MobileApp-Pentest-Cheatsheet

ورقة الغش في اختبار اختراق تطبيقات الجوال تم إنشاء ورقة الغش لاختبار اختراق تطبيقات الجوال لتوفير مجموعة موجزة من المعلومات عالية القيمة حول موضوعات محددة لاختبار اختراق تطبيقات الجوال وقائمة مراجعة، وهي مرتبطة بقائمة OWASP Mobile Risk Top 10 لإجراء اختبار الاختراق. توزيعات اختبار أمان تطبيقات...

mastg

دليل اختبار أمان التطبيقات المحمولة من OWASP MASTG دليل اختبار أمان التطبيقات المحمولة من OWASP MASTG هو دليل شامل لاختبار أمان التطبيقات المحمولة والهندسة العكسية. يصف العمليات التقنية للتحقق من نقاط الضعف في OWASP Mobile Security Weakness Enumeration MASWE، والتي تتماشى مع الضوابط المدرجة في...

KeyDecoder

KeyDecoder KeyDecoder هو تطبيق جوال صُمم لصالح مختبِري الاختراق وعشاق الأمن السيبراني. من خلال صورة مفتاح، يمكنك قياس تسنينه بسهولة. تم تطويره بواسطة Maxime BEASSE و Quentin CLEMENT. بشراكة مع FrenchKey وCNS من ESIEA. مدعوم بواسطة Flutter 3.13.6 وOpenCV 4.3.0 الملخص KeyDecoder الملخص إخلاء...

DVHMA

DVHMA Damn Vulnerable Hybrid Mobile App DVHMA è un'app mobile ibrida per Android che intenzionalmente contiene vulnerabilità. Il suo scopo è consentire ai professionisti della sicurezza di testare legalmente i loro strumenti e tecniche, aiutare gli sviluppatori a comprendere meglio le insidie...

Hippoo-Mobile-App-For-WooCommerce-CVE-Report

Hippoo-Mobile-App-for-WooCommerce-CVE-Report Divulgazione per CVE-2025-13339 CVE-2025-13339 - Vulnerabilità in Hippoo Mobile App for WooCommerce Questo repository divulga una vulnerabilità scoperta in Hippoo Mobile App for WooCommerce = 1.6.1, plugin WordPress sviluppato da hippooo. 🛠 Versione...

By-Poloss..-..CVE-2026-10580

CVE-2026-10580: Hippoo Mobile App per WooCommerce = 1.9.4 - Bypass dell'autenticazione non autenticata per compromissione admin Non autenticato → Compromissione account amministratore tramite bug di confluenza logica 📌 Riepilogo...

WordPress Stacks Mobile App Builder <=5.2.3 - Authentication Bypass

Stacks Mobile App Builder WordPress plugin ≤ 5.2.3 suffers from an authentication bypass vulnerability via improper handling of query parameters, allowing attackers to impersonate arbitrary users. id: CVE-2024-50477 info: name: WordPress Stacks Mobile App Builder =5.2.3 - Authentication Bypass...

Hippoo Mobile App for WooCommerce <= 1.9.4 - Authentication Bypass to Admin Account Takeover

Hippoo Mobile App for WooCommerce WordPress plugin = 1.9.4 contains an authentication bypass caused by logic conflation in user permission checks, letting unauthenticated attackers take over administrator accounts via REST API password reset. id: CVE-2026-10580 info: name: Hippoo Mobile App for...

Hippoo Mobile App for WooCommerce <= 1.7.1 - Unauthenticated Arbitrary File Read

The Hippoo Mobile App for WooCommerce plugin for WordPress is vulnerable to Path Traversal in all versions up to and including 1.7.1 via the templateredirect function. The plugin registers 'hippooserve' as a WordPress query variable and uses it to serve PWA files from the pwa/ directory. In...

SocialFishMobile

SocialFish Mobile Questa applicazione è un progetto open-source per controllare da remoto SocialFish, non funziona in modo indipendente. Come compilare root@kitploit: Prepare your Flutter environment Go to https://flutter.dev/docs/get-started/install After configured go ahead Clone this repositor...

CVE-2025-46018-CSC-Pay-Mobile-App-Payment-Authentication-Bypass

CVE-2025-46018 – Bypass dell'autenticazione di pagamento nell'app mobile CSC Pay Riepilogo È stata scoperta una vulnerabilità di bypass dell'autenticazione di pagamento nell'app mobile CSC Pay, che interessa la versione 2.19.4. La falla consentiva a un utente malintenzionato di avviare un...

CVE-2026-27330

Unauthenticated Broken Access Control in Mobile App for WooCommerce = 0.4.62 versions...

CVE-2026-27330

An unauthenticated Broken Access Control vulnerability affects the WordPress plugin Mobile App for WooCommerce in versions ≤ 0.4.62 , as reported by researcher Phat RiO and cataloged by Patchstack. The flaw allows a remote attacker with no prior authentication or user interaction to access protec...

CVE-2026-27330 WordPress Mobile App for WooCommerce plugin <= 0.4.62 - Broken Access Control vulnerability

Unauthenticated Broken Access Control in Mobile App for WooCommerce = 0.4.62 versions...

EUVD-2026-66987

Unauthenticated Broken Access Control in Mobile App for WooCommerce = 0.4.62 versions...

WordPress Mobile App for WooCommerce plugin <= 0.4.69 - Other Vulnerability Type vulnerability

Other Vulnerability Type vulnerability discovered by TruongLV1 From FPT Night Wolf in WordPress Plugin Mobile App for WooCommerce versions = 0.4.69...

CVE-2026-10580

WordPress - Hippoo Mobile App for WooCommerce = 1.9.4 - 认证绕过导致管理员账户接管 概述 本工具是 CVE-2026-10580 的概念验证漏洞利用程序，该漏洞影响 Hippoo Mobile App for WooCommerce WordPress 插件（版本 = 1.9.4）。该漏洞允许未经身份验证的攻击者重置任何用户（包括管理员）的密码，从而完全接管站点。 ⚠️ 重要提示： 本工具仅用于 授权的安全测试和教育目的 。未经授权对您不拥有或未获得明确许可的系统使用是违法的。 功能 通过易受攻击的 REST API 端点枚举所有...

ShiningAppMask-ReverseEngineering

ShiningAppMask-ReverseEngineering Introdução Depois de recentemente comprar uma Shining App Mask, fiquei curioso sobre o Shining Mask App e a máscara e como funcionavam. Decidi fazer engenharia reversa para entender como funcionava. A jornada começou com o hardware. O aplicativo móvel Android pod...

WordPress Mobile App for WooCommerce plugin <= 0.4.62 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Phat RiO in WordPress Plugin Mobile App for WooCommerce versions = 0.4.62...

CVE-2024-50477

CVE-2024-50477 Stacks Mobile App Builder = 5.2.3 - Bypass di autenticazione tramite Account Takeover Descrizione: Il plugin Stacks Mobile App Builder – il più potente plugin drag and drop per la creazione di applicazioni mobili per WordPress è vulnerabile a un bypass di autenticazione in tutte le...