The Mobile App Pentest cheat sheet was created to provide concise collection of high value information on specific mobile application penetration testing topics.
☆296Feb 2, 2018Updated 8 years ago
Alternatives and similar repositories for MobileApp-Pentest-Cheatsheet
Users that are interested in MobileApp-Pentest-Cheatsheet are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- A Virtual Machine For Assessing Android applications, Reverse Engineering and Malware Analysis☆1,163May 31, 2023Updated 3 years ago
- The Mobile App Pentest cheat sheet was created to provide concise collection of high value information on specific mobile application pen…☆5,233Feb 8, 2024Updated 2 years ago
- Intercept, modify, repeat and attack Android's Binder transactions using Burp Suite☆323Aug 20, 2017Updated 8 years ago
- The iOS Security Testing Framework☆1,399Oct 25, 2020Updated 5 years ago
- Damn Vulnerable Hybrid Mobile App (DVHMA) is an hybrid mobile app (for Android) that intentionally contains vulnerabilities.☆273Aug 22, 2018Updated 7 years ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- ☆278Oct 19, 2021Updated 4 years ago
- Shodan HQ nmap plugin - passively scan targets☆157Mar 14, 2016Updated 10 years ago
- A Burp Suite content discovery plugin that add the smart into the Buster!☆378Oct 12, 2020Updated 5 years ago
- Fuzzapi is a tool used for REST API pentesting and uses API_Fuzzer gem☆664Feb 25, 2021Updated 5 years ago
- A Burp Plugin for Detecting Weaknesses in Content Security Policies☆168May 19, 2023Updated 3 years ago
- (deprecated) Android application vulnerability analysis and Android pentest tool☆310Nov 6, 2018Updated 7 years ago
- Application for capturing, modifying and sending custom WebSocket data from client to server and vice versa.☆453Dec 8, 2022Updated 3 years ago
- An automation framework for running multiple open sourced subdomain bruteforcing tools (in parallel) using your own wordlists via Docker …☆261Aug 22, 2021Updated 4 years ago
- The new bridge between Burp Suite and Frida!☆1,882Oct 30, 2025Updated 8 months ago
- 1-Click AI Models by DigitalOcean Gradient • AdDeploy popular AI models on DigitalOcean Gradient GPU virtual machines with just a single click. Zero configuration with optimized deployments.
- AndroBugs Framework is an efficient Android vulnerability scanner that helps developers or hackers find potential security vulnerabilitie…☆1,222Apr 24, 2019Updated 7 years ago
- SSRF (Server Side Request Forgery) testing resources☆2,509Oct 12, 2024Updated last year
- ☆230Nov 18, 2015Updated 10 years ago
- An automated script that download potential exploit for linux kernel from exploitdb, and compile them automatically☆24Apr 30, 2016Updated 10 years ago
- Exploitation for XSS☆737Aug 5, 2021Updated 4 years ago
- Documentation:☆1,629May 1, 2023Updated 3 years ago
- Automated client-side template injection (sandbox escape/bypass) detection for AngularJS v1.x.☆325Oct 20, 2021Updated 4 years ago
- Flash crossdomain policy security checker☆26Oct 3, 2015Updated 10 years ago
- Script to test if a server is vulnerable to the JetLeak vulnerability☆144Jul 1, 2016Updated 10 years ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- An Online Analysis System for Packed Android Malware☆108Jul 28, 2016Updated 9 years ago
- Setup script for Regon-ng☆940Nov 17, 2020Updated 5 years ago
- Updated version of SWFIntruder☆27Aug 16, 2016Updated 9 years ago
- Database of websites for penetration testing☆184Jan 15, 2020Updated 6 years ago
- Repo of useful scripts☆103Jun 30, 2020Updated 6 years ago
- Recon, Subdomain Bruting, Zone Transfers☆230Aug 2, 2016Updated 9 years ago
- Android App Security Checklist☆895Aug 27, 2022Updated 3 years ago
- This tool can be used to brute discover GET and POST parameters☆1,395Aug 24, 2019Updated 6 years ago
- ☆334Jan 8, 2018Updated 8 years ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- A runtime mobile application analysis toolkit with a Web GUI, powered by Frida, written in Python.☆1,464Jun 3, 2021Updated 5 years ago
- DIVA Android - Damn Insecure and vulnerable App for Android☆1,129May 19, 2023Updated 3 years ago
- Next Generation Firewall Audit and Bypass Tool☆266Apr 24, 2017Updated 9 years ago
- Mobile penetration testing android & iOS command cheatsheet☆388Jan 29, 2026Updated 5 months ago
- A demo vulnerable application for stealing sensitive information by abusing Google Chrome cache☆20Jan 19, 2020Updated 6 years ago
- Tool for automatic exploitation of XXE vulnerability using direct and different out of band methods.☆1,778Dec 1, 2024Updated last year
- A Rails application containing multiple vulnerabilities used for demonstration purposes☆20Mar 26, 2015Updated 11 years ago