 2026Updated 2 weeks ago
- ☆47May 20, 2025Updated 10 months ago
- A list of commands, tools and notes about enumerating and exploiting Active Directory and how to defend against these attacks☆23Jun 22, 2021Updated 4 years ago
- Proton VPN Special Offer - Get 70% off • AdSpecial partner offer. Trusted by over 100 million users worldwide. Tested, Approved and Recommended by Experts.
- Dataset of packed ELF samples☆20Jan 24, 2026Updated 2 months ago
- ☆15Feb 17, 2021Updated 5 years ago
- 「💥」CVE-2022-26134 - Confluence Pre-Auth RCE☆14Jun 19, 2022Updated 3 years ago
- A curated list of amazingly libraries, services and resources to work with PDF files☆17Apr 1, 2026Updated last week
- Standalone man-in-the-middle attack framework used for phishing login credentials along with session cookies, allowing for the bypass of …☆15Jan 9, 2019Updated 7 years ago
- Custom CTFd live scoreboard, originally made for GCTF2017 | Featured on Rawsec's http://list.rawsec.ml/ctf_platforms.html☆23Apr 10, 2018Updated 8 years ago
- ManageEngine PAM360, Password Manager Pro, and Access Manager Plus unauthenticated remote code execution vulnerability PoC-exploit☆30Sep 27, 2022Updated 3 years ago
- ☆17Jul 8, 2021Updated 4 years ago
- gnuplot ported for android☆19Jan 11, 2018Updated 8 years ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting with the flexibility to host WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Cloudways by DigitalOcean.
- CapFuzz - capture, fuzz & intercept web traffic.☆66Sep 1, 2019Updated 6 years ago
- exfiltration/infiltration toolkit☆23Dec 20, 2023Updated 2 years ago
- Fernbach is a vulnerable API written in the Flask micro web framework. The intent of this API is for testing the OWASP top ten vulnerabil…☆30Feb 4, 2022Updated 4 years ago
- A handy plugin for copying requests/responses directly from Burp, some extra magic included.☆13Oct 15, 2021Updated 4 years ago
- Resources for CompTIA Security+ SY0-601 and related topics☆24Apr 27, 2024Updated last year
- This is the android client/trojan, it's undetectable, can turn the target phone to a HTTP proxy and runs in the background permanently wi…☆13Jan 10, 2021Updated 5 years ago
- 致远OA通过发送特殊请求获取管理员cookie，再通过文件上传接 口上传webshell压缩文件，最后发送解压请求获取webshell☆10Apr 11, 2021Updated 5 years ago
- With the help of this tool you will be able to install ngrok into your terminal easily and configure it easily as well☆37Mar 15, 2021Updated 5 years ago
- Easiest 1-click way to install and use Stable Diffusion on your computer. Provides a browser UI for generating images from text prompts a…☆25Apr 18, 2023Updated 2 years ago
- Managed Kubernetes at scale on DigitalOcean • AdDigitalOcean Kubernetes includes the control plane, bandwidth allowance, container registry, automatic updates, and more for free.
- A Proof-Of-Concept for the CVE-2023-43770 vulnerability.☆33Oct 2, 2023Updated 2 years ago
- birthday wish to hack font camera☆14Oct 18, 2025Updated 5 months ago
- Custom (non-official) evil-portals for the awesome Wifi Pineapple (https://wifipineapple.com)☆15Dec 7, 2017Updated 8 years ago
- mobsfscan is a static analysis tool that can find insecure code patterns in your Android and iOS source code. Supports Java, Kotlin, Swif…☆747Mar 12, 2026Updated 3 weeks ago
- Generate Valid Phone Numbers With The NPA-NXX Database☆12May 13, 2023Updated 2 years ago
- backdoor-apk is a shell script that simplifies the process of adding a backdoor to any Android APK file. Users of this shell script shoul…☆16Aug 10, 2016Updated 9 years ago
- This repo will contain the material for reversing flutter applications.☆54Jul 23, 2025Updated 8 months ago
- Challenge source code, official writeups, and infrastructure setup for UIUCTF 2023☆39Jul 13, 2023Updated 2 years ago
- A wireless router when newly installed has a default admin password depending on its manufacturer and model. If not changed, the router c…☆16Apr 4, 2014Updated 12 years ago
- DigitalOcean Gradient AI Platform • AdBuild production-ready AI agents using customizable tools or access multiple LLMs through a single endpoint. Create custom knowledge bases or connect external data.
- This contains notes, slides, and code for my Strange Loop talk☆31Sep 22, 2023Updated 2 years ago
- Repository of various scripts related to Mobile PT. Copyrights and Licensing terms belong to respective owners.☆12Nov 4, 2019Updated 6 years ago
- Yet another machine learning-based WAF research☆26Jun 21, 2022Updated 3 years ago
- Steghide is a steganography program that is able to hide data in various kinds of image- and audio-files. The color- respectivly sample-f…☆47Apr 23, 2021Updated 4 years ago
- Arduino Rubber Ducky script to steal all saved WIFI passwords from Windows.☆12Jun 15, 2017Updated 8 years ago
- THIS REPOSITORY IS STALE. Collection of resources for penetration testing, ethical hacking, cybersecurity, organized by user context.☆10Jan 20, 2017Updated 9 years ago
- ☆15Jun 27, 2020Updated 5 years ago