awesome-mobile-security
by vaib25vicky
awesome listpushed over 2 years ago
An effort to build a single place for all useful android and iOS security related stuff. All references and tools belong to their respective owners. I'm just maintaining it.
AI summary
Mobile Security Reference
A curated collection of resources and tools for mobile security testing, analysis, and vulnerability assessment
- stars
- 3.1K
- forks
- 345
- watching
- 110
- awesome list
- 1
- entries
- 246
What's in the list
246 links in 14 sections, with live GitHub stats.activeno commit in 2y
Android / General - Blogs, Papers, How To's
Mobile Application Penetration Testing Cheat Sheet
quark-engine - An Obfuscation-Neglect Android Malware Scoring System
How to use FRIDA to bruteforce Secure Startup with FDE-encryption on a Samsung G935F running Android 8Android / Books
Android / Courses
Android / Tools
- Oversecured
A static vulnerability scanner for Android apps (APK files) containing 90+ vulnerability categories
Androwarn – Yet Another Static Code Analyzer
APK Analyzer – Static and Virtual Analysis Tool
APK Inspector – A Powerful GUI Tool
Droid Hunter – Android application vulnerability analysis and Android pentest tool
Error Prone – Static Analysis Tool
Find Security Bugs – A SpotBugs plugin for security audits of Java web applications.
Flow Droid – Static Data Flow Tracker
Smali/Baksmali – Assembler/Disassembler for the dex format
Vector Attack Scanner – To search vulnerable points to attack
Gradle Static Analysis Plugin
Checkstyle – A tool for checking Java source code
PMD – An extensible multilanguage static code analyzer
Soot – A Java Optimization Framework
Android Quality Starter
QARK – Quick Android Review Kit
Infer – A Static Analysis tool for Java, C, C++ and Objective-C
Android Check – Static Code analysis plugin for Android Project
APK Leaks – Scanning APK file for URIs, endpoints & secrets
Adhrit - Android Security Suite for in-depth reconnaissance and static bytecode analysis based on Ghera benchmarks
Android Hooker - Opensource project for dynamic analyses of Android applications
AppAudit - A bare-metal analysis tool on Android devices
CuckooDroid - Extension of Cuckoo Sandbox the Open Source software
Droid-FF - Android File Fuzzing Framework
Marvin - Analyzes Android applications and allows tracking of an app
Inspeckage
PATDroid - Collection of tools and data structures for analyzing Android applications
Radare2 - Unix-like reverse engineering framework and commandline tools
Mobile-Security-Framework MobSF
Runtime Mobile Security (RMS) - is a powerful web interface that helps you to manipulate Android and iOS Apps at RuntimeAndroid / Labs
OVAA (Oversecured Vulnerable Android App)
DIVA (Damn insecure and vulnerable App)
SecurityShepherd
Damn Vulnerable Hybrid Mobile App (DVHMA)
VulnerableAndroidAppOracle
Android InsecureBankv2
Purposefully Insecure and Vulnerable Android Application (PIIVA)
Sieve app
DodoVulnerableBank
Digitalbank
OWASP GoatDroid
AppKnox Vulnerable Application
Vulnerable Android Application
Android Security Labs
Android-security
VulnDroid
VuldroidAndroid / Talks
Android / Misc.
Android-Reports-and-Resources
android-security-awesome
android-device-check - a set of scripts to check Android device security configuration
apk-mitm - a CLI application that prepares Android APK files for HTTPS inspection
Andriller - is software utility with a collection of forensic tools for smartphones
Shodan.io-mobile-app for Android
Popular Android Malware 2018iOS / General - Blogs, Papers, How to's
Collection of the most common vulnerabilities found in iOS applications
Reverse Engineering Swift AppsiOS / Books
iOS / Courses
Reverse Engineering iOS ApplicationsiOS / Tools
- iRET (iOS Reverse Engineering Toolkit)
includes oTool, dumpDecrypted, SQLite, Theos, Keychain_dumper, Plutil
Frida
Objection - mobile exploration toolkit by Frida
Bfinject
Myriam iOS
iLEAPP - iOS Logs, Events, And Preferences Parser
decrypt0r - automatically download and decrypt SecureRom stuff
iOS Security Suite - an advanced and easy-to-use platform security & anti-tampering libraryiOS / Labs
Damn Vulnerable iOS App (DVIA) v2
iOS-Attack-DefenseiOS / Talks
iOS / Misc.
Most usable tools for iOS penetration testing
iOS-Security-GuidesNothing in this list matches your filter.
Featured in 1 awesome list
Each link jumps to the spot where the list mentions awesome-mobile-security.
More related projects
hrishikesh7665/android-pentesting-checklist194
tanprathan/mobileapp-pentest-cheatsheet4.6K
ivan-sincek/android-penetration-testing-cheat-sheet372
stamparm/maltrail6.6K
ajinabraham/mobile-security-framework-mobsf11
androguard/androguard5.3K
as0ler/r2flutch167
nixawk/pentest-wiki3.5K
detekt/detekt6.3K
sundowndev/hacker-roadmap13.5K
chaitin/passionfruit1.7K