The Mobile Security Testing Guide (MSTG) is a comprehensive manual for mobile app security development, testing and reverse engineering.
☆86Jan 26, 2023Updated 3 years ago
Alternatives and similar repositories for owasp-mstg
Users that are interested in owasp-mstg are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Alternative Mimikatz LSASS DUMPER☆14Apr 2, 2020Updated 6 years ago
- httptools helps you to capture, repeat and live intercept HTTP requests with scripting capabilities. It is built on top of mitmproxy☆88Apr 14, 2026Updated 5 months ago
- MobSF Documentation☆41Jul 6, 2026Updated 3 months ago
- Active Directory share enumeration tool☆12Apr 28, 2025Updated last year
- ☆49May 20, 2025Updated last year
- AI Agents on DigitalOcean Gradient AI Platform • AdBuild production-ready AI agents using customizable tools or access multiple LLMs through a single endpoint. Create custom knowledge bases or connect external data.
- A list of commands, tools and notes about enumerating and exploiting Active Directory and how to defend against these attacks☆23Jun 22, 2021Updated 5 years ago
- Disable root checks performed by rootbeer library (for security testing)☆25Oct 20, 2017Updated 8 years ago
- ☆13Nov 17, 2021Updated 4 years ago
- An intentionally vulnerable AI chatbot to learn and practice AI Security.☆43Nov 6, 2025Updated 11 months ago
- 「💥」CVE-2022-26134 - Confluence Pre-Auth RCE☆14Jun 19, 2022Updated 4 years ago
- Standalone man-in-the-middle attack framework used for phishing login credentials along with session cookies, allowing for the bypass of …☆15Jan 9, 2019Updated 7 years ago
- a nginx reverse proxy with ssl and auth for MobSF☆27Mar 5, 2020Updated 6 years ago
- List of Google dorks to find VDPs and Bug Bounty Programs☆35Jan 3, 2023Updated 3 years ago
- This is the android client/trojan, it's undetectable, can turn the target phone to a HTTP proxy and runs in the background permanently wi…☆14Jan 10, 2021Updated 5 years ago
- End-to-end encrypted cloud storage - Proton Drive • AdSpecial offer: 40% Off Yearly / 80% Off First Month. Protect your most important files, photos, and documents from prying eyes.
- ☆17Jul 8, 2021Updated 5 years ago
- exfiltration/infiltration toolkit☆23Dec 20, 2023Updated 2 years ago
- Web cache poisoning vulnerability scanner.☆78May 5, 2022Updated 4 years ago
- CapFuzz - capture, fuzz & intercept web traffic.☆65Sep 1, 2019Updated 7 years ago
- A handy plugin for copying requests/responses directly from Burp, some extra magic included.☆13Oct 15, 2021Updated 4 years ago
- Cloud Discovery - brute force public AWS, GCP, Alibaba, and Azure cloud services☆24Jan 21, 2021Updated 5 years ago
- Free and Open-Source Chatbot Platform powered by .NET Core 3.0 and Blazor!☆14Nov 21, 2020Updated 5 years ago
- F5 BIG-IP unauthenticated remote code execution (RCE) and authentication bypass vulnerability!☆11Oct 30, 2023Updated 2 years ago
- Just a quick'n'dirty tool to parse leaked databases (csv-like or sql format)☆24Feb 4, 2018Updated 8 years ago
- Managed Kubernetes at scale on DigitalOcean • AdDigitalOcean Kubernetes includes the control plane, bandwidth allowance, container registry, automatic updates, and more for free.
- A python module for red teams to support the continuous recon of JavaScript files and HTML script blocks in an active web application.☆14Oct 18, 2023Updated 2 years ago
- With the help of this tool you will be able to install ngrok into your terminal easily and configure it easily as well☆39Mar 15, 2021Updated 5 years ago
- 致远OA通过发送特殊请求获取管理员cookie，再通过文件上传接口上传webshell压缩文件，最后发送解压请求获取webshell☆10Apr 11, 2021Updated 5 years ago
- PayloadsAllTheThings Skills Plugin for Claude Code☆21Jan 3, 2026Updated 9 months ago
- Generate Valid Phone Numbers With The NPA-NXX Database☆14May 13, 2023Updated 3 years ago
- backdoor-apk is a shell script that simplifies the process of adding a backdoor to any Android APK file. Users of this shell script shoul…☆16Aug 10, 2016Updated 10 years ago
- mobsfscan is a static analysis tool that can find insecure code patterns in your Android and iOS source code. Supports Java, Kotlin, Swif…☆792Sep 21, 2026Updated 3 weeks ago
- PhishX - The Complete Spear Phishing Tool☆14Sep 13, 2018Updated 8 years ago
- birthday wish to hack font camera☆13Oct 18, 2025Updated 11 months ago
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- ATtiny85 Rubber Ducky (Bad USB) - Wifi Password Grabber Script☆11Feb 24, 2022Updated 4 years ago
- Cookie & Logins stealer for Firefox + Chrome, demonstration only☆12Apr 5, 2023Updated 3 years ago
- Log4j_dos_CVE-2021-45105☆13Dec 19, 2021Updated 4 years ago
- A curated list of awesome Penetration Testing Tools ported to Google Colab to make faster and easier to execute and test.☆40Oct 31, 2024Updated last year
- BearyChat API client for Node and the Browser.☆12Jun 2, 2017Updated 9 years ago
- This contains notes, slides, and code for my Strange Loop talk☆34Sep 22, 2023Updated 3 years ago
- Enhanced fork with logging, OpenAPI 3.0 and Python 3 for security monitoring workshops☆47Feb 16, 2024Updated 2 years ago