DVHMA

DVHMA Damn Vulnerable Hybrid Mobile App DVHMA is an hybrid mobile app for Android that intentionally contains vulnerabilities. Its purpose is to enable security professionals to test their tools and techniques legally, help developers better understand the common pitfalls in developing hybrid...

Mobile-Security-Framework-MobSF

Mobile Security Framework MobSF Mobile Security Framework MobSF is a security research platform for mobile applications in Android, iOS and Windows Mobile. MobSF can be used for a variety of use cases such as mobile application security, penetration testing, malware analysis, and privacy analysis...

house

root@kitploit: / | \ / / | | / // \ \ Y | /\ \ / | / /|// \ / House / / Dynamic Mobile Analysis Tool Contact: [email protected] House : A runtime mobile application analysis toolkit with a Web GUI, powered by Frida, written in Python. It is designed for helping assess mobile...

redexer

redexer Redexer is a reengineering tool that manipulates Android app binaries. This tool is able to parse a DEX file into an in-memory data structure; to infer with which parameters the app uses certain permissions we name this feature RefineDroid; to modify and unparse that data structure to...

SecurityShepherd

OWASP Security Shepherd The OWASP Security Shepherd Project is a web and mobile application security training platform. Security Shepherd has been designed to foster and improve security awareness among a varied skill-set demographic. The aim of this project is to take AppSec novices or experienc...

apkstudio

APK Studio Open-source, cross platform Qt6 based IDE for reverse-engineering Android application packages. It features a friendly IDE-like layout including code editor with syntax highlighting support for .smali code files. Features Cross platform, run on Linux , Mac OS X & Windows...

MASTG-Hacking-Playground

MASTG Hacking Playground Welcome to the MASTG Hacking Playground which is part of the OWASP Mobile Application Security MAS project. The MASTG Hacking Playground is a collection of educational iOS and Android mobile apps, that are intentionally build insecure in order to give practical guidance t...

simvyn

simvyn Universal mobile devtool — control iOS Simulators, Android Emulators, and real devices from a single dashboard and CLI Table of Contents Quick Start Installation AI Coding Agents Features Module Showcases Collections Guide CLI Reference How It Works Supported Platforms Contributing Securit...

Smartphone-Pentest-Framework

Smartphone-Pentest-Framework El Smartphone Pentest-Framework ha sido sustituido por el software Dagah Mobile Penetration Testing, disponible en: https://www.shevirah.com/dagah. Para quienes simplemente buscan seguir los ejercicios de mi libro, descarguen la imagen de Kali en el sitio web de mi...

Firebase-Extractor

Firebase-Extractor //Mobile OSINT// This tool is written in python2, the purpose of this tool is to parse all the results from Bing search.Basically whenever a firebaseio URL is found for an app , User instead of searching for sensitive data by going manually through the search results can use th...

pmd

PMD - source code analyzer PMD is an extensible multilanguage static code analyzer. It finds common programming flaws like unused variables, empty catch blocks, unnecessary object creation, and so forth. It's mainly concerned with Java and Apex , but supports 16 other languages. It comes with 400...

nightcrawler

Nightcrawler Un agente autónomo de pruebas de penetración que se ejecuta completamente en un smartphone. Deja el teléfono en una red, aléjate, y descubre hosts, mapea servicios, encuentra vulnerabilidades y genera un informe de pentest — todo sin conectividad a la nube. root@kitploit: ░█▄░█ █ █▀▀...

Brida

Brida Brida is a Burp Suite Extension that, working as a bridge between Burp Suite and Frida, lets you use and manipulate applications’ own methods while tampering the traffic exchanged between the applications and their back-end services/servers. It supports all platforms supported by Frida...

noia

Noia Noia 是一个基于 Web 的工具，其主要目的是简化浏览移动应用程序沙箱的过程，并直接预览 SQLite 数据库、图像等。由 frida.re 提供支持。 请注意，我并非程序员，但我的代码熟练度可能高于平均水平。欢迎试用，如果发现任何问题，请提交 issue。欢迎提交 PR。 安装与使用 root@kitploit: npm install -g noia noia 特性 浏览第三方应用程序的文件和目录。Noia 会显示详细信息，包括访问权限、文件类型等。 查看自定义二进制文件。直接预览 SQLite 数据库、图像等。 按名称搜索应用程序。 按名称搜索文件和目录。 使用快捷键...

noia

Noia Noia is a web-based tool whose main aim is to ease the process of browsing mobile applications sandbox and directly previewing SQLite databases, images, and more. Powered by frida.re. Please note that I'm not a programmer, but I'm probably above the median in code-savyness. Try it out, open ...

rainmap-lite

rainmap-lite Rainmap Lite - Responsive web application that allows users to launch Nmap scans from their mobiles/tablets/web browsers! Unlike it's predecessor 1, Rainmap-lite does not require special services RabbitMQ, PostgreSQL, Celery, supervisor, etc to make it easy to install on any server...

EUVD-2026-87255

X-SpringBoot through 6.0 returns login verification codes in HTTP responses from unauthenticated endpoints GET /sys/mobile/code and GET /sys/email/code without sending them to account owners. Attackers can request codes using known mobile numbers or email addresses, read them from responses, and...

mhf

移动端辅助框架 是一个自动化识别移动应用程序所用框架/技术的工具。此外，它有助于查找敏感信息或为使用识别的平台提供建议。 工作原理？ 该工具搜索与移动应用开发中使用的技术相关的文件，例如配置文件、资源文件和源代码文件。 示例 Cordova 搜索文件： root@kitploit: index.html cordova.js cordovaplugins.js React Native Android & iOS 搜索文件 root@kitploit: Android 文件： libreactnativejni.so index.android.bundle iOS 文件：...

mhf

Mobile Helper Framework is a tool that automates the process of identifying the framework/technology used to create a mobile application. Additionally, it assists in finding sensitive information or provides suggestions for working with the identified platform. How work? The tool searches for fil...

Santoku-Linux

Forense Móvil, Análisis de Malware y Pruebas de Seguridad de Aplicaciones CORTAR Y TROCEAR Arranca en Santoku y ponte a trabajar, con las últimas herramientas y utilidades de seguridad centradas en plataformas móviles como Android e iOS. Santoku Linux es un ISO de Linux arrancable que puedes...