The Android Penetration Testing Steps repository is intended for security professionals, penetration testers, developers, and anyone who is interested in understanding the security implications of Android devices. We encourage feedback, suggestions, and contributions from the community to help us keep this repository up-to-date and useful.
☆132Feb 24, 2023Updated 3 years ago
Alternatives and similar repositories for APK-Penetration-testing-Guide
Users that are interested in APK-Penetration-testing-Guide are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Find subdomains by searching public certificate records☆17Jun 11, 2024Updated 2 years ago
- ☆19Sep 2, 2021Updated 5 years ago
- Work in progress...☆496Apr 18, 2026Updated 6 months ago
- PayloadsAllTheThings Skills Plugin for Claude Code☆21Jan 3, 2026Updated 10 months ago
- Delve into a comprehensive checklist, your ultimate companion for Android app penetration testing. Identify vulnerabilities in network, d…☆486Oct 20, 2024Updated 2 years ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- Work in progress...☆425Feb 24, 2026Updated 8 months ago
- Automated Recon Tool Installer☆16Jun 29, 2022Updated 4 years ago
- Your subdomains are free for the taking - no API key, no mistaking! 🕺☆38Feb 27, 2023Updated 3 years ago
- ☆198Jan 18, 2023Updated 3 years ago
- Command-line tool to enumerate top-level domains, check response codes and find potential vulnerabilities for bug bounty hunters and secu…☆26Mar 6, 2023Updated 3 years ago
- A web security research tool for DOM testing☆29Feb 7, 2026Updated 8 months ago
- QuadraInspect is an Android framework that integrates AndroPass, APKUtil, and MobFS, providing a powerful tool for analyzing the security…☆354Sep 26, 2026Updated last month
- Simple Python script to sort nuclei scans by severity and URL☆29May 24, 2023Updated 3 years ago
- APKHunt is a comprehensive static code analysis tool for Android apps that is based on the OWASP MASVS framework. Although APKHunt is int…☆988Sep 24, 2026Updated last month
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- Burp Suite's extension to scan and crawl Single Page Applications☆106Apr 14, 2023Updated 3 years ago
- Blind XSS SVG☆10Mar 27, 2023Updated 3 years ago
- My fuzz repo!☆23Jul 28, 2023Updated 3 years ago
- Vulnerable docker images for CVE-2021-41773☆23Oct 6, 2021Updated 5 years ago
- Create a malicious pip package (PoC)☆12Sep 14, 2023Updated 3 years ago
- Analyze Android native `.so` files☆129Jul 28, 2025Updated last year
- Android Protection Bypass Stuff that I compiled from few resources.☆30Dec 10, 2022Updated 3 years ago
- a recon framework that facilitates discovering, scanning and monitoring assets trough a configurable engine running on serverless aws inf…☆11Aug 26, 2024Updated 2 years ago
- A comprehensive resource for Android static analysis and vulnerability assessment. Tutorials, tools, and resources for identifying and mi…☆185Jul 6, 2023Updated 3 years ago
- 1-Click AI Models by DigitalOcean Gradient • AdDeploy popular AI models on DigitalOcean Gradient GPU virtual machines with just a single click. Zero configuration with optimized deployments.
- recon.cloud is website that scans AWS, Azure and GCP public cloud footprint this GO tool only utilize its API for getting result to termi…☆23Feb 11, 2023Updated 3 years ago
- Clientside vulnerability / reflected xss fuzzer☆150Jul 29, 2023Updated 3 years ago
- ☆439Jun 1, 2021Updated 5 years ago
- A simple Burp Suite extension to crawl JavaScript (JS) files in passive mode and display the results directly on the issues☆376Jul 25, 2023Updated 3 years ago
- Looks for parameters in urls☆35Oct 14, 2024Updated 2 years ago
- As a bug hunter, are your bug bounty reports getting rejected because you don't use a "malicious" Proof of Concept (PoC) app to exploit t…☆157Jul 1, 2026Updated 4 months ago
- Cybersecurity Notes☆169Apr 11, 2024Updated 2 years ago
- Blinks is a powerful Burp Suite extension that automates active scanning with Burp Suite Pro and enhances its functionality. With the int…☆145Dec 7, 2024Updated last year
- All-in Fuzzer. Burp suite extension for auto fuzzing params, headers, body☆37Apr 9, 2026Updated 6 months ago
- End-to-end encrypted cloud storage - Proton Drive • AdSpecial offer: 40% Off Yearly / 80% Off First Month. Protect your most important files, photos, and documents from prying eyes.
- Filter URLs to save your time.☆60Jul 29, 2022Updated 4 years ago
- A small tool that helps Incident responders and SOC analysts do a quick and initial analysis/assessment of malicious files☆27Mar 1, 2023Updated 3 years ago
- This repository provides examples of Vulnerable and Mitigated code as per CWE Categorization.☆23May 4, 2024Updated 2 years ago
- Android Penetration Testing setup tool. Garuda automates the installation of the required tools to perform Android Security Analysis.☆78Sep 10, 2023Updated 3 years ago
- ☆70Aug 19, 2024Updated 2 years ago
- ☆13Oct 24, 2024Updated 2 years ago
- Burp Suite Pro extension☆11May 26, 2017Updated 9 years ago