scrounger

Description Scrounger - a person who borrows from or lives off others. There is no better description for this tool for two main reasons, the first is because this tool takes inspiration from many other tools that have already been published, the second reason is because it lives off mobile...

mastg

OWASP Mobile Application Security Testing Guide MASTG The OWASP Mobile Application Security Testing Guide MASTG is a comprehensive manual for mobile app security testing and reverse engineering. It describes technical processes for verifying the OWASP Mobile Security Weakness Enumeration MASWE...

frida

Frida Dynamic instrumentation toolkit for developers, reverse-engineers, and security researchers. Learn more at frida.re. Two ways to install 1. Install from prebuilt binaries This is the recommended way to get started. All you need to do is: root@kitploit: pip install frida-tools CLI tools pip...

mas-website

OWASP Mobile Application Security Project Website This repository contains the source and configuration for the OWASP Mobile Application Security Project website mas.owasp.org. This website aggregates, organizes, and presents documentation from the main MAS resources using MkDocs and the...

CVE-2020-27747

CVE-2020-27747 Possible Account Takeover | Brute Force Ability Suggested description An issue was discovered in Click Studios Passwordstate 8.9 Build 8973. If the user of the system has assigned himself a PIN code for entering from a mobile device using the built-in generator 4 digits, a remote...

elegant-bouncer

ELEGANTBOUNCER ELEGANTBOUNCER is a detection tool for file-based mobile exploits. It employs an innovative approach for advanced file-based threat identification, eliminating the need for in-the-wild samples and outperforming traditional methods based on regular expressions or IOCs. At present, i...

rayhunter

Rayhunter Rayhunter is a project for detecting IMSI catchers, also known as cell-site simulators or stingrays. It was first designed to run on a cheap mobile hotspot called the Orbic RC400L, but thanks to community efforts, it can support some other devices as well. It's also designed to be as ea...

objection

📱objection - Runtime Mobile Exploration objection is a runtime mobile exploration toolkit, powered by Frida, built to help you assess the security posture of your mobile applications, without needing a jailbreak. Supports both iOS and Android. Inspect and interact with container file systems...

objection

📱objection - Exploración Móvil en Tiempo de Ejecución objection es un kit de herramientas de exploración móvil en tiempo de ejecución, impulsado por Frida, diseñado para ayudarte a evaluar la postura de seguridad de tus aplicaciones móviles, sin necesidad de un jailbreak. Soporta tanto iOS como...

om-research

OM Research This repository explores the Bluetooth Low Energy BLE protocol used by the Osmo Mobile series of gimbals. The official mobile apps are outdated and require broad system permissions. However, the gimbals themselves communicate through a simple BLE protocol. The goal of this project is ...

vuln-bank-mobile

💳 Vulnerable Bank Mobile App Vulnerable Bank is an intentionally insecure mobile application built for security engineers, penetration testers, and mobile app security learners to practice and demonstrate real-world exploitation of insecure coding practices. This mobile app acts as a frontend for...

DVHMA

DVHMA Damn Vulnerable Hybrid Mobile App DVHMA is an hybrid mobile app for Android that intentionally contains vulnerabilities. Its purpose is to enable security professionals to test their tools and techniques legally, help developers better understand the common pitfalls in developing hybrid...

Brida

Brida Brida is a Burp Suite Extension that, working as a bridge between Burp Suite and Frida, lets you use and manipulate applications’ own methods while tampering the traffic exchanged between the applications and their back-end services/servers. It supports all platforms supported by Frida...

ez-iRZ

ez-iRZ Exploit para CVE-2022-27226 Cross Site Request Forgery a Ejecución Remota de Código en Routers Móviles iRZ Créditos John Jackson Chris Mack --- https://github.com/0xHalcyon Stephen Chavez --- https://github.com/redragonx/ Robert Willis Descripción Un problema de CSRF en Routers Móviles iRZ...

pacbot

Introducción Policy as Code Bot PacBot es una plataforma para la monitorización continua del cumplimiento normativo, la generación de informes de cumplimiento y la automatización de la seguridad en la nube. En PacBot, las políticas de seguridad y cumplimiento se implementan como código. Todos los...

trueseeing

README trueseeing is a fast, accurate and resillient vulnerability scanner for iOS/Android apps. We operate on the Dalvik VM level for Android -- i.e. we don't care if the target app is obfuscated or not. Capability Currently we can: Automatically scan app for vulnerabilities, reporting in...

Awesome-MoAI-Security

Awesome Mobile On-Device AI Security Seguridad de IA en Dispositivos Móviles SoK: Landscape de Ataques y Defensas de los Sistemas de IA en Dispositivos Móviles Los sistemas de IA en dispositivos móviles ejecutan modelos de IA localmente a través de frameworks de ML como LiteRT/TFLite , Core ML ,...

mas-crackmes

OWASP MAS Crackmes This repo contains the source code for the OWASP MAS Crackmes. Welcome to the MAS Crackmes aka. UnCrackable Apps, a collection of mobile reverse engineering challenges. These challenges are used as examples throughout the OWASP MASTG. Of course, you can also solve them for fun...

SafeForge

SafeForge – Where Apps Are Built with Trust SafeForge is an open-source mobile app hub built on GitLab that allows developers to build, upload, share, and collaborate on mobile applications in a secure, AI-verified, and fully encrypted ecosystem. Every application submitted to SafeForge is analyz...

MobileHackersWeapons

A collection of awesome tools used by Mobile hackers. Happy hacking , Happy bug-hunting! Family project Table of Contents Weapons Contribute Thanks to contributor Weapons Attributes | Attributes ---|--- Types| Analysis Pentest Proxy RE Scripts Scanner Utils Device Discovery, Monitor, NFC, Target,...