Skip to content
Open
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
5 changes: 5 additions & 0 deletions README.md
Original file line number Diff line number Diff line change
Expand Up @@ -29,11 +29,14 @@ The Mobile App Pentest cheat sheet was created to provide concise collection of
* [Mobisec](http://sourceforge.net/projects/mobisec/) - Mobile security testing live environment.
* [Santoku](https://santoku-linux.com/) - Santoku is an OS and can be run outside a VM as a standalone operating system.
* [Vezir Project](https://github.com/oguzhantopgul/Vezir-Project) - Mobile Application Pentesting and Malware Analysis Environment.
* [Dagah](http://www.shevirah.com) - Mobile Penetration Testing Tool that can measure the whole security posture the users, the device, the applications, and the infrastructure. Works with iOS and Android.
* [SPF - Smartphone Pentest Framework](https://github.com/Shevirah/Smartphone-Pentest-Framework/) - Smartphone Penetration Testing Framework

### All-in-One Mobile Security Frameworks
* [Mobile Security Framework - MobSF](https://github.com/ajinabraham/Mobile-Security-Framework-MobSF) - Mobile Security Framework is an intelligent, all-in-one open source mobile application (Android/iOS) automated pen-testing framework capable of performing static and dynamic analysis.
* `python manage.py runserver 127.0.0.1:1337`
* [Needle](https://github.com/mwrlabs/needle) - Needle is an open source, modular framework to streamline the process of conducting security assessments of iOS apps including Binary Analysis, Static Code Analysis, Runtime Manipulation using Cycript and Frida hooking, and so on.
* [SPF - Smartphone Pentest Framework](https://github.com/Shevirah/Smartphone-Pentest-Framework/) - Smartphone Penetration Testing Framework

### Android Application Penetration Testing
#### Reverse Engineering and Static Analysis
Expand Down Expand Up @@ -136,6 +139,8 @@ The Mobile App Pentest cheat sheet was created to provide concise collection of
* [Cyberduck](https://cyberduck.io) - Libre FTP, SFTP, WebDAV, S3, Azure & OpenStack Swift browser for Mac and Windows.
* [itunnel](https://code.google.com/p/iphonetunnel-usbmuxconnectbyport/downloads/list) - Use to forward SSH via USB.
* [iFunbox](http://www.i-funbox.com) - The File and App Management Tool for iPhone, iPad & iPod Touch.
* [Dagah](http://www.shevirah.com) - Mobile Penetration Testing Tool that can measure the whole security posture the users, the device, the applications, and the infrastructure. Works with iOS and Android.
* [SPF - Smartphone Pentest Framework](https://github.com/Shevirah/Smartphone-Pentest-Framework/) - Smartphone Penetration Testing Framework

#### Reverse Engineering and Static Analysis
* [otool](http://www.unix.com/man-page/osx/1/otool/) - The otool command displays specified parts of object files or libraries.
Expand Down