MESH

DOCS | BARGHEST MESH is a networking tool, to support remote logical forensics acquision on mobile devices MESH gives analysts a direct, encrypted path to mobile devices for wireless debugging, network monitoring and forensic acquisition, even when those devices sit behind NAT, firewalls, or...

authelia

Authelia is an open-source authentication and authorization server providing two-factor authentication and single sign-on SSO for your applications via a web portal. It acts as a companion for reverse proxies by allowing, denying, or redirecting requests. Documentation is available at...

mouseserver-exploit

Mobile Mouse 3.6.0.4 RCE - Fix A corrected version of the Mobile Mouse 3.6.0.4 remote code execution exploit published as EDB-51010. Vulnerability CVE: CVE-2023-31902 Affected version: Mobile Mouse 3.6.0.4 Default port: TCP/9099 What Was Fixed The original exploit successfully downloads the paylo...

Smartphone-Pentest-Framework

Smartphone-Pentest-Framework El Smartphone Pentest-Framework ha sido sustituido por el software Dagah Mobile Penetration Testing, disponible en: https://www.shevirah.com/dagah. Para quienes simplemente buscan seguir los ejercicios de mi libro, descarguen la imagen de Kali en el sitio web de mi...

jira-mobile-ssrf-exploit

CVE-2022-26135 - Server Side Request Forgery de Lectura Completa en el Plugin Móvil para Jira Data Center y Server Acerca de Assetnote Assetnote mapea automáticamente tus activos externos y los monitorea en busca de cambios y problemas de seguridad para ayudar a prevenir infracciones graves. Esta...

noia

Noia Noia es una herramienta basada en web cuyo objetivo principal es facilitar el proceso de exploración del sandbox de aplicaciones móviles y la previsualización directa de bases de datos SQLite, imágenes y más. Desarrollada con frida.re. Ten en cuenta que no soy programador, pero probablemente...

noia

Noia Noia is a web-based tool whose main aim is to ease the process of browsing mobile applications sandbox and directly previewing SQLite databases, images, and more. Powered by frida.re. Please note that I'm not a programmer, but I'm probably above the median in code-savyness. Try it out, open ...

maswe

OWASP Mobile Application Security Weakness Enumeration MASWE The OWASP Mobile Application Security Weakness Enumeration MASWE is a list of common security and privacy weaknesses in mobile applications. It is intended to be used as a reference for developers, security researchers, and security...

GeckoDroid

GeckoDroid Mobile client for Adaptix C2 Framework. Full operator access from your Android device. What it does GeckoDroid gives you control over your Adaptix C2 server from anywhere. Instead of sitting at your desktop client, you can manage operations on the go. Agents - See all connected agents...

dockerized-android

Dockerized Android Dockerized Android es un marco basado en contenedores que permite ejecutar un Emulador de Android dentro de Docker y controlarlo a través de un navegador. Este proyecto se ha desarrollado con el fin de proporcionar un punto de partida para integrar componentes de seguridad móvi...

dockerized-android

Dockerized Android Dockerized Android is a container-based framework that allows to execute and Android Emulator inside Docker and control it through a browser. This project has been developed in order to provide a starting point for integrating mobile security components into Cyber Ranges but it...

com.simplemobiletools.dialer

This repository does not have a README...

masvs

OWASP Mobile Application Security Verification Standard MASVS The OWASP Mobile Application Security Verification Standard MASVS establishes baseline security and privacy requirements for mobile apps that are broken down in the the OWASP Mobile Security Weakness Enumeration MASWE and tested in the...

StaCoAn

StaCoAn Not maintained anymore! Will be archived soon. StaCoAn is a crossplatform tool which aids developers, bugbounty hunters and ethical hackers performing static code analysis on mobile applications. This tool will look for interesting lines in the code which can contain: Hardcoded credential...

androwarn

Androwarn Yet another static code analyzer for malicious Android applications Description Androwarn is a tool whose main aim is to detect and warn the user about potential malicious behaviours developped by an Android application. The detection is performed with the static analysis of the...

nightcrawler

Nightcrawler An autonomous penetration testing agent that runs entirely on a smartphone. Drop the phone on a network, walk away, and it discovers hosts, maps services, finds vulnerabilities, and generates a pentest report — all without cloud connectivity. root@kitploit: ░█▄░█ █ █▀▀ █░█ ▀█▀ █▀▀ █▀...

Firebase-Extractor

Firebase-Extractor //Mobile OSINT// This tool is written in python2, the purpose of this tool is to parse all the results from Bing search.Basically whenever a firebaseio URL is found for an app , User instead of searching for sensitive data by going manually through the search results can use th...

nextcloud_android

Nextcloud Android app Codacy Badge The Android client forNextcloud. Easily work with your data on your Nextcloud. How to contribute If you want to contribute to Nextcloud, you are very welcome: on our IRC channels and on freenode our forum at https://help.nextcloud.com for translations of the app...

Hippoo-Mobile-App-For-WooCommerce-CVE-Report

Hippoo-Aplicación-Móvil-para-WooCommerce-Informe-CVE Divulgación para CVE-2025-13339 CVE-2025-13339 - Vulnerabilidad en Hippoo Mobile App para WooCommerce Este repositorio divulga una vulnerabilidad descubierta en Hippoo Mobile App for WooCommerce = 1.6.1, plugin de WordPress desarrollado por...

HydraDragonAV-Mobile

🐉 HydraDragonAV Mobile Advanced Android Antivirus With Threat Protection ⚠️ Project on hold. This project did not get enough interest, so I have paused it for a while. Development has moved to HydraDragonAntivirus. Discord Community Server: https://discord.gg/7XMCuj5mbP Logo made by discord user...