{"slug": "mobile", "title": "Mobile", "description": "Root it, jailbreak it, break it. Tools for attacking and defending mobile applications.", "sections": [{"title": "Defensive Security", "groups": [{"title": "Source Code Obfuscation", "tools": [{"name": "DexGuard", "url": "https://www.guardsquare.com/dexguard", "description": "The full spectrum of protection for Android apps.", "_anchor": "dexguard", "_section": "Defensive Security", "_group": "Source Code Obfuscation", "_tabs": ["defensive-security"], "_tab_titles": ["Defensive Security"], "_page": "/tools/dexguard/"}]}]}, {"title": "Jailbreaking & Rooting", "groups": [{"title": "", "tools": [{"name": "canijailbreak", "url": "https://canijailbreak.com/", "description": "A website which tells you whether you can jailbreak your iOS device.", "_anchor": "canijailbreak", "_section": "Jailbreaking & Rooting", "_group": "", "_tabs": ["jailbreaking-rooting"], "_tab_titles": ["Jailbreaking & Rooting"], "_page": "/tools/canijailbreak/"}, {"name": "Checkra1n", "url": "https://checkra.in/", "description": "Jailbreak for iPhone 5s through iPhone X, iOS 12.0 and up.", "_anchor": "checkra1n", "_section": "Jailbreaking & Rooting", "_group": "", "_tabs": ["jailbreaking-rooting"], "_tab_titles": ["Jailbreaking & Rooting"], "_page": "/tools/checkra1n/"}, {"name": "Chimera", "url": "https://chimera.coolstar.org/", "description": "iOS 12 jailbreak to not only feature a CoreTrust bypass so that binaries don't need to be resigned, but to also support A12 devices, including iPhone Xs, iPhone Xr, and the newest iPads.", "_anchor": "chimera", "_section": "Jailbreaking & Rooting", "_group": "", "_tabs": ["jailbreaking-rooting"], "_tab_titles": ["Jailbreaking & Rooting"], "_page": "/tools/chimera/"}, {"name": "Double H3lix", "url": "https://doubleh3lix.tihmstar.net/", "description": "Jailbreak for 64-bit 10.x devices.", "_anchor": "double-h3lix", "_section": "Jailbreaking & Rooting", "_group": "", "_tabs": ["jailbreaking-rooting"], "_tab_titles": ["Jailbreaking & Rooting"], "_page": "/tools/double-h3lix/"}, {"name": "Etason", "url": "https://etasonjb.tihmstar.net/", "description": "Jailbreak for all devices running iOS 8.4.1 32 bit.", "_anchor": "etason", "_section": "Jailbreaking & Rooting", "_group": "", "_tabs": ["jailbreaking-rooting"], "_tab_titles": ["Jailbreaking & Rooting"], "_page": "/tools/etason/"}, {"name": "H3lix", "url": "https://h3lix.tihmstar.net/", "description": "Jailbreak for 32-bit 10.x devices.", "_anchor": "h3lix", "_section": "Jailbreaking & Rooting", "_group": "", "_tabs": ["jailbreaking-rooting"], "_tab_titles": ["Jailbreaking & Rooting"], "_page": "/tools/h3lix/"}, {"name": "Home Depot", "url": "https://wall.supplies/", "description": "Jailbreak for iOS 9.x devices.", "_anchor": "home-depot", "_section": "Jailbreaking & Rooting", "_group": "", "_tabs": ["jailbreaking-rooting"], "_tab_titles": ["Jailbreaking & Rooting"], "_page": "/tools/home-depot/"}, {"name": "IPSW", "url": "https://ipsw.me/", "description": "Download current and previous versions of Apple's iOS, iPadOS, watchOS, tvOS and audioOS firmware and receive notifications when new firmwares are released.", "_anchor": "ipsw", "_section": "Jailbreaking & Rooting", "_group": "", "_tabs": ["jailbreaking-rooting"], "_tab_titles": ["Jailbreaking & Rooting"], "_page": "/tools/ipsw/"}, {"name": "Magisk", "url": "https://github.com/topjohnwu/Magisk", "description": "Magisk is a suite of open source software for customizing Android, supporting devices higher than Android 5.0.", "repo": "topjohnwu/Magisk", "_anchor": "magisk", "_section": "Jailbreaking & Rooting", "_group": "", "_tabs": ["jailbreaking-rooting"], "_tab_titles": ["Jailbreaking & Rooting"], "_page": "/tools/magisk/"}, {"name": "Palra1n", "url": "https://github.com/palera1n/palera1n", "description": "Jailbreak for arm64 devices on iOS 15.0+.", "repo": "palera1n/palera1n", "_anchor": "palra1n", "_section": "Jailbreaking & Rooting", "_group": "", "_tabs": ["jailbreaking-rooting"], "_tab_titles": ["Jailbreaking & Rooting"], "_page": "/tools/palra1n/"}, {"name": "Phoenix", "url": "https://phoenixpwn.com/", "description": "Semi-untethered jailbreak for 9.3.5-9.3.6. All 32-bit devices supported.", "_anchor": "phoenix", "_section": "Jailbreaking & Rooting", "_group": "", "_tabs": ["jailbreaking-rooting"], "_tab_titles": ["Jailbreaking & Rooting"], "_page": "/tools/phoenix/"}, {"name": "p0sixspwn", "url": "https://ih8sn0w.com/p0sixspwn.html", "description": "iOS Jailbreak for 6.1.X.", "_anchor": "p0sixspwn", "_section": "Jailbreaking & Rooting", "_group": "", "_tabs": ["jailbreaking-rooting"], "_tab_titles": ["Jailbreaking & Rooting"], "_page": "/tools/p0sixspwn/"}, {"name": "redsn0w", "url": "https://ipsw.me/iPhoneDev", "description": "Jailbreak for iOS 3-5.", "_anchor": "redsn0w", "_section": "Jailbreaking & Rooting", "_group": "", "_tabs": ["jailbreaking-rooting"], "_tab_titles": ["Jailbreaking & Rooting"], "_page": "/tools/redsn0w/"}, {"name": "unc0ver", "url": "https://unc0ver.dev/", "description": "A jail​break tool.", "_anchor": "unc0ver", "_section": "Jailbreaking & Rooting", "_group": "", "_tabs": ["jailbreaking-rooting"], "_tab_titles": ["Jailbreaking & Rooting"], "_page": "/tools/unc0ver/"}]}]}, {"title": "Offensive Security", "groups": [{"title": "App/File Management", "tools": [{"name": "adb", "url": "https://source.android.com/setup/build/adb", "description": "Allows you to install packages and evaluate your changes.", "_anchor": "adb", "_section": "Offensive Security", "_group": "App/File Management", "_tabs": ["offensive-security"], "_tab_titles": ["Offensive Security"], "_page": "/tools/adb/"}, {"name": "Airdroid", "url": "https://www.airdroid.com/en/pricing/airdroid-personal/", "description": "Transfer files across devices, remote control Android devices, mirror screen, and manage SMS & notification on computer.", "_anchor": "airdroid", "_section": "Offensive Security", "_group": "App/File Management", "_tabs": ["offensive-security"], "_tab_titles": ["Offensive Security"], "_page": "/tools/airdroid/"}, {"name": "Android File Transfer", "url": "https://www.android.com/filetransfer/", "description": "Browse and transfer files between your Mac computer and your Android device.", "_anchor": "android-file-transfer", "_section": "Offensive Security", "_group": "App/File Management", "_tabs": ["offensive-security"], "_tab_titles": ["Offensive Security"], "_page": "/tools/android-file-transfer/"}, {"name": "iExplorer", "url": "https://macroplant.com/iexplorer", "description": "Transfers music, messages, photos, files and everything else.", "_anchor": "iexplorer", "_section": "Offensive Security", "_group": "App/File Management", "_tabs": ["offensive-security"], "_tab_titles": ["Offensive Security"], "_page": "/tools/iexplorer/"}, {"name": "iFunbox", "url": "https://www.i-funbox.com/en/index.html", "description": "General file management software for iPhone and other Apple products.", "_anchor": "ifunbox", "_section": "Offensive Security", "_group": "App/File Management", "_tabs": ["offensive-security"], "_tab_titles": ["Offensive Security"], "_page": "/tools/ifunbox/"}, {"name": "iMazing", "url": "https://imazing.com/", "description": "Powerful user-friendly iOS device manager for Mac and PC.", "_anchor": "imazing", "_section": "Offensive Security", "_group": "App/File Management", "_tabs": ["offensive-security"], "_tab_titles": ["Offensive Security"], "_page": "/tools/imazing/"}]}, {"title": "Bug Bounty Reports", "tools": [{"name": "Android Reports & Reports", "url": "https://github.com/B3nac/Android-Reports-and-Resources", "description": "Android reports and resources.", "repo": "B3nac/Android-Reports-and-Resources", "_anchor": "android-reports-reports", "_section": "Offensive Security", "_group": "Bug Bounty Reports", "_tabs": ["offensive-security"], "_tab_titles": ["Offensive Security"], "_page": "/tools/android-reports-reports/"}]}, {"title": "Dynamic Analysis", "tools": [{"name": "Bytecode Viewer", "url": "https://github.com/konloch/bytecode-viewer", "description": "A lightweight user friendly Java Bytecode Viewer.", "repo": "konloch/bytecode-viewer", "_anchor": "bytecode-viewer", "_section": "Offensive Security", "_group": "Dynamic Analysis", "_tabs": ["offensive-security"], "_tab_titles": ["Offensive Security"], "_page": "/tools/bytecode-viewer/"}, {"name": "CuckooDroid", "url": "https://github.com/idanr1986/cuckoo-droid", "description": "Automated Android Malware Analysis with Cuckoo Sandbox.", "repo": "idanr1986/cuckoo-droid", "_anchor": "cuckoodroid", "_section": "Offensive Security", "_group": "Dynamic Analysis", "_tabs": ["offensive-security"], "_tab_titles": ["Offensive Security"], "_page": "/tools/cuckoodroid/"}, {"name": "DECAF", "url": "https://github.com/decaf-project/DECAF", "description": "DECAF (short for Dynamic Executable Code Analysis Framework) is a binary analysis platform based on QEMU.", "repo": "decaf-project/DECAF", "_anchor": "decaf", "_section": "Offensive Security", "_group": "Dynamic Analysis", "_tabs": ["offensive-security"], "_tab_titles": ["Offensive Security"], "_page": "/tools/decaf/"}, {"name": "Diggy", "url": "https://github.com/s0md3v/Diggy", "description": "Extract endpoints from apk files.", "repo": "s0md3v/Diggy", "_anchor": "diggy", "_section": "Offensive Security", "_group": "Dynamic Analysis", "_tabs": ["offensive-security"], "_tab_titles": ["Offensive Security"], "_page": "/tools/diggy/"}, {"name": "Droid-FF", "url": "https://github.com/antojoseph/droid-ff", "description": "The android fuzzing framework.", "repo": "antojoseph/droid-ff", "_anchor": "droid-ff", "_section": "Offensive Security", "_group": "Dynamic Analysis", "_tabs": ["offensive-security"], "_tab_titles": ["Offensive Security"], "_page": "/tools/droid-ff/"}, {"name": "Drozer", "url": "https://github.com/FSecureLABS/drozer", "description": "Security testing framework for Android.", "repo": "FSecureLABS/drozer", "_anchor": "drozer", "_section": "Offensive Security", "_group": "Dynamic Analysis", "_tabs": ["offensive-security"], "_tab_titles": ["Offensive Security"], "_page": "/tools/drozer/"}, {"name": "Frida", "url": "https://github.com/frida/frida", "description": "Dynamic instrumentation toolkit for developers, reverse-engineers, and security researchers.", "repo": "frida/frida", "_anchor": "frida", "_section": "Offensive Security", "_group": "Dynamic Analysis", "_tabs": ["offensive-security"], "_tab_titles": ["Offensive Security"], "_page": "/tools/frida/"}, {"name": "Hooker", "url": "https://github.com/AndroidHooker/hooker", "description": "Provides various tools and applications that can be use to automatically intercept and modify any API calls.", "repo": "AndroidHooker/hooker", "_anchor": "hooker", "_section": "Offensive Security", "_group": "Dynamic Analysis", "_tabs": ["offensive-security"], "_tab_titles": ["Offensive Security"], "_page": "/tools/hooker/"}, {"name": "House", "url": "https://github.com/nccgroup/house", "description": "A runtime mobile application analysis toolkit with a Web GUI, powered by Frida, written in Python.", "repo": "nccgroup/house", "_anchor": "house", "_section": "Offensive Security", "_group": "Dynamic Analysis", "_tabs": ["offensive-security"], "_tab_titles": ["Offensive Security"], "_page": "/tools/house/"}, {"name": "Inspeckage", "url": "https://github.com/ac-pm/Inspeckage", "description": "Tool developed to offer dynamic analysis of Android applications.", "repo": "ac-pm/Inspeckage", "_anchor": "inspeckage", "_section": "Offensive Security", "_group": "Dynamic Analysis", "_tabs": ["offensive-security"], "_tab_titles": ["Offensive Security"], "_page": "/tools/inspeckage/"}, {"name": "MobSF", "url": "https://github.com/MobSF/Mobile-Security-Framework-MobSF", "description": "An automated, all-in-one mobile application (Android/iOS/Windows) pen-testing, malware analysis and security assessment framework.", "repo": "MobSF/Mobile-Security-Framework-MobSF", "_anchor": "mobsf", "_section": "Offensive Security", "_group": "Dynamic Analysis", "_tabs": ["offensive-security"], "_tab_titles": ["Offensive Security"], "_page": "/tools/mobsf/"}, {"name": "PATDroid", "url": "https://github.com/mingyuan-xia/PATDroid", "description": "A collection of tools and data structures for analyzing Android applications and the system itself.", "repo": "mingyuan-xia/PATDroid", "_anchor": "patdroid", "_section": "Offensive Security", "_group": "Dynamic Analysis", "_tabs": ["offensive-security"], "_tab_titles": ["Offensive Security"], "_page": "/tools/patdroid/"}, {"name": "ProbeDroid", "url": "https://github.com/ZSShen/ProbeDroid", "description": "A dynamic Java code instrumentation for Android apps. Provides APIs for users to craft their own instrumentation tools.", "repo": "ZSShen/ProbeDroid", "_anchor": "probedroid", "_section": "Offensive Security", "_group": "Dynamic Analysis", "_tabs": ["offensive-security"], "_tab_titles": ["Offensive Security"], "_page": "/tools/probedroid/"}, {"name": "Runtime Mobile Security (RMS)", "url": "https://github.com/m0bilesecurity/RMS-Runtime-Mobile-Security", "description": "Powered by FRIDA a powerful web interface that helps you to manipulate Android and iOS Apps at Runtime.", "repo": "m0bilesecurity/RMS-Runtime-Mobile-Security", "_anchor": "runtime-mobile-security-rms", "_section": "Offensive Security", "_group": "Dynamic Analysis", "_tabs": ["offensive-security"], "_tab_titles": ["Offensive Security"], "_page": "/tools/runtime-mobile-security-rms/"}]}, {"title": "Flashing/Sideloading", "tools": [{"name": "Cydia Impactor", "url": "https://www.cydiaimpactor.com/", "description": "Use this tool to install IPA files on iOS and APK files on Android.", "_anchor": "cydia-impactor", "_section": "Offensive Security", "_group": "Flashing/Sideloading", "_tabs": ["offensive-security"], "_tab_titles": ["Offensive Security"], "_page": "/tools/cydia-impactor/"}, {"name": "Odin", "url": "https://odindownload.com/", "description": "Used to flash a custom recovery firmware image to a Samsung Android device.", "_anchor": "odin", "_section": "Offensive Security", "_group": "Flashing/Sideloading", "_tabs": ["offensive-security"], "_tab_titles": ["Offensive Security"], "_page": "/tools/odin/"}]}, {"title": "Guides & References", "tools": [{"name": "Android Application Penetration Testing Checklist", "url": "https://www.xmind.net/m/GkgaYH/#", "description": "Android pentesting checklist mindmap.", "_anchor": "android-application-penetration-testing-checklist", "_section": "Offensive Security", "_group": "Guides & References", "_tabs": ["offensive-security"], "_tab_titles": ["Offensive Security"], "_page": "/tools/android-application-penetration-testing-checklist/"}, {"name": "iOS Pentesting", "url": "https://www.mindmeister.com/1713501700/ios-pentesting?fullscreen=1", "description": "iOS pentesting mindmap.", "_anchor": "ios-pentesting", "_section": "Offensive Security", "_group": "Guides & References", "_tabs": ["offensive-security"], "_tab_titles": ["Offensive Security"], "_page": "/tools/ios-pentesting/"}]}, {"title": "Labs/Practice", "tools": [{"name": "DIVA", "url": "https://www.decompileandroid.com/", "description": "DIVA (Damn insecure and vulnerable App) is an Android App intentionally designed to be insecure.", "_anchor": "diva", "_section": "Offensive Security", "_group": "Labs/Practice", "_tabs": ["offensive-security"], "_tab_titles": ["Offensive Security"], "_page": "/tools/android-apk-decompiler/"}, {"name": "DVHMA", "url": "https://github.com/logicalhacking/DVHMA", "description": "Damn Vulnerable Hybrid Mobile App (DVHMA) is a hybrid mobile app (for Android) that intentionally contains vulnerabilities.", "repo": "logicalhacking/DVHMA", "_anchor": "dvhma", "_section": "Offensive Security", "_group": "Labs/Practice", "_tabs": ["offensive-security"], "_tab_titles": ["Offensive Security"], "_page": "/tools/dvhma/"}, {"name": "Injured Android", "url": "https://github.com/B3nac/InjuredAndroid", "description": "A vulnerable Android application that shows simple examples of vulnerabilities in a ctf style.", "repo": "B3nac/InjuredAndroid", "_anchor": "injured-android", "_section": "Offensive Security", "_group": "Labs/Practice", "_tabs": ["offensive-security"], "_tab_titles": ["Offensive Security"], "_page": "/tools/injured-android/"}, {"name": "InsecureBank v2", "url": "https://github.com/dineshshetty/Android-InsecureBankv2", "description": "Vulnerable Android application for developers and security enthusiasts to learn about Android insecurities.", "repo": "dineshshetty/Android-InsecureBankv2", "_anchor": "insecurebank-v2", "_section": "Offensive Security", "_group": "Labs/Practice", "_tabs": ["offensive-security"], "_tab_titles": ["Offensive Security"], "_page": "/tools/insecurebank-v2/"}, {"name": "Oversecured Vulnerable Android App", "url": "https://github.com/oversecured/ovaa", "description": "An Android app that aggregates all the platform's known and popular security vulnerabilities.", "repo": "oversecured/ovaa", "_anchor": "oversecured-vulnerable-android-app", "_section": "Offensive Security", "_group": "Labs/Practice", "_tabs": ["offensive-security"], "_tab_titles": ["Offensive Security"], "_page": "/tools/oversecured-vulnerable-android-app/"}, {"name": "UnCrackable Apps", "url": "https://github.com/OWASP/owasp-mstg", "description": "A collection of mobile reverse engineering challenges for iOS and Android.", "repo": "OWASP/owasp-mstg", "_anchor": "uncrackable-apps", "_section": "Offensive Security", "_group": "Labs/Practice", "_tabs": ["offensive-security"], "_tab_titles": ["Offensive Security"], "_page": "/tools/uncrackable-apps/"}, {"name": "Vuldroid", "url": "https://github.com/jaiswalakshansh/Vuldroid", "description": "Vuldroid is a Vulnerable Android Application made with security issues in order to demonstrate how they can occur in code.", "repo": "jaiswalakshansh/Vuldroid", "_anchor": "vuldroid", "_section": "Offensive Security", "_group": "Labs/Practice", "_tabs": ["offensive-security"], "_tab_titles": ["Offensive Security"], "_page": "/tools/vuldroid/"}, {"name": "VyAPI", "url": "https://github.com/appsecco/VyAPI", "description": "The Modern Cloud-Based Vulnerable Hybrid Android App.", "repo": "appsecco/VyAPI", "_anchor": "vyapi", "_section": "Offensive Security", "_group": "Labs/Practice", "_tabs": ["offensive-security"], "_tab_titles": ["Offensive Security"], "_page": "/tools/vyapi/"}, {"name": "WaTF-Bank", "url": "https://github.com/WaTF-Team/WaTF-Bank", "description": "What a Terrible Failure Mobile Banking Application for Android and iOS.", "repo": "WaTF-Team/WaTF-Bank", "_anchor": "watf-bank", "_section": "Offensive Security", "_group": "Labs/Practice", "_tabs": ["offensive-security"], "_tab_titles": ["Offensive Security"], "_page": "/tools/watf-bank/"}]}, {"title": "Online Services", "tools": [{"name": "Android APK Decompiler", "url": "https://www.decompileandroid.com/", "description": "Online android decompiler.", "_anchor": "android-apk-decompiler", "_section": "Offensive Security", "_group": "Online Services", "_tabs": ["offensive-security"], "_tab_titles": ["Offensive Security"], "_page": "/tools/android-apk-decompiler/"}, {"name": "Ostorlab", "url": "https://ostorlab.co/", "description": "Online static taint analysis, 3rd party fingerprinting, and vulnerability analysis.", "_anchor": "ostorlab", "_section": "Offensive Security", "_group": "Online Services", "_tabs": ["offensive-security"], "_tab_titles": ["Offensive Security"], "_page": "/tools/ostorlab/"}, {"name": "Oversecured", "url": "https://oversecured.com/", "description": "Android mobile app analyzer vulnerability scanner, designed for DevOps process integration.", "_anchor": "oversecured", "_section": "Offensive Security", "_group": "Online Services", "_tabs": ["offensive-security"], "_tab_titles": ["Offensive Security"], "_page": "/tools/oversecured/"}, {"name": "Quixxi", "url": "https://quixxisecurity.com/", "description": "An intelligent and integrated end-to-end mobile app security solution.", "_anchor": "quixxi", "_section": "Offensive Security", "_group": "Online Services", "_tabs": ["offensive-security"], "_tab_titles": ["Offensive Security"], "_page": "/tools/quixxi/"}]}, {"title": "Post Exploitation (Android)", "tools": [{"name": "dmesg", "url": "https://github.com/DreamDevLost/classdumpios", "description": "Prints Android kernel messages. Already installed on device.", "repo": "DreamDevLost/classdumpios", "_anchor": "dmesg", "_section": "Offensive Security", "_group": "Post Exploitation (Android)", "_tabs": ["offensive-security"], "_tab_titles": ["Offensive Security"], "_page": "/tools/classdumpios/"}, {"name": "Dumpsys", "url": "https://developer.android.com/studio/command-line/dumpsys", "description": "a tool that runs on Android devices and provides information about system services. Already installed on device.", "_anchor": "dumpsys", "_section": "Offensive Security", "_group": "Post Exploitation (Android)", "_tabs": ["offensive-security"], "_tab_titles": ["Offensive Security"], "_page": "/tools/dumpsys/"}, {"name": "EggShell", "url": "https://github.com/neoneggplant/EggShell", "description": "iOS/macOS/Linux Remote Administration Tool.", "repo": "neoneggplant/EggShell", "_anchor": "eggshell", "_section": "Offensive Security", "_group": "Post Exploitation (Android)", "_tabs": ["offensive-security"], "_tab_titles": ["Offensive Security"], "_page": "/tools/eggshell/"}, {"name": "jarsigner", "url": "https://github.com/Jamling/jarsigner", "description": "Jar, Android apk, Eclipse RCP signer.", "repo": "Jamling/jarsigner", "_anchor": "jarsigner", "_section": "Offensive Security", "_group": "Post Exploitation (Android)", "_tabs": ["offensive-security"], "_tab_titles": ["Offensive Security"], "_page": "/tools/jarsigner/"}, {"name": "keystore-explorer", "url": "https://github.com/kaikramer/keystore-explorer", "description": "GUI replacement for the Java command-line utilities keytool and jarsigner.", "repo": "kaikramer/keystore-explorer", "_anchor": "keystore-explorer", "_section": "Offensive Security", "_group": "Post Exploitation (Android)", "_tabs": ["offensive-security"], "_tab_titles": ["Offensive Security"], "_page": "/tools/keystore-explorer/"}, {"name": "Plistsubtractor", "url": "https://github.com/joswr1ght/plistsubtractor", "description": "Read a plist file, write out any embedded plist files.", "repo": "joswr1ght/plistsubtractor", "_anchor": "plistsubtractor", "_section": "Offensive Security", "_group": "Post Exploitation (Android)", "_tabs": ["offensive-security"], "_tab_titles": ["Offensive Security"], "_page": "/tools/plistsubtractor/"}, {"name": "ProxyDroid", "url": "https://github.com/madeye/proxydroid", "description": "Global Proxy for Android.", "repo": "madeye/proxydroid", "_anchor": "proxydroid", "_section": "Offensive Security", "_group": "Post Exploitation (Android)", "_tabs": ["offensive-security"], "_tab_titles": ["Offensive Security"], "_page": "/tools/proxydroid/"}, {"name": "Simplify", "url": "https://github.com/CalebFenton/simplify", "description": "Android virtual machine and deobfuscator.", "repo": "CalebFenton/simplify", "_anchor": "simplify", "_section": "Offensive Security", "_group": "Post Exploitation (Android)", "_tabs": ["offensive-security"], "_tab_titles": ["Offensive Security"], "_page": "/tools/simplify/"}]}, {"title": "Post Exploitation (iOS)", "tools": [{"name": "BinaryCookieReader", "url": "https://github.com/as0ler/BinaryCookieReader", "description": "A tool to read the binarycookie format of Cookies on iOS applications.", "repo": "as0ler/BinaryCookieReader", "_anchor": "binarycookiereader", "_section": "Offensive Security", "_group": "Post Exploitation (iOS)", "_tabs": ["offensive-security"], "_tab_titles": ["Offensive Security"], "_page": "/tools/binarycookiereader/"}, {"name": "ClassDumpiOS", "url": "https://github.com/DreamDevLost/classdumpios", "description": "iOS port from nygard/class-dump.", "repo": "DreamDevLost/classdumpios", "_anchor": "classdumpios", "_section": "Offensive Security", "_group": "Post Exploitation (iOS)", "_tabs": ["offensive-security"], "_tab_titles": ["Offensive Security"], "_page": "/tools/classdumpios/"}, {"name": "Cycript", "url": "https://www.cycript.org/", "description": "Explore and modify running applications on either iOS or Mac OS X using a hybrid of Objective-C++ and JavaScript.", "repo": "as0ler/BinaryCookieReader", "_anchor": "cycript", "_section": "Offensive Security", "_group": "Post Exploitation (iOS)", "_tabs": ["offensive-security"], "_tab_titles": ["Offensive Security"], "_page": "/tools/binarycookiereader/"}, {"name": "DumpDecrypted", "url": "https://github.com/stefanesser/dumpdecrypted", "description": "Dumps decrypted mach-o files from encrypted iPhone applications from memory to disk.", "repo": "stefanesser/dumpdecrypted", "_anchor": "dumpdecrypted", "_section": "Offensive Security", "_group": "Post Exploitation (iOS)", "_tabs": ["offensive-security"], "_tab_titles": ["Offensive Security"], "_page": "/tools/dumpdecrypted/"}, {"name": "KTool", "url": "https://github.com/KritantaDev/ktool", "description": "Cross-platform MachO/ObjC Static binary analysis tool & library. class-dump + otool + lipo + more.", "repo": "KritantaDev/ktool", "_anchor": "ktool", "_section": "Offensive Security", "_group": "Post Exploitation (iOS)", "_tabs": ["offensive-security"], "_tab_titles": ["Offensive Security"], "_page": "/tools/ktool/"}, {"name": "MobileAssistant", "url": "https://portswigger.net/burp/documentation/desktop/tools/mobile-assistant/installing", "description": "A tool to facilitate testing of iOS apps with Burp Suite.", "_anchor": "mobileassistant", "_section": "Offensive Security", "_group": "Post Exploitation (iOS)", "_tabs": ["offensive-security"], "_tab_titles": ["Offensive Security"], "_page": "/tools/mobileassistant/"}, {"name": "Needle", "url": "https://github.com/FSecureLABS/needle", "description": "The iOS Security Testing Framework.", "repo": "FSecureLABS/needle", "_anchor": "needle", "_section": "Offensive Security", "_group": "Post Exploitation (iOS)", "_tabs": ["offensive-security"], "_tab_titles": ["Offensive Security"], "_page": "/tools/needle/"}, {"name": "Objection", "url": "https://github.com/atomicobject/objection/", "description": "A lightweight dependency injection framework for Objective-C.", "repo": "atomicobject/objection", "_anchor": "objection", "_section": "Offensive Security", "_group": "Post Exploitation (iOS)", "_tabs": ["offensive-security"], "_tab_titles": ["Offensive Security"], "_page": "/tools/objection/"}, {"name": "RVICTL", "url": "https://github.com/gh2o/rvi_capture", "description": "Capture packets sent/received by iOS devices.", "repo": "gh2o/rvi_capture", "_anchor": "rvictl", "_section": "Offensive Security", "_group": "Post Exploitation (iOS)", "_tabs": ["offensive-security"], "_tab_titles": ["Offensive Security"], "_page": "/tools/rvictl/"}, {"name": "Sileo", "url": "https://getsileo.app/", "description": "A fast, beautiful, powerful and efficient APT Package Manager designed for jailbroken device.", "_anchor": "sileo", "_section": "Offensive Security", "_group": "Post Exploitation (iOS)", "_tabs": ["offensive-security"], "_tab_titles": ["Offensive Security"], "_page": "/tools/sileo/"}, {"name": "SSLKillSwitch", "url": "https://github.com/iSECPartners/ios-ssl-kill-switch", "description": "Blackbox tool to disable SSL certificate validation.", "repo": "iSECPartners/ios-ssl-kill-switch", "_anchor": "sslkillswitch", "_section": "Offensive Security", "_group": "Post Exploitation (iOS)", "_tabs": ["offensive-security"], "_tab_titles": ["Offensive Security"], "_page": "/tools/sslkillswitch/"}, {"name": "SSLKillSwitch2", "url": "https://github.com/nabla-c0d3/ssl-kill-switch2", "description": "Blackbox tool to disable SSL certificate validation.", "repo": "nabla-c0d3/ssl-kill-switch2", "_anchor": "sslkillswitch2", "_section": "Offensive Security", "_group": "Post Exploitation (iOS)", "_tabs": ["offensive-security"], "_tab_titles": ["Offensive Security"], "_page": "/tools/sslkillswitch2/"}]}, {"title": "Reverse Engineering", "tools": [{"name": "bfdecrypt", "url": "https://github.com/BishopFox/bfdecrypt", "description": "Utility to decrypt App Store apps on jailbroken iOS 11.x.", "repo": "BishopFox/bfdecrypt", "_anchor": "bfdecrypt", "_section": "Offensive Security", "_group": "Reverse Engineering", "_tabs": ["offensive-security"], "_tab_titles": ["Offensive Security"], "_page": "/tools/bfdecrypt/"}, {"name": "Clutch", "url": "https://github.com/KJCracks/Clutch", "description": "Fast iOS executable dumper.", "repo": "KJCracks/Clutch", "_anchor": "clutch", "_section": "Offensive Security", "_group": "Reverse Engineering", "_tabs": ["offensive-security"], "_tab_titles": ["Offensive Security"], "_page": "/tools/clutch/"}, {"name": "flexdecrypt", "url": "https://github.com/JohnCoates/flexdecrypt", "description": "Decrypt iOS Apps and Mach-O binaries.", "repo": "JohnCoates/flexdecrypt", "_anchor": "flexdecrypt", "_section": "Offensive Security", "_group": "Reverse Engineering", "_tabs": ["offensive-security"], "_tab_titles": ["Offensive Security"], "_page": "/tools/flexdecrypt/"}, {"name": "FoulDecrypt", "url": "https://github.com/NyaMisty/fouldecrypt", "description": "A lightweight and simpling iOS binary decryptor.", "repo": "NyaMisty/fouldecrypt", "_anchor": "fouldecrypt", "_section": "Offensive Security", "_group": "Reverse Engineering", "_tabs": ["offensive-security"], "_tab_titles": ["Offensive Security"], "_page": "/tools/fouldecrypt/"}, {"name": "r2flutch", "url": "https://github.com/as0ler/r2flutch", "description": "Tool to decrypt iOS apps using r2frida.", "repo": "as0ler/r2flutch", "_anchor": "r2flutch", "_section": "Offensive Security", "_group": "Reverse Engineering", "_tabs": ["offensive-security"], "_tab_titles": ["Offensive Security"], "_page": "/tools/r2flutch/"}]}, {"title": "Static Analysis", "tools": [{"name": "Android Check", "url": "https://github.com/noveogroup/android-check", "description": "Static code analysis plugin for Android project.", "repo": "noveogroup/android-check", "_anchor": "android-check", "_section": "Offensive Security", "_group": "Static Analysis", "_tabs": ["offensive-security"], "_tab_titles": ["Offensive Security"], "_page": "/tools/android-check/"}, {"name": "Androwarn", "url": "https://github.com/maaaaz/androwarn", "description": "Static code analyzer for malicious Android applications.", "repo": "maaaaz/androwarn", "_anchor": "androwarn", "_section": "Offensive Security", "_group": "Static Analysis", "_tabs": ["offensive-security"], "_tab_titles": ["Offensive Security"], "_page": "/tools/androwarn/"}, {"name": "APKLab", "url": "https://github.com/APKLab/APKLab", "description": "A tool for reverse engineering 3rd party, closed, binary Android apps.", "repo": "APKLab/APKLab", "_anchor": "apklab", "_section": "Offensive Security", "_group": "Static Analysis", "_tabs": ["offensive-security"], "_tab_titles": ["Offensive Security"], "_page": "/tools/apklab/"}, {"name": "APKLeaks", "url": "https://github.com/dwisiswant0/apkleaks", "description": "Scanning APK file for URIs, endpoints & secrets.", "repo": "dwisiswant0/apkleaks", "_anchor": "apkleaks", "_section": "Offensive Security", "_group": "Static Analysis", "_tabs": ["offensive-security"], "_tab_titles": ["Offensive Security"], "_page": "/tools/apkleaks/"}, {"name": "APK Studio", "url": "https://github.com/vaibhavpandeyvpz/apkstudio", "description": "The objective of this scanner is to find for misconfiguration, sensitive data and insecure components.", "repo": "vaibhavpandeyvpz/apkstudio", "_anchor": "apk-studio", "_section": "Offensive Security", "_group": "Static Analysis", "_tabs": ["offensive-security"], "_tab_titles": ["Offensive Security"], "_page": "/tools/apk-studio/"}, {"name": "APKTool", "url": "https://ibotpeaches.github.io/Apktool/", "description": "Seamlessly integrates the best open-source tools right inside VS Code.", "_anchor": "apktool", "_section": "Offensive Security", "_group": "Static Analysis", "_tabs": ["offensive-security"], "_tab_titles": ["Offensive Security"], "_page": "/tools/apktool/"}, {"name": "Argus-SAF", "url": "https://github.com/arguslab/Argus-SAF", "description": "Static analysis framework.", "repo": "arguslab/Argus-SAF", "_anchor": "argus-saf", "_section": "Offensive Security", "_group": "Static Analysis", "_tabs": ["offensive-security"], "_tab_titles": ["Offensive Security"], "_page": "/tools/argus-saf/"}, {"name": "Checkstyle", "url": "https://github.com/checkstyle/checkstyle", "description": "A tool for checking Java source code for adherence to a Code Standard or set of validation rules.", "repo": "checkstyle/checkstyle", "_anchor": "checkstyle", "_section": "Offensive Security", "_group": "Static Analysis", "_tabs": ["offensive-security"], "_tab_titles": ["Offensive Security"], "_page": "/tools/checkstyle/"}, {"name": "Deoptfuscator", "url": "https://github.com/Gyoonus/deoptfuscator", "description": "Reverse the control-flow obfuscation performed by DexGuard on open-source Android applications.", "repo": "Gyoonus/deoptfuscator", "_anchor": "deoptfuscator", "_section": "Offensive Security", "_group": "Static Analysis", "_tabs": ["offensive-security"], "_tab_titles": ["Offensive Security"], "_page": "/tools/deoptfuscator/"}, {"name": "Droid-Hunter", "url": "https://github.com/hahwul/droid-hunter", "description": "Android application vulnerability analysis and Android pentest tool.", "repo": "hahwul/droid-hunter", "_anchor": "droid-hunter", "_section": "Offensive Security", "_group": "Static Analysis", "_tabs": ["offensive-security"], "_tab_titles": ["Offensive Security"], "_page": "/tools/droid-hunter/"}, {"name": "Error Prone", "url": "https://github.com/google/error-prone", "description": "Error Prone is a static analysis tool for Java that catches common programming mistakes at compile-time.", "repo": "google/error-prone", "_anchor": "error-prone", "_section": "Offensive Security", "_group": "Static Analysis", "_tabs": ["offensive-security"], "_tab_titles": ["Offensive Security"], "_page": "/tools/error-prone/"}, {"name": "FindBugs", "url": "https://findbugs.sourceforge.net/downloads.html", "description": "Uses static analysis to inspect Java bytecode for occurrences of bug patterns.", "_anchor": "findbugs", "_section": "Offensive Security", "_group": "Static Analysis", "_tabs": ["offensive-security"], "_tab_titles": ["Offensive Security"], "_page": "/tools/findbugs/"}, {"name": "Find Security Bugs", "url": "https://github.com/find-sec-bugs/find-sec-bugs", "description": "Find Security Bugs is the SpotBugs plugin for security audits of Java web applications.", "repo": "find-sec-bugs/find-sec-bugs", "_anchor": "find-security-bugs", "_section": "Offensive Security", "_group": "Static Analysis", "_tabs": ["offensive-security"], "_tab_titles": ["Offensive Security"], "_page": "/tools/find-security-bugs/"}, {"name": "FlowDroid", "url": "https://github.com/secure-software-engineering/FlowDroid", "description": "Statically computes data flows in Android apps and Java programs.", "repo": "secure-software-engineering/FlowDroid", "_anchor": "flowdroid", "_section": "Offensive Security", "_group": "Static Analysis", "_tabs": ["offensive-security"], "_tab_titles": ["Offensive Security"], "_page": "/tools/flowdroid/"}, {"name": "Gradle", "url": "https://github.com/novoda/gradle-static-analysis-plugin", "description": "Supports many popular static analysis (Checkstyle, PMD, FindBugs, etc) via a set of built-in plugins.", "repo": "novoda/gradle-static-analysis-plugin", "_anchor": "gradle", "_section": "Offensive Security", "_group": "Static Analysis", "_tabs": ["offensive-security"], "_tab_titles": ["Offensive Security"], "_page": "/tools/gradle/"}, {"name": "Infer", "url": "https://github.com/facebook/infer", "description": "Infer is a static analysis tool for Java, C++, Objective-C, and C. Infer is written in OCaml.", "repo": "facebook/infer", "_anchor": "infer", "_section": "Offensive Security", "_group": "Static Analysis", "_tabs": ["offensive-security"], "_tab_titles": ["Offensive Security"], "_page": "/tools/infer/"}, {"name": "JADX", "url": "https://github.com/skylot/jadx", "description": "Dex to Java decompiler.", "repo": "skylot/jadx", "_anchor": "jadx", "_section": "Offensive Security", "_group": "Static Analysis", "_tabs": ["offensive-security"], "_tab_titles": ["Offensive Security"], "_page": "/tools/jadx/"}, {"name": "Mobile Audit", "url": "https://github.com/mpast/mobileAudit", "description": "SAST and Malware Analysis for Android Mobile APKs.", "repo": "mpast/mobileAudit", "_anchor": "mobile-audit", "_section": "Offensive Security", "_group": "Static Analysis", "_tabs": ["offensive-security"], "_tab_titles": ["Offensive Security"], "_page": "/tools/mobile-audit/"}, {"name": "PMD", "url": "https://github.com/pmd/pmd", "description": "Finds common programming flaws like unused variables, empty catch blocks, unnecessary object creation, and so forth.", "repo": "pmd/pmd", "_anchor": "pmd", "_section": "Offensive Security", "_group": "Static Analysis", "_tabs": ["offensive-security"], "_tab_titles": ["Offensive Security"], "_page": "/tools/pmd/"}, {"name": "Qark", "url": "https://github.com/linkedin/qark", "description": "designed to look for several security related Android application vulnerabilities, either in source code or packaged APKs.", "repo": "linkedin/qark", "_anchor": "qark", "_section": "Offensive Security", "_group": "Static Analysis", "_tabs": ["offensive-security"], "_tab_titles": ["Offensive Security"], "_page": "/tools/qark/"}, {"name": "Quark", "url": "https://github.com/quark-engine/quark-engine", "description": "An Obfuscation-Neglect Android Malware Scoring System.", "repo": "quark-engine/quark-engine", "_anchor": "quark", "_section": "Offensive Security", "_group": "Static Analysis", "_tabs": ["offensive-security"], "_tab_titles": ["Offensive Security"], "_page": "/tools/quark/"}, {"name": "Smali", "url": "https://github.com/JesusFreke/smali", "description": "An assembler/disassembler for the dex format used by dalvik, Android's Java VM implementation.", "repo": "JesusFreke/smali", "_anchor": "smali", "_section": "Offensive Security", "_group": "Static Analysis", "_tabs": ["offensive-security"], "_tab_titles": ["Offensive Security"], "_page": "/tools/smali/"}, {"name": "Soot", "url": "https://github.com/soot-oss/soot", "description": "Smali Control Flow Graph's.", "repo": "soot-oss/soot", "_anchor": "soot", "_section": "Offensive Security", "_group": "Static Analysis", "_tabs": ["offensive-security"], "_tab_titles": ["Offensive Security"], "_page": "/tools/soot/"}, {"name": "Sparta", "url": "https://github.com/typetools/sparta", "description": "Static program analysis for reliable trusted apps.", "repo": "typetools/sparta", "_anchor": "sparta", "_section": "Offensive Security", "_group": "Static Analysis", "_tabs": ["offensive-security"], "_tab_titles": ["Offensive Security"], "_page": "/tools/sparta/"}, {"name": "StaCoAn", "url": "https://github.com/vincentcox/StaCoAn", "description": "A crossplatform tool which aids developers, bugbounty hunters and ethical hackers performing static code analysis on mobile applications.", "repo": "vincentcox/StaCoAn", "_anchor": "stacoan", "_section": "Offensive Security", "_group": "Static Analysis", "_tabs": ["offensive-security"], "_tab_titles": ["Offensive Security"], "_page": "/tools/stacoan/"}, {"name": "Trueseeing", "url": "https://github.com/monolithworks/trueseeing", "description": "A fast, accurate and resilient vulnerability scanner for Android apps.", "repo": "monolithworks/trueseeing", "_anchor": "trueseeing", "_section": "Offensive Security", "_group": "Static Analysis", "_tabs": ["offensive-security"], "_tab_titles": ["Offensive Security"], "_page": "/tools/trueseeing/"}, {"name": "Yaazhini", "url": "https://www.vegabird.com/yaazhini/", "description": "Vulnerability scanner for Android APKs and their APIs.", "_anchor": "yaazhini", "_section": "Offensive Security", "_group": "Static Analysis", "_tabs": ["offensive-security"], "_tab_titles": ["Offensive Security"], "_page": "/tools/yaazhini/"}]}, {"title": "Video Content", "tools": [{"name": "B3nac Sec", "url": "https://www.youtube.com/c/B3nacSec/featured", "description": "Dedicated mobile ethical hacking.", "_anchor": "b3nac-sec", "_section": "Offensive Security", "_group": "Video Content", "_tabs": ["offensive-security"], "_tab_titles": ["Offensive Security"], "_page": "/tools/b3nac-sec/"}]}, {"title": "Virtualization", "tools": [{"name": "AppUse", "url": "https://appsec-labs.com/appuse/", "description": "Mobile app security testing, Android and iOS applications. Custom-made tools and scripts created by AppSec Labs.", "_anchor": "appuse", "_section": "Offensive Security", "_group": "Virtualization", "_tabs": ["offensive-security"], "_tab_titles": ["Offensive Security"], "_page": "/tools/appuse/"}]}]}], "tools": [{"name": "adb", "url": "https://source.android.com/setup/build/adb", "description": "Allows you to install packages and evaluate your changes.", "category": "mobile", "section": "Offensive Security", "group": "App/File Management", "repo": null, "links": [], "tags": [], "path": "/tools/adb/", "listing": "/mobile/#adb"}, {"name": "Airdroid", "url": "https://www.airdroid.com/en/pricing/airdroid-personal/", "description": "Transfer files across devices, remote control Android devices, mirror screen, and manage SMS & notification on computer.", "category": "mobile", "section": "Offensive Security", "group": "App/File Management", "repo": null, "links": [], "tags": [], "path": "/tools/airdroid/", "listing": "/mobile/#airdroid"}, {"name": "Android APK Decompiler", "url": "https://www.decompileandroid.com/", "description": "Online android decompiler.", "category": "mobile", "section": "Offensive Security", "group": "Online Services", "repo": null, "links": [], "tags": [], "path": "/tools/android-apk-decompiler/", "listing": "/mobile/#android-apk-decompiler"}, {"name": "Android Application Penetration Testing Checklist", "url": "https://www.xmind.net/m/GkgaYH/#", "description": "Android pentesting checklist mindmap.", "category": "mobile", "section": "Offensive Security", "group": "Guides & References", "repo": null, "links": [], "tags": [], "path": "/tools/android-application-penetration-testing-checklist/", "listing": "/mobile/#android-application-penetration-testing-checklist"}, {"name": "Android Check", "url": "https://github.com/noveogroup/android-check", "description": "Static code analysis plugin for Android project.", "category": "mobile", "section": "Offensive Security", "group": "Static Analysis", "repo": "noveogroup/android-check", "links": [], "tags": [], "path": "/tools/android-check/", "listing": "/mobile/#android-check"}, {"name": "Android File Transfer", "url": "https://www.android.com/filetransfer/", "description": "Browse and transfer files between your Mac computer and your Android device.", "category": "mobile", "section": "Offensive Security", "group": "App/File Management", "repo": null, "links": [], "tags": [], "path": "/tools/android-file-transfer/", "listing": "/mobile/#android-file-transfer"}, {"name": "Android Reports & Reports", "url": "https://github.com/B3nac/Android-Reports-and-Resources", "description": "Android reports and resources.", "category": "mobile", "section": "Offensive Security", "group": "Bug Bounty Reports", "repo": "B3nac/Android-Reports-and-Resources", "links": [], "tags": [], "path": "/tools/android-reports-reports/", "listing": "/mobile/#android-reports-reports"}, {"name": "Androwarn", "url": "https://github.com/maaaaz/androwarn", "description": "Static code analyzer for malicious Android applications.", "category": "mobile", "section": "Offensive Security", "group": "Static Analysis", "repo": "maaaaz/androwarn", "links": [], "tags": [], "path": "/tools/androwarn/", "listing": "/mobile/#androwarn"}, {"name": "APK Studio", "url": "https://github.com/vaibhavpandeyvpz/apkstudio", "description": "The objective of this scanner is to find for misconfiguration, sensitive data and insecure components.", "category": "mobile", "section": "Offensive Security", "group": "Static Analysis", "repo": "vaibhavpandeyvpz/apkstudio", "links": [], "tags": [], "path": "/tools/apk-studio/", "listing": "/mobile/#apk-studio"}, {"name": "APKLab", "url": "https://github.com/APKLab/APKLab", "description": "A tool for reverse engineering 3rd party, closed, binary Android apps.", "category": "mobile", "section": "Offensive Security", "group": "Static Analysis", "repo": "APKLab/APKLab", "links": [], "tags": [], "path": "/tools/apklab/", "listing": "/mobile/#apklab"}, {"name": "APKLeaks", "url": "https://github.com/dwisiswant0/apkleaks", "description": "Scanning APK file for URIs, endpoints & secrets.", "category": "mobile", "section": "Offensive Security", "group": "Static Analysis", "repo": "dwisiswant0/apkleaks", "links": [], "tags": [], "path": "/tools/apkleaks/", "listing": "/mobile/#apkleaks"}, {"name": "APKTool", "url": "https://ibotpeaches.github.io/Apktool/", "description": "Seamlessly integrates the best open-source tools right inside VS Code.", "category": "mobile", "section": "Offensive Security", "group": "Static Analysis", "repo": null, "links": [], "tags": [], "path": "/tools/apktool/", "listing": "/mobile/#apktool"}, {"name": "AppUse", "url": "https://appsec-labs.com/appuse/", "description": "Mobile app security testing, Android and iOS applications. Custom-made tools and scripts created by AppSec Labs.", "category": "mobile", "section": "Offensive Security", "group": "Virtualization", "repo": null, "links": [], "tags": [], "path": "/tools/appuse/", "listing": "/mobile/#appuse"}, {"name": "Argus-SAF", "url": "https://github.com/arguslab/Argus-SAF", "description": "Static analysis framework.", "category": "mobile", "section": "Offensive Security", "group": "Static Analysis", "repo": "arguslab/Argus-SAF", "links": [], "tags": [], "path": "/tools/argus-saf/", "listing": "/mobile/#argus-saf"}, {"name": "B3nac Sec", "url": "https://www.youtube.com/c/B3nacSec/featured", "description": "Dedicated mobile ethical hacking.", "category": "mobile", "section": "Offensive Security", "group": "Video Content", "repo": null, "links": [], "tags": [], "path": "/tools/b3nac-sec/", "listing": "/mobile/#b3nac-sec"}, {"name": "bfdecrypt", "url": "https://github.com/BishopFox/bfdecrypt", "description": "Utility to decrypt App Store apps on jailbroken iOS 11.x.", "category": "mobile", "section": "Offensive Security", "group": "Reverse Engineering", "repo": "BishopFox/bfdecrypt", "links": [], "tags": [], "path": "/tools/bfdecrypt/", "listing": "/mobile/#bfdecrypt"}, {"name": "BinaryCookieReader", "url": "https://github.com/as0ler/BinaryCookieReader", "description": "A tool to read the binarycookie format of Cookies on iOS applications.", "category": "mobile", "section": "Offensive Security", "group": "Post Exploitation (iOS)", "repo": "as0ler/BinaryCookieReader", "links": [], "tags": [], "path": "/tools/binarycookiereader/", "listing": "/mobile/#binarycookiereader"}, {"name": "Bytecode Viewer", "url": "https://github.com/konloch/bytecode-viewer", "description": "A lightweight user friendly Java Bytecode Viewer.", "category": "mobile", "section": "Offensive Security", "group": "Dynamic Analysis", "repo": "konloch/bytecode-viewer", "links": [], "tags": [], "path": "/tools/bytecode-viewer/", "listing": "/mobile/#bytecode-viewer"}, {"name": "canijailbreak", "url": "https://canijailbreak.com/", "description": "A website which tells you whether you can jailbreak your iOS device.", "category": "mobile", "section": "Jailbreaking & Rooting", "group": "", "repo": null, "links": [], "tags": [], "path": "/tools/canijailbreak/", "listing": "/mobile/#canijailbreak"}, {"name": "Checkra1n", "url": "https://checkra.in/", "description": "Jailbreak for iPhone 5s through iPhone X, iOS 12.0 and up.", "category": "mobile", "section": "Jailbreaking & Rooting", "group": "", "repo": null, "links": [], "tags": [], "path": "/tools/checkra1n/", "listing": "/mobile/#checkra1n"}, {"name": "Checkstyle", "url": "https://github.com/checkstyle/checkstyle", "description": "A tool for checking Java source code for adherence to a Code Standard or set of validation rules.", "category": "mobile", "section": "Offensive Security", "group": "Static Analysis", "repo": "checkstyle/checkstyle", "links": [], "tags": [], "path": "/tools/checkstyle/", "listing": "/mobile/#checkstyle"}, {"name": "Chimera", "url": "https://chimera.coolstar.org/", "description": "iOS 12 jailbreak to not only feature a CoreTrust bypass so that binaries don't need to be resigned, but to also support A12 devices, including iPhone Xs, iPhone Xr, and the newest iPads.", "category": "mobile", "section": "Jailbreaking & Rooting", "group": "", "repo": null, "links": [], "tags": [], "path": "/tools/chimera/", "listing": "/mobile/#chimera"}, {"name": "ClassDumpiOS", "url": "https://github.com/DreamDevLost/classdumpios", "description": "iOS port from nygard/class-dump.", "category": "mobile", "section": "Offensive Security", "group": "Post Exploitation (iOS)", "repo": "DreamDevLost/classdumpios", "links": [], "tags": [], "path": "/tools/classdumpios/", "listing": "/mobile/#classdumpios"}, {"name": "Clutch", "url": "https://github.com/KJCracks/Clutch", "description": "Fast iOS executable dumper.", "category": "mobile", "section": "Offensive Security", "group": "Reverse Engineering", "repo": "KJCracks/Clutch", "links": [], "tags": [], "path": "/tools/clutch/", "listing": "/mobile/#clutch"}, {"name": "CuckooDroid", "url": "https://github.com/idanr1986/cuckoo-droid", "description": "Automated Android Malware Analysis with Cuckoo Sandbox.", "category": "mobile", "section": "Offensive Security", "group": "Dynamic Analysis", "repo": "idanr1986/cuckoo-droid", "links": [], "tags": [], "path": "/tools/cuckoodroid/", "listing": "/mobile/#cuckoodroid"}, {"name": "Cycript", "url": "https://www.cycript.org/", "description": "Explore and modify running applications on either iOS or Mac OS X using a hybrid of Objective-C++ and JavaScript.", "category": "mobile", "section": "Offensive Security", "group": "Post Exploitation (iOS)", "repo": "as0ler/BinaryCookieReader", "links": [], "tags": [], "path": "/tools/binarycookiereader/", "listing": "/mobile/#cycript"}, {"name": "Cydia Impactor", "url": "https://www.cydiaimpactor.com/", "description": "Use this tool to install IPA files on iOS and APK files on Android.", "category": "mobile", "section": "Offensive Security", "group": "Flashing/Sideloading", "repo": null, "links": [], "tags": [], "path": "/tools/cydia-impactor/", "listing": "/mobile/#cydia-impactor"}, {"name": "DECAF", "url": "https://github.com/decaf-project/DECAF", "description": "DECAF (short for Dynamic Executable Code Analysis Framework) is a binary analysis platform based on QEMU.", "category": "mobile", "section": "Offensive Security", "group": "Dynamic Analysis", "repo": "decaf-project/DECAF", "links": [], "tags": [], "path": "/tools/decaf/", "listing": "/mobile/#decaf"}, {"name": "Deoptfuscator", "url": "https://github.com/Gyoonus/deoptfuscator", "description": "Reverse the control-flow obfuscation performed by DexGuard on open-source Android applications.", "category": "mobile", "section": "Offensive Security", "group": "Static Analysis", "repo": "Gyoonus/deoptfuscator", "links": [], "tags": [], "path": "/tools/deoptfuscator/", "listing": "/mobile/#deoptfuscator"}, {"name": "DexGuard", "url": "https://www.guardsquare.com/dexguard", "description": "The full spectrum of protection for Android apps.", "category": "mobile", "section": "Defensive Security", "group": "Source Code Obfuscation", "repo": null, "links": [], "tags": [], "path": "/tools/dexguard/", "listing": "/mobile/#dexguard"}, {"name": "Diggy", "url": "https://github.com/s0md3v/Diggy", "description": "Extract endpoints from apk files.", "category": "mobile", "section": "Offensive Security", "group": "Dynamic Analysis", "repo": "s0md3v/Diggy", "links": [], "tags": [], "path": "/tools/diggy/", "listing": "/mobile/#diggy"}, {"name": "DIVA", "url": "https://www.decompileandroid.com/", "description": "DIVA (Damn insecure and vulnerable App) is an Android App intentionally designed to be insecure.", "category": "mobile", "section": "Offensive Security", "group": "Labs/Practice", "repo": null, "links": [], "tags": [], "path": "/tools/android-apk-decompiler/", "listing": "/mobile/#diva"}, {"name": "dmesg", "url": "https://github.com/DreamDevLost/classdumpios", "description": "Prints Android kernel messages. Already installed on device.", "category": "mobile", "section": "Offensive Security", "group": "Post Exploitation (Android)", "repo": "DreamDevLost/classdumpios", "links": [], "tags": [], "path": "/tools/classdumpios/", "listing": "/mobile/#dmesg"}, {"name": "Double H3lix", "url": "https://doubleh3lix.tihmstar.net/", "description": "Jailbreak for 64-bit 10.x devices.", "category": "mobile", "section": "Jailbreaking & Rooting", "group": "", "repo": null, "links": [], "tags": [], "path": "/tools/double-h3lix/", "listing": "/mobile/#double-h3lix"}, {"name": "Droid-FF", "url": "https://github.com/antojoseph/droid-ff", "description": "The android fuzzing framework.", "category": "mobile", "section": "Offensive Security", "group": "Dynamic Analysis", "repo": "antojoseph/droid-ff", "links": [], "tags": [], "path": "/tools/droid-ff/", "listing": "/mobile/#droid-ff"}, {"name": "Droid-Hunter", "url": "https://github.com/hahwul/droid-hunter", "description": "Android application vulnerability analysis and Android pentest tool.", "category": "mobile", "section": "Offensive Security", "group": "Static Analysis", "repo": "hahwul/droid-hunter", "links": [], "tags": [], "path": "/tools/droid-hunter/", "listing": "/mobile/#droid-hunter"}, {"name": "Drozer", "url": "https://github.com/FSecureLABS/drozer", "description": "Security testing framework for Android.", "category": "mobile", "section": "Offensive Security", "group": "Dynamic Analysis", "repo": "FSecureLABS/drozer", "links": [], "tags": [], "path": "/tools/drozer/", "listing": "/mobile/#drozer"}, {"name": "DumpDecrypted", "url": "https://github.com/stefanesser/dumpdecrypted", "description": "Dumps decrypted mach-o files from encrypted iPhone applications from memory to disk.", "category": "mobile", "section": "Offensive Security", "group": "Post Exploitation (iOS)", "repo": "stefanesser/dumpdecrypted", "links": [], "tags": [], "path": "/tools/dumpdecrypted/", "listing": "/mobile/#dumpdecrypted"}, {"name": "Dumpsys", "url": "https://developer.android.com/studio/command-line/dumpsys", "description": "a tool that runs on Android devices and provides information about system services. Already installed on device.", "category": "mobile", "section": "Offensive Security", "group": "Post Exploitation (Android)", "repo": null, "links": [], "tags": [], "path": "/tools/dumpsys/", "listing": "/mobile/#dumpsys"}, {"name": "DVHMA", "url": "https://github.com/logicalhacking/DVHMA", "description": "Damn Vulnerable Hybrid Mobile App (DVHMA) is a hybrid mobile app (for Android) that intentionally contains vulnerabilities.", "category": "mobile", "section": "Offensive Security", "group": "Labs/Practice", "repo": "logicalhacking/DVHMA", "links": [], "tags": [], "path": "/tools/dvhma/", "listing": "/mobile/#dvhma"}, {"name": "EggShell", "url": "https://github.com/neoneggplant/EggShell", "description": "iOS/macOS/Linux Remote Administration Tool.", "category": "mobile", "section": "Offensive Security", "group": "Post Exploitation (Android)", "repo": "neoneggplant/EggShell", "links": [], "tags": [], "path": "/tools/eggshell/", "listing": "/mobile/#eggshell"}, {"name": "Error Prone", "url": "https://github.com/google/error-prone", "description": "Error Prone is a static analysis tool for Java that catches common programming mistakes at compile-time.", "category": "mobile", "section": "Offensive Security", "group": "Static Analysis", "repo": "google/error-prone", "links": [], "tags": [], "path": "/tools/error-prone/", "listing": "/mobile/#error-prone"}, {"name": "Etason", "url": "https://etasonjb.tihmstar.net/", "description": "Jailbreak for all devices running iOS 8.4.1 32 bit.", "category": "mobile", "section": "Jailbreaking & Rooting", "group": "", "repo": null, "links": [], "tags": [], "path": "/tools/etason/", "listing": "/mobile/#etason"}, {"name": "Find Security Bugs", "url": "https://github.com/find-sec-bugs/find-sec-bugs", "description": "Find Security Bugs is the SpotBugs plugin for security audits of Java web applications.", "category": "mobile", "section": "Offensive Security", "group": "Static Analysis", "repo": "find-sec-bugs/find-sec-bugs", "links": [], "tags": [], "path": "/tools/find-security-bugs/", "listing": "/mobile/#find-security-bugs"}, {"name": "FindBugs", "url": "https://findbugs.sourceforge.net/downloads.html", "description": "Uses static analysis to inspect Java bytecode for occurrences of bug patterns.", "category": "mobile", "section": "Offensive Security", "group": "Static Analysis", "repo": null, "links": [], "tags": [], "path": "/tools/findbugs/", "listing": "/mobile/#findbugs"}, {"name": "flexdecrypt", "url": "https://github.com/JohnCoates/flexdecrypt", "description": "Decrypt iOS Apps and Mach-O binaries.", "category": "mobile", "section": "Offensive Security", "group": "Reverse Engineering", "repo": "JohnCoates/flexdecrypt", "links": [], "tags": [], "path": "/tools/flexdecrypt/", "listing": "/mobile/#flexdecrypt"}, {"name": "FlowDroid", "url": "https://github.com/secure-software-engineering/FlowDroid", "description": "Statically computes data flows in Android apps and Java programs.", "category": "mobile", "section": "Offensive Security", "group": "Static Analysis", "repo": "secure-software-engineering/FlowDroid", "links": [], "tags": [], "path": "/tools/flowdroid/", "listing": "/mobile/#flowdroid"}, {"name": "FoulDecrypt", "url": "https://github.com/NyaMisty/fouldecrypt", "description": "A lightweight and simpling iOS binary decryptor.", "category": "mobile", "section": "Offensive Security", "group": "Reverse Engineering", "repo": "NyaMisty/fouldecrypt", "links": [], "tags": [], "path": "/tools/fouldecrypt/", "listing": "/mobile/#fouldecrypt"}, {"name": "Frida", "url": "https://github.com/frida/frida", "description": "Dynamic instrumentation toolkit for developers, reverse-engineers, and security researchers.", "category": "mobile", "section": "Offensive Security", "group": "Dynamic Analysis", "repo": "frida/frida", "links": [], "tags": [], "path": "/tools/frida/", "listing": "/mobile/#frida"}, {"name": "Gradle", "url": "https://github.com/novoda/gradle-static-analysis-plugin", "description": "Supports many popular static analysis (Checkstyle, PMD, FindBugs, etc) via a set of built-in plugins.", "category": "mobile", "section": "Offensive Security", "group": "Static Analysis", "repo": "novoda/gradle-static-analysis-plugin", "links": [], "tags": [], "path": "/tools/gradle/", "listing": "/mobile/#gradle"}, {"name": "H3lix", "url": "https://h3lix.tihmstar.net/", "description": "Jailbreak for 32-bit 10.x devices.", "category": "mobile", "section": "Jailbreaking & Rooting", "group": "", "repo": null, "links": [], "tags": [], "path": "/tools/h3lix/", "listing": "/mobile/#h3lix"}, {"name": "Home Depot", "url": "https://wall.supplies/", "description": "Jailbreak for iOS 9.x devices.", "category": "mobile", "section": "Jailbreaking & Rooting", "group": "", "repo": null, "links": [], "tags": [], "path": "/tools/home-depot/", "listing": "/mobile/#home-depot"}, {"name": "Hooker", "url": "https://github.com/AndroidHooker/hooker", "description": "Provides various tools and applications that can be use to automatically intercept and modify any API calls.", "category": "mobile", "section": "Offensive Security", "group": "Dynamic Analysis", "repo": "AndroidHooker/hooker", "links": [], "tags": [], "path": "/tools/hooker/", "listing": "/mobile/#hooker"}, {"name": "House", "url": "https://github.com/nccgroup/house", "description": "A runtime mobile application analysis toolkit with a Web GUI, powered by Frida, written in Python.", "category": "mobile", "section": "Offensive Security", "group": "Dynamic Analysis", "repo": "nccgroup/house", "links": [], "tags": [], "path": "/tools/house/", "listing": "/mobile/#house"}, {"name": "iExplorer", "url": "https://macroplant.com/iexplorer", "description": "Transfers music, messages, photos, files and everything else.", "category": "mobile", "section": "Offensive Security", "group": "App/File Management", "repo": null, "links": [], "tags": [], "path": "/tools/iexplorer/", "listing": "/mobile/#iexplorer"}, {"name": "iFunbox", "url": "https://www.i-funbox.com/en/index.html", "description": "General file management software for iPhone and other Apple products.", "category": "mobile", "section": "Offensive Security", "group": "App/File Management", "repo": null, "links": [], "tags": [], "path": "/tools/ifunbox/", "listing": "/mobile/#ifunbox"}, {"name": "iMazing", "url": "https://imazing.com/", "description": "Powerful user-friendly iOS device manager for Mac and PC.", "category": "mobile", "section": "Offensive Security", "group": "App/File Management", "repo": null, "links": [], "tags": [], "path": "/tools/imazing/", "listing": "/mobile/#imazing"}, {"name": "Infer", "url": "https://github.com/facebook/infer", "description": "Infer is a static analysis tool for Java, C++, Objective-C, and C. Infer is written in OCaml.", "category": "mobile", "section": "Offensive Security", "group": "Static Analysis", "repo": "facebook/infer", "links": [], "tags": [], "path": "/tools/infer/", "listing": "/mobile/#infer"}, {"name": "Injured Android", "url": "https://github.com/B3nac/InjuredAndroid", "description": "A vulnerable Android application that shows simple examples of vulnerabilities in a ctf style.", "category": "mobile", "section": "Offensive Security", "group": "Labs/Practice", "repo": "B3nac/InjuredAndroid", "links": [], "tags": [], "path": "/tools/injured-android/", "listing": "/mobile/#injured-android"}, {"name": "InsecureBank v2", "url": "https://github.com/dineshshetty/Android-InsecureBankv2", "description": "Vulnerable Android application for developers and security enthusiasts to learn about Android insecurities.", "category": "mobile", "section": "Offensive Security", "group": "Labs/Practice", "repo": "dineshshetty/Android-InsecureBankv2", "links": [], "tags": [], "path": "/tools/insecurebank-v2/", "listing": "/mobile/#insecurebank-v2"}, {"name": "Inspeckage", "url": "https://github.com/ac-pm/Inspeckage", "description": "Tool developed to offer dynamic analysis of Android applications.", "category": "mobile", "section": "Offensive Security", "group": "Dynamic Analysis", "repo": "ac-pm/Inspeckage", "links": [], "tags": [], "path": "/tools/inspeckage/", "listing": "/mobile/#inspeckage"}, {"name": "iOS Pentesting", "url": "https://www.mindmeister.com/1713501700/ios-pentesting?fullscreen=1", "description": "iOS pentesting mindmap.", "category": "mobile", "section": "Offensive Security", "group": "Guides & References", "repo": null, "links": [], "tags": [], "path": "/tools/ios-pentesting/", "listing": "/mobile/#ios-pentesting"}, {"name": "IPSW", "url": "https://ipsw.me/", "description": "Download current and previous versions of Apple's iOS, iPadOS, watchOS, tvOS and audioOS firmware and receive notifications when new firmwares are released.", "category": "mobile", "section": "Jailbreaking & Rooting", "group": "", "repo": null, "links": [], "tags": [], "path": "/tools/ipsw/", "listing": "/mobile/#ipsw"}, {"name": "JADX", "url": "https://github.com/skylot/jadx", "description": "Dex to Java decompiler.", "category": "mobile", "section": "Offensive Security", "group": "Static Analysis", "repo": "skylot/jadx", "links": [], "tags": [], "path": "/tools/jadx/", "listing": "/mobile/#jadx"}, {"name": "jarsigner", "url": "https://github.com/Jamling/jarsigner", "description": "Jar, Android apk, Eclipse RCP signer.", "category": "mobile", "section": "Offensive Security", "group": "Post Exploitation (Android)", "repo": "Jamling/jarsigner", "links": [], "tags": [], "path": "/tools/jarsigner/", "listing": "/mobile/#jarsigner"}, {"name": "keystore-explorer", "url": "https://github.com/kaikramer/keystore-explorer", "description": "GUI replacement for the Java command-line utilities keytool and jarsigner.", "category": "mobile", "section": "Offensive Security", "group": "Post Exploitation (Android)", "repo": "kaikramer/keystore-explorer", "links": [], "tags": [], "path": "/tools/keystore-explorer/", "listing": "/mobile/#keystore-explorer"}, {"name": "KTool", "url": "https://github.com/KritantaDev/ktool", "description": "Cross-platform MachO/ObjC Static binary analysis tool & library. class-dump + otool + lipo + more.", "category": "mobile", "section": "Offensive Security", "group": "Post Exploitation (iOS)", "repo": "KritantaDev/ktool", "links": [], "tags": [], "path": "/tools/ktool/", "listing": "/mobile/#ktool"}, {"name": "Magisk", "url": "https://github.com/topjohnwu/Magisk", "description": "Magisk is a suite of open source software for customizing Android, supporting devices higher than Android 5.0.", "category": "mobile", "section": "Jailbreaking & Rooting", "group": "", "repo": "topjohnwu/Magisk", "links": [], "tags": [], "path": "/tools/magisk/", "listing": "/mobile/#magisk"}, {"name": "Mobile Audit", "url": "https://github.com/mpast/mobileAudit", "description": "SAST and Malware Analysis for Android Mobile APKs.", "category": "mobile", "section": "Offensive Security", "group": "Static Analysis", "repo": "mpast/mobileAudit", "links": [], "tags": [], "path": "/tools/mobile-audit/", "listing": "/mobile/#mobile-audit"}, {"name": "MobileAssistant", "url": "https://portswigger.net/burp/documentation/desktop/tools/mobile-assistant/installing", "description": "A tool to facilitate testing of iOS apps with Burp Suite.", "category": "mobile", "section": "Offensive Security", "group": "Post Exploitation (iOS)", "repo": null, "links": [], "tags": [], "path": "/tools/mobileassistant/", "listing": "/mobile/#mobileassistant"}, {"name": "MobSF", "url": "https://github.com/MobSF/Mobile-Security-Framework-MobSF", "description": "An automated, all-in-one mobile application (Android/iOS/Windows) pen-testing, malware analysis and security assessment framework.", "category": "mobile", "section": "Offensive Security", "group": "Dynamic Analysis", "repo": "MobSF/Mobile-Security-Framework-MobSF", "links": [], "tags": [], "path": "/tools/mobsf/", "listing": "/mobile/#mobsf"}, {"name": "Needle", "url": "https://github.com/FSecureLABS/needle", "description": "The iOS Security Testing Framework.", "category": "mobile", "section": "Offensive Security", "group": "Post Exploitation (iOS)", "repo": "FSecureLABS/needle", "links": [], "tags": [], "path": "/tools/needle/", "listing": "/mobile/#needle"}, {"name": "Objection", "url": "https://github.com/atomicobject/objection/", "description": "A lightweight dependency injection framework for Objective-C.", "category": "mobile", "section": "Offensive Security", "group": "Post Exploitation (iOS)", "repo": "atomicobject/objection", "links": [], "tags": [], "path": "/tools/objection/", "listing": "/mobile/#objection"}, {"name": "Odin", "url": "https://odindownload.com/", "description": "Used to flash a custom recovery firmware image to a Samsung Android device.", "category": "mobile", "section": "Offensive Security", "group": "Flashing/Sideloading", "repo": null, "links": [], "tags": [], "path": "/tools/odin/", "listing": "/mobile/#odin"}, {"name": "Ostorlab", "url": "https://ostorlab.co/", "description": "Online static taint analysis, 3rd party fingerprinting, and vulnerability analysis.", "category": "mobile", "section": "Offensive Security", "group": "Online Services", "repo": null, "links": [], "tags": [], "path": "/tools/ostorlab/", "listing": "/mobile/#ostorlab"}, {"name": "Oversecured", "url": "https://oversecured.com/", "description": "Android mobile app analyzer vulnerability scanner, designed for DevOps process integration.", "category": "mobile", "section": "Offensive Security", "group": "Online Services", "repo": null, "links": [], "tags": [], "path": "/tools/oversecured/", "listing": "/mobile/#oversecured"}, {"name": "Oversecured Vulnerable Android App", "url": "https://github.com/oversecured/ovaa", "description": "An Android app that aggregates all the platform's known and popular security vulnerabilities.", "category": "mobile", "section": "Offensive Security", "group": "Labs/Practice", "repo": "oversecured/ovaa", "links": [], "tags": [], "path": "/tools/oversecured-vulnerable-android-app/", "listing": "/mobile/#oversecured-vulnerable-android-app"}, {"name": "p0sixspwn", "url": "https://ih8sn0w.com/p0sixspwn.html", "description": "iOS Jailbreak for 6.1.X.", "category": "mobile", "section": "Jailbreaking & Rooting", "group": "", "repo": null, "links": [], "tags": [], "path": "/tools/p0sixspwn/", "listing": "/mobile/#p0sixspwn"}, {"name": "Palra1n", "url": "https://github.com/palera1n/palera1n", "description": "Jailbreak for arm64 devices on iOS 15.0+.", "category": "mobile", "section": "Jailbreaking & Rooting", "group": "", "repo": "palera1n/palera1n", "links": [], "tags": [], "path": "/tools/palra1n/", "listing": "/mobile/#palra1n"}, {"name": "PATDroid", "url": "https://github.com/mingyuan-xia/PATDroid", "description": "A collection of tools and data structures for analyzing Android applications and the system itself.", "category": "mobile", "section": "Offensive Security", "group": "Dynamic Analysis", "repo": "mingyuan-xia/PATDroid", "links": [], "tags": [], "path": "/tools/patdroid/", "listing": "/mobile/#patdroid"}, {"name": "Phoenix", "url": "https://phoenixpwn.com/", "description": "Semi-untethered jailbreak for 9.3.5-9.3.6. All 32-bit devices supported.", "category": "mobile", "section": "Jailbreaking & Rooting", "group": "", "repo": null, "links": [], "tags": [], "path": "/tools/phoenix/", "listing": "/mobile/#phoenix"}, {"name": "Plistsubtractor", "url": "https://github.com/joswr1ght/plistsubtractor", "description": "Read a plist file, write out any embedded plist files.", "category": "mobile", "section": "Offensive Security", "group": "Post Exploitation (Android)", "repo": "joswr1ght/plistsubtractor", "links": [], "tags": [], "path": "/tools/plistsubtractor/", "listing": "/mobile/#plistsubtractor"}, {"name": "PMD", "url": "https://github.com/pmd/pmd", "description": "Finds common programming flaws like unused variables, empty catch blocks, unnecessary object creation, and so forth.", "category": "mobile", "section": "Offensive Security", "group": "Static Analysis", "repo": "pmd/pmd", "links": [], "tags": [], "path": "/tools/pmd/", "listing": "/mobile/#pmd"}, {"name": "ProbeDroid", "url": "https://github.com/ZSShen/ProbeDroid", "description": "A dynamic Java code instrumentation for Android apps. Provides APIs for users to craft their own instrumentation tools.", "category": "mobile", "section": "Offensive Security", "group": "Dynamic Analysis", "repo": "ZSShen/ProbeDroid", "links": [], "tags": [], "path": "/tools/probedroid/", "listing": "/mobile/#probedroid"}, {"name": "ProxyDroid", "url": "https://github.com/madeye/proxydroid", "description": "Global Proxy for Android.", "category": "mobile", "section": "Offensive Security", "group": "Post Exploitation (Android)", "repo": "madeye/proxydroid", "links": [], "tags": [], "path": "/tools/proxydroid/", "listing": "/mobile/#proxydroid"}, {"name": "Qark", "url": "https://github.com/linkedin/qark", "description": "designed to look for several security related Android application vulnerabilities, either in source code or packaged APKs.", "category": "mobile", "section": "Offensive Security", "group": "Static Analysis", "repo": "linkedin/qark", "links": [], "tags": [], "path": "/tools/qark/", "listing": "/mobile/#qark"}, {"name": "Quark", "url": "https://github.com/quark-engine/quark-engine", "description": "An Obfuscation-Neglect Android Malware Scoring System.", "category": "mobile", "section": "Offensive Security", "group": "Static Analysis", "repo": "quark-engine/quark-engine", "links": [], "tags": [], "path": "/tools/quark/", "listing": "/mobile/#quark"}, {"name": "Quixxi", "url": "https://quixxisecurity.com/", "description": "An intelligent and integrated end-to-end mobile app security solution.", "category": "mobile", "section": "Offensive Security", "group": "Online Services", "repo": null, "links": [], "tags": [], "path": "/tools/quixxi/", "listing": "/mobile/#quixxi"}, {"name": "r2flutch", "url": "https://github.com/as0ler/r2flutch", "description": "Tool to decrypt iOS apps using r2frida.", "category": "mobile", "section": "Offensive Security", "group": "Reverse Engineering", "repo": "as0ler/r2flutch", "links": [], "tags": [], "path": "/tools/r2flutch/", "listing": "/mobile/#r2flutch"}, {"name": "redsn0w", "url": "https://ipsw.me/iPhoneDev", "description": "Jailbreak for iOS 3-5.", "category": "mobile", "section": "Jailbreaking & Rooting", "group": "", "repo": null, "links": [], "tags": [], "path": "/tools/redsn0w/", "listing": "/mobile/#redsn0w"}, {"name": "Runtime Mobile Security (RMS)", "url": "https://github.com/m0bilesecurity/RMS-Runtime-Mobile-Security", "description": "Powered by FRIDA a powerful web interface that helps you to manipulate Android and iOS Apps at Runtime.", "category": "mobile", "section": "Offensive Security", "group": "Dynamic Analysis", "repo": "m0bilesecurity/RMS-Runtime-Mobile-Security", "links": [], "tags": [], "path": "/tools/runtime-mobile-security-rms/", "listing": "/mobile/#runtime-mobile-security-rms"}, {"name": "RVICTL", "url": "https://github.com/gh2o/rvi_capture", "description": "Capture packets sent/received by iOS devices.", "category": "mobile", "section": "Offensive Security", "group": "Post Exploitation (iOS)", "repo": "gh2o/rvi_capture", "links": [], "tags": [], "path": "/tools/rvictl/", "listing": "/mobile/#rvictl"}, {"name": "Sileo", "url": "https://getsileo.app/", "description": "A fast, beautiful, powerful and efficient APT Package Manager designed for jailbroken device.", "category": "mobile", "section": "Offensive Security", "group": "Post Exploitation (iOS)", "repo": null, "links": [], "tags": [], "path": "/tools/sileo/", "listing": "/mobile/#sileo"}, {"name": "Simplify", "url": "https://github.com/CalebFenton/simplify", "description": "Android virtual machine and deobfuscator.", "category": "mobile", "section": "Offensive Security", "group": "Post Exploitation (Android)", "repo": "CalebFenton/simplify", "links": [], "tags": [], "path": "/tools/simplify/", "listing": "/mobile/#simplify"}, {"name": "Smali", "url": "https://github.com/JesusFreke/smali", "description": "An assembler/disassembler for the dex format used by dalvik, Android's Java VM implementation.", "category": "mobile", "section": "Offensive Security", "group": "Static Analysis", "repo": "JesusFreke/smali", "links": [], "tags": [], "path": "/tools/smali/", "listing": "/mobile/#smali"}, {"name": "Soot", "url": "https://github.com/soot-oss/soot", "description": "Smali Control Flow Graph's.", "category": "mobile", "section": "Offensive Security", "group": "Static Analysis", "repo": "soot-oss/soot", "links": [], "tags": [], "path": "/tools/soot/", "listing": "/mobile/#soot"}, {"name": "Sparta", "url": "https://github.com/typetools/sparta", "description": "Static program analysis for reliable trusted apps.", "category": "mobile", "section": "Offensive Security", "group": "Static Analysis", "repo": "typetools/sparta", "links": [], "tags": [], "path": "/tools/sparta/", "listing": "/mobile/#sparta"}, {"name": "SSLKillSwitch", "url": "https://github.com/iSECPartners/ios-ssl-kill-switch", "description": "Blackbox tool to disable SSL certificate validation.", "category": "mobile", "section": "Offensive Security", "group": "Post Exploitation (iOS)", "repo": "iSECPartners/ios-ssl-kill-switch", "links": [], "tags": [], "path": "/tools/sslkillswitch/", "listing": "/mobile/#sslkillswitch"}, {"name": "SSLKillSwitch2", "url": "https://github.com/nabla-c0d3/ssl-kill-switch2", "description": "Blackbox tool to disable SSL certificate validation.", "category": "mobile", "section": "Offensive Security", "group": "Post Exploitation (iOS)", "repo": "nabla-c0d3/ssl-kill-switch2", "links": [], "tags": [], "path": "/tools/sslkillswitch2/", "listing": "/mobile/#sslkillswitch2"}, {"name": "StaCoAn", "url": "https://github.com/vincentcox/StaCoAn", "description": "A crossplatform tool which aids developers, bugbounty hunters and ethical hackers performing static code analysis on mobile applications.", "category": "mobile", "section": "Offensive Security", "group": "Static Analysis", "repo": "vincentcox/StaCoAn", "links": [], "tags": [], "path": "/tools/stacoan/", "listing": "/mobile/#stacoan"}, {"name": "Trueseeing", "url": "https://github.com/monolithworks/trueseeing", "description": "A fast, accurate and resilient vulnerability scanner for Android apps.", "category": "mobile", "section": "Offensive Security", "group": "Static Analysis", "repo": "monolithworks/trueseeing", "links": [], "tags": [], "path": "/tools/trueseeing/", "listing": "/mobile/#trueseeing"}, {"name": "unc0ver", "url": "https://unc0ver.dev/", "description": "A jail​break tool.", "category": "mobile", "section": "Jailbreaking & Rooting", "group": "", "repo": null, "links": [], "tags": [], "path": "/tools/unc0ver/", "listing": "/mobile/#unc0ver"}, {"name": "UnCrackable Apps", "url": "https://github.com/OWASP/owasp-mstg", "description": "A collection of mobile reverse engineering challenges for iOS and Android.", "category": "mobile", "section": "Offensive Security", "group": "Labs/Practice", "repo": "OWASP/owasp-mstg", "links": [], "tags": [], "path": "/tools/uncrackable-apps/", "listing": "/mobile/#uncrackable-apps"}, {"name": "Vuldroid", "url": "https://github.com/jaiswalakshansh/Vuldroid", "description": "Vuldroid is a Vulnerable Android Application made with security issues in order to demonstrate how they can occur in code.", "category": "mobile", "section": "Offensive Security", "group": "Labs/Practice", "repo": "jaiswalakshansh/Vuldroid", "links": [], "tags": [], "path": "/tools/vuldroid/", "listing": "/mobile/#vuldroid"}, {"name": "VyAPI", "url": "https://github.com/appsecco/VyAPI", "description": "The Modern Cloud-Based Vulnerable Hybrid Android App.", "category": "mobile", "section": "Offensive Security", "group": "Labs/Practice", "repo": "appsecco/VyAPI", "links": [], "tags": [], "path": "/tools/vyapi/", "listing": "/mobile/#vyapi"}, {"name": "WaTF-Bank", "url": "https://github.com/WaTF-Team/WaTF-Bank", "description": "What a Terrible Failure Mobile Banking Application for Android and iOS.", "category": "mobile", "section": "Offensive Security", "group": "Labs/Practice", "repo": "WaTF-Team/WaTF-Bank", "links": [], "tags": [], "path": "/tools/watf-bank/", "listing": "/mobile/#watf-bank"}, {"name": "Yaazhini", "url": "https://www.vegabird.com/yaazhini/", "description": "Vulnerability scanner for Android APKs and their APIs.", "category": "mobile", "section": "Offensive Security", "group": "Static Analysis", "repo": null, "links": [], "tags": [], "path": "/tools/yaazhini/", "listing": "/mobile/#yaazhini"}]}