MobileHackersWeapons

A collection of awesome tools used by Mobile hackers. Happy hacking , Happy bug-hunting! Family project Table of Contents Weapons Contribute Thanks to contributor Weapons Attributes | Attributes ---|--- Types| Analysis Pentest Proxy RE Scripts Scanner Utils Device Discovery, Monitor, NFC, Target,...

androwarn

Androwarn Yet another static code analyzer for malicious Android applications Description Androwarn is a tool whose main aim is to detect and warn the user about potential malicious behaviours developped by an Android application. The detection is performed with the static analysis of the...

masvs

OWASP 移动应用安全验证标准 MASVS OWASP 移动应用安全验证标准 MASVS 为移动应用确立了基线安全与隐私要求，这些要求被细分为 OWASP 移动安全弱点枚举 MASWE，并在 OWASP 移动应用安全测试指南 中进行了测试。你可以将其用于： 作为度量标准 - 为开发者和应用所有者提供一个可用来对比现有移动应用的安全标准。 作为指南 - 在移动应用开发与测试的所有阶段提供指导。 在采购期间 - 为移动应用安全验证提供基线。 OWASP MAS：OWASP MASVS ➡ OWASP MASWE ➡ OWASP MASTG 🌐 访问 MASVS 网页版 ⬇️ 下载最新 PDF...

mastg

OWASP Mobile Application Security Testing Guide MASTG The OWASP Mobile Application Security Testing Guide MASTG is a comprehensive manual for mobile app security testing and reverse engineering. It describes technical processes for verifying the OWASP Mobile Security Weakness Enumeration MASWE...

morf

MORF Mobile Reconnaissance Framework A powerful offensive security toolkit for mobile application analysis Find Secrets. Protect Apps. Stay Secure. 📋 Table of Contents 💡 Overview 🚀 Quick Start 🔍 Key Features 🏗️ Architecture 📋 Common Use Cases 📦 Installation Prerequisites Method 1: Docker...

frida

Frida Dynamic instrumentation toolkit for developers, reverse-engineers, and security researchers. Learn more at frida.re. Two ways to install 1. Install from prebuilt binaries This is the recommended way to get started. All you need to do is: root@kitploit: pip install frida-tools CLI tools pip...

redexer

redexer Redexer is a reengineering tool that manipulates Android app binaries. This tool is able to parse a DEX file into an in-memory data structure; to infer with which parameters the app uses certain permissions we name this feature RefineDroid; to modify and unparse that data structure to...

house

root@kitploit: / | \ / / | | / // \ \ Y | /\ \ / | / /|// \ / House / / Dynamic Mobile Analysis Tool Contact: [email protected] House : A runtime mobile application analysis toolkit with a Web GUI, powered by Frida, written in Python. It is designed for helping assess mobile...

house

root@kitploit: / | \ / / | | / // \ \ Y | /\ \ / | / /|// \ / House / / Dynamic Mobile Analysis Tool Contact: [email protected] House : ランタイムモバイルアプリケーション分析ツールキット。Web...

frida-interception-and-unpinning

Frida 移动端拦截脚本 !Funded by NLnet - NGI Zero...

awesome-mobile-security

awesome-mobile-security Maintained by @vaib25vicky with contributions from the security and developer communities. Android General - Blogs, Papers, How To's Android: Gaining access to arbitrary Content Providers Evernote: Universal-XSS, theft of all cookies from all sites, and more Interception o...

com.simplemobiletools.dialer

This repository does not have a README...

trueseeing

README trueseeing is a fast, accurate and resillient vulnerability scanner for iOS/Android apps. We operate on the Dalvik VM level for Android -- i.e. we don't care if the target app is obfuscated or not. Capability Currently we can: Automatically scan app for vulnerabilities, reporting in...

Fourteen_Endpoints

中间人 Apple隐私中继内的空壳公司 一个匿名的特拉华州有限责任公司发布了一款圣经祈祷应用、一本每日日记和一个来电识别工具到App Store。该实体在Apple的隐私网络内运营加密中继基础设施。该中继终止于台湾大哥大股份有限公司。 你可以现在就确认它是活跃的。三个命令。 2024年，Apple推出了用于实时来电识别的Oblivious HTTP（遗忘HTTP）。你的手机会询问谁来电。Apple的中继会从问题中剥离你的身份。第三方提供商在不了解提问者身份的情况下回答问题。中继能看到你的IP但看不到问题。提供商能看到问题但看不到你的IP。没有人能同时看到两者。...

Firebase-Extractor

Firebase-Extractor //Mobile OSINT// This tool is written in python2, the purpose of this tool is to parse all the results from Bing search.Basically whenever a firebaseio URL is found for an app , User instead of searching for sensitive data by going manually through the search results can use th...

mhf

Mobile Helper Framework は、モバイルアプリケーションの作成に使用されたフレームワーク/技術を特定するプロセスを自動化するツールです。さらに、機密情報の発見を支援したり、特定されたプラットフォームでの作業に関する提案を提供します。 動作の仕組み このツールは、設定ファイル、リソースファイル、ソースコードファイルなど、モバイルアプリケーション開発で使用される技術に関連するファイルを検索します。 例 Cordova 検索ファイル: root@kitploit: index.html cordova.js cordovaplugins.js React Native...

CVE-2022-23361

Mobile Verification Bypass While Registering a New Account ------ Affected Product JDOmni---- All the Websites Built With JDOmni are Vulnerable. This repository is a public reference for CVE-2022-23361. This vulnerability is now fixed by a vendor. Connect with me:- LinkedIn-...

grapefruit

Grapefruit：开源移动安全测试套件 基于 Frida 的运行时移动应用插桩工具包。 通过 Web 界面检查、Hook 和修改移动应用。 现在它同时支持 iOS 和 Android！ 快速入门 首先，需要设备上运行 Frida 服务端。请先按照官方安装指南（Android）操作。 npm（推荐，需要 Node.js 22.18+） root@kitploit: npm install -g igf igf 或无需安装直接运行（需要 Node.js 22.18+） root@kitploit: npx igf 预编译二进制 适用于 macOS、Linux 和 Windows，可从...

rainmap-lite

rainmap-lite Rainmap Lite - Responsive web application that allows users to launch Nmap scans from their mobiles/tablets/web browsers! Unlike it's predecessor 1, Rainmap-lite does not require special services RabbitMQ, PostgreSQL, Celery, supervisor, etc to make it easy to install on any server...

frida-scripts

frida-scripts A collection of my Frida.re instrumentation scripts to facilitate reverse engineering of mobile apps and more. !NOTE My iOS and Android scripts might require some tweakings. For a well-maintained project that includes some of my Frida scripts, refer to Brida. Article...