The Mobile App Pentest cheat sheet was created to provide concise collection of high value information on specific mobile application penetration testing topics.
☆292Feb 2, 2018Updated 8 years ago
Alternatives and similar repositories for MobileApp-Pentest-Cheatsheet
Users that are interested in MobileApp-Pentest-Cheatsheet are comparing it to the libraries listed below
Sorting:
- A Virtual Machine For Assessing Android applications, Reverse Engineering and Malware Analysis☆1,156May 31, 2023Updated 2 years ago
- The Mobile App Pentest cheat sheet was created to provide concise collection of high value information on specific mobile application pen…☆5,159Feb 8, 2024Updated 2 years ago
- The iOS Security Testing Framework☆1,381Oct 25, 2020Updated 5 years ago
- Intercept, modify, repeat and attack Android's Binder transactions using Burp Suite☆323Aug 20, 2017Updated 8 years ago
- A Burp Suite content discovery plugin that add the smart into the Buster!☆378Oct 12, 2020Updated 5 years ago
- Damn Vulnerable Hybrid Mobile App (DVHMA) is an hybrid mobile app (for Android) that intentionally contains vulnerabilities.☆269Aug 22, 2018Updated 7 years ago
- Fuzzapi is a tool used for REST API pentesting and uses API_Fuzzer gem☆667Feb 25, 2021Updated 5 years ago
- (deprecated) Android application vulnerability analysis and Android pentest tool☆295Nov 6, 2018Updated 7 years ago
- A Burp Plugin for Detecting Weaknesses in Content Security Policies☆166May 19, 2023Updated 2 years ago
- An automation framework for running multiple open sourced subdomain bruteforcing tools (in parallel) using your own wordlists via Docker …☆260Aug 22, 2021Updated 4 years ago
- AndroBugs Framework is an efficient Android vulnerability scanner that helps developers or hackers find potential security vulnerabilitie…☆1,221Apr 24, 2019Updated 6 years ago
- ☆276Oct 19, 2021Updated 4 years ago
- ☆231Nov 18, 2015Updated 10 years ago
- Exploitation for XSS☆730Aug 5, 2021Updated 4 years ago
- Android App Security Checklist☆890Aug 27, 2022Updated 3 years ago
- Documentation:☆1,610May 1, 2023Updated 2 years ago
- Application for capturing, modifying and sending custom WebSocket data from client to server and vice versa.☆451Dec 8, 2022Updated 3 years ago
- DIVA Android - Damn Insecure and vulnerable App for Android☆1,089May 19, 2023Updated 2 years ago
- SSRF (Server Side Request Forgery) testing resources☆2,482Oct 12, 2024Updated last year
- Tool for automatic exploitation of XXE vulnerability using direct and different out of band methods.☆1,716Dec 1, 2024Updated last year
- Burp Suite plugin created for using Collaborator tool during manual testing in a comfortable way!☆104Jun 1, 2018Updated 7 years ago
- Setup script for Regon-ng☆938Nov 17, 2020Updated 5 years ago
- bash script to facilitate some aspects of an Android application assessment☆159Sep 9, 2021Updated 4 years ago
- Security checks pack for Burp Suite☆140Feb 8, 2018Updated 8 years ago
- The new bridge between Burp Suite and Frida!☆1,852Oct 30, 2025Updated 4 months ago
- This tool can be used to brute discover GET and POST parameters☆1,393Aug 24, 2019Updated 6 years ago
- Next Generation Firewall Audit and Bypass Tool☆266Apr 24, 2017Updated 8 years ago
- An automated script that download potential exploit for linux kernel from exploitdb, and compile them automatically☆24Apr 30, 2016Updated 9 years ago
- A big list of Android Hackerone disclosed reports and other resources.☆1,672Sep 10, 2025Updated 5 months ago
- Browser's XSS Filter Bypass Cheat Sheet☆1,150May 6, 2017Updated 8 years ago
- Shodan HQ nmap plugin - passively scan targets☆157Mar 14, 2016Updated 9 years ago
- Penetration Testing tools - one repo to clone them all... containing latest pen testing tools☆541Nov 25, 2019Updated 6 years ago
- ☆332Jan 8, 2018Updated 8 years ago
- Script to test if a server is vulnerable to the JetLeak vulnerability☆144Jul 1, 2016Updated 9 years ago
- A collection of Burpsuite Intruder payloads, BurpBounty payloads, fuzz lists, malicious file uploads and web pentesting methodologies and…☆3,903Sep 27, 2021Updated 4 years ago
- Various Scripts for Mobile Pen-testing with Frida☆75Jun 14, 2016Updated 9 years ago
- Apache Tomcat < 9.0.1 (Beta) / < 8.5.23 / < 8.0.47 / < 7.0.8 - JSP Upload Bypass / Remote Code Execution☆395Oct 11, 2017Updated 8 years ago
- ☆31Feb 10, 2020Updated 6 years ago
- A tool to extract database data from a blind SQL injection vulnerability.☆32Jan 4, 2016Updated 10 years ago