Mobile penetration testing android & iOS command cheatsheet
β396Aug 4, 2026Updated 3 months ago
Alternatives and similar repositories for Command-Mobile-Penetration-Testing-Cheatsheet
Users that are interested in Command-Mobile-Penetration-Testing-Cheatsheet are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Runtime Mobile Security (RMS) π±π₯ - is a powerful web interface that helps you to manipulate Android and iOS Apps at Runtimeβ3,142Oct 12, 2026Updated 3 weeks ago
- The Mobile App Pentest cheat sheet was created to provide concise collection of high value information on specific mobile application penβ¦β5,320Feb 8, 2024Updated 2 years ago
- A tool to automate the boring process of APK reconβ342Sep 30, 2022Updated 4 years ago
- Extract endpoints from APK filesβ904May 22, 2024Updated 2 years ago
- A Collection of Android Pentest Learning Materialsβ412Sep 28, 2020Updated 6 years ago
- Managed Database hosting by DigitalOcean β’ AdPostgreSQL, MySQL, MongoDB, Kafka, Valkey, and OpenSearch available. Automatically scale up storage and focus on building your apps.
- A vulnerable Android application that shows simple examples of vulnerabilities in a ctf style.β762Jun 25, 2021Updated 5 years ago
- StaCoAn is a crossplatform tool which aids developers, bugbounty hunters and ethical hackers performing static code analysis on mobile apβ¦β869Apr 27, 2021Updated 5 years ago
- β146Apr 20, 2020Updated 6 years ago
- Collection of useful FRIDA Mobile Scriptsβ440Aug 10, 2021Updated 5 years ago
- A big list of Android Hackerone disclosed reports and other resources.β1,718Oct 21, 2026Updated 2 weeks ago
- A runtime mobile application analysis toolkit with a Web GUI, powered by Frida, written in Python.β1,468Jun 3, 2021Updated 5 years ago
- qsfuzz (Query String Fuzz) allows you to build your own rules to fuzz query strings and easily identify vulnerabilities.β300Feb 12, 2023Updated 3 years ago
- A simple Python Exploit to Write Data to Insecure/vulnerable firebase databases! Commonly found inside Mobile Apps. If the owner of the aβ¦β323Jun 4, 2024Updated 2 years ago
- Created by High-Tech Bridge, the Purposefully Insecure and Vulnerable Android Application (PIVAA) replaces outdated DIVA for benchmark ofβ¦β106May 27, 2020Updated 6 years ago
- Wordpress hosting with auto-scaling - Free Trial Offer β’ AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- Keyhacks is a repository which shows quick ways in which API keys leaked by a bug bounty program can be checked to see if they're valid.β6,368Aug 7, 2026Updated 3 months ago
- Oversecured Vulnerable Android Appβ766Oct 6, 2026Updated last month
- Covers Top 10 OWASP Mobile Vulnerabilitiesβ128May 23, 2024Updated 2 years ago
- A curated list of amazingly awesome Burp Extensionsβ3,451Aug 15, 2026Updated 2 months ago
- Burp Bounty (Scan Check Builder in BApp Store) is a extension of Burp Suite that allows you, in a quick and simple way, to improve the acβ¦β1,818Apr 26, 2024Updated 2 years ago
- Scanning APK file for URIs, endpoints & secrets.β6,380Aug 20, 2025Updated last year
- A collection of awesome one-liner scripts especially for bug bounty tips.β3,211Jul 29, 2024Updated 2 years ago
- Reversense (Dexcalibur2) is a fully rewriting and rethinking of Dexcalibur. Reversense is a binary intelligence platform that automates β¦β1,185Oct 2, 2026Updated last month
- An open source Android application that is intentionally vulnerable so as to act as a learning platform for Android application security β¦β224Dec 23, 2021Updated 4 years ago
- Wordpress hosting with auto-scaling - Free Trial Offer β’ AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- Flutter Reverse Engineering Frameworkβ1,463Apr 11, 2022Updated 4 years ago
- A collection of custom security tools for quick needs.β3,352Oct 18, 2026Updated 2 weeks ago
- Scripts to help me test Android appsβ55Jun 10, 2021Updated 5 years ago
- Sudomy is a subdomain enumeration tool to collect subdomains and analyzing domains performing automated reconnaissance (recon) for bug huβ¦β2,444Jun 27, 2024Updated 2 years ago
- An effort to build a single place for all useful android and iOS security related stuff. All references and tools belong to their respectβ¦β3,578Mar 1, 2024Updated 2 years ago
- A collection of scripts to extend Burp Suiteβ142Apr 8, 2019Updated 7 years ago
- The Mobile App Pentest cheat sheet was created to provide concise collection of high value information on specific mobile application penβ¦β291Feb 2, 2018Updated 8 years ago
- The tool is used to analyze the content of the android application in local storage.β177May 29, 2026Updated 5 months ago
- A mini webserver with FTP support for XXE payloadsβ344Jan 3, 2024Updated 2 years ago
- Managed hosting for WordPress and PHP on Cloudways β’ AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- β248Jun 6, 2018Updated 8 years ago
- Hunting Bugs for Fun and Profitβ272Jul 29, 2020Updated 6 years ago
- Mobile Edge-Dynamic Unified Security Analysisβ2,366Oct 16, 2026Updated 3 weeks ago
- SSRF (Server Side Request Forgery) testing resourcesβ2,510Oct 12, 2024Updated 2 years ago
- Android Security Suite for in-depth reconnaissance and static bytecode analysis based on Ghera benchmarks.β541Jan 6, 2023Updated 3 years ago
- A collection of awesome penetration testing resources, tools and other shiny thingsβ17Jul 25, 2026Updated 3 months ago
- The cheat sheet about Java Deserialization vulnerabilitiesβ3,190May 26, 2023Updated 3 years ago