Mobile penetration testing android & iOS command cheatsheet
☆384Jan 29, 2026Updated last month
Alternatives and similar repositories for Command-Mobile-Penetration-Testing-Cheatsheet
Users that are interested in Command-Mobile-Penetration-Testing-Cheatsheet are comparing it to the libraries listed below
Sorting:
- Runtime Mobile Security (RMS) 📱🔥 - is a powerful web interface that helps you to manipulate Android and iOS Apps at Runtime☆2,978Feb 28, 2026Updated last week
- The Mobile App Pentest cheat sheet was created to provide concise collection of high value information on specific mobile application pen…☆5,154Feb 8, 2024Updated 2 years ago
- A tool to automate the boring process of APK recon☆345Sep 30, 2022Updated 3 years ago
- A Collection of Android Pentest Learning Materials☆410Sep 28, 2020Updated 5 years ago
- A vulnerable Android application that shows simple examples of vulnerabilities in a ctf style.☆742Jun 25, 2021Updated 4 years ago
- StaCoAn is a crossplatform tool which aids developers, bugbounty hunters and ethical hackers performing static code analysis on mobile ap…☆867Apr 27, 2021Updated 4 years ago
- A big list of Android Hackerone disclosed reports and other resources.☆1,672Sep 10, 2025Updated 5 months ago
- Extract endpoints from APK files☆882May 22, 2024Updated last year
- A simple Python Exploit to Write Data to Insecure/vulnerable firebase databases! Commonly found inside Mobile Apps. If the owner of the a…☆325Jun 4, 2024Updated last year
- Collection of useful FRIDA Mobile Scripts☆424Aug 10, 2021Updated 4 years ago
- A runtime mobile application analysis toolkit with a Web GUI, powered by Frida, written in Python.☆1,458Jun 3, 2021Updated 4 years ago
- VyAPI - A cloud based vulnerable hybrid Android App☆86Feb 21, 2020Updated 6 years ago
- [Official] Android reverse engineering tool focused on dynamic instrumentation automation leveraging Frida. It disassembles dex, analyzes…☆1,120Feb 2, 2023Updated 3 years ago
- ☆143Apr 20, 2020Updated 5 years ago
- ☆22Apr 12, 2023Updated 2 years ago
- Penetration tests guide based on OWASP including test cases, resources and examples.☆2,767Mar 23, 2022Updated 3 years ago
- qsfuzz (Query String Fuzz) allows you to build your own rules to fuzz query strings and easily identify vulnerabilities.☆303Feb 12, 2023Updated 3 years ago
- Keyhacks is a repository which shows quick ways in which API keys leaked by a bug bounty program can be checked to see if they're valid.☆6,082Aug 14, 2024Updated last year
- A collection of scripts to extend Burp Suite☆142Apr 8, 2019Updated 6 years ago
- A collection of custom security tools for quick needs.☆3,284May 1, 2023Updated 2 years ago
- This Repo contains wordlist for subdomain enumeration , php file path, html file path, and js file path☆107Aug 4, 2020Updated 5 years ago
- Oversecured Vulnerable Android App☆731Jul 18, 2024Updated last year
- Hunting Bugs for Fun and Profit☆275Jul 29, 2020Updated 5 years ago
- SSRF (Server Side Request Forgery) testing resources☆2,482Oct 12, 2024Updated last year
- A curated list of amazingly awesome Burp Extensions☆3,372Feb 17, 2026Updated 2 weeks ago
- Extract relative urls from a heap snapshot☆87May 30, 2021Updated 4 years ago
- Sudomy is a subdomain enumeration tool to collect subdomains and analyzing domains performing automated reconnaissance (recon) for bug hu…☆2,339Jun 27, 2024Updated last year
- ☆250Jun 6, 2018Updated 7 years ago
- Burp Bounty (Scan Check Builder in BApp Store) is a extension of Burp Suite that allows you, in a quick and simple way, to improve the ac…☆1,774Apr 26, 2024Updated last year
- Created by High-Tech Bridge, the Purposefully Insecure and Vulnerable Android Application (PIVAA) replaces outdated DIVA for benchmark of…☆106May 27, 2020Updated 5 years ago
- Scanning APK file for URIs, endpoints & secrets.☆5,982Aug 20, 2025Updated 6 months ago
- An effort to build a single place for all useful android and iOS security related stuff. All references and tools belong to their respect…☆3,426Mar 1, 2024Updated 2 years ago
- Mobile Edge-Dynamic Unified Security Analysis☆2,183Feb 26, 2026Updated last week
- The Outlook HTML Leak Test Project☆41May 12, 2018Updated 7 years ago
- Quick SQLMap Tamper Suggester☆1,397Jul 18, 2022Updated 3 years ago
- An open source Android application that is intentionally vulnerable so as to act as a learning platform for Android application security …☆224Dec 23, 2021Updated 4 years ago
- Clientside vulnerability / reflected xss fuzzer☆149Jul 29, 2023Updated 2 years ago
- The cheat sheet about Java Deserialization vulnerabilities☆3,167May 26, 2023Updated 2 years ago
- A collection of hacks and one-off scripts☆2,423Mar 13, 2025Updated 11 months ago