sudosuraz

docker-android

Android in docker solution with noVNC supported and video recording

libimobiledevice

A cross-platform protocol library to communicate with iOS devices

cve

Gather and update all available and newest CVEs with their PoC.

commix

Automated All-in-One OS Command Injection Exploitation Tool.

LinkFinder

A python script that finds endpoints in JavaScript files

frida-ios-dump

pull decrypted ipa from jailbreak device

ghauri

An advanced cross-platform tool that automates the process of detecting and exploiting SQL injection security flaws

vulnerability-Checklist

This repository contain a lot of web and api vulnerability checklist , a lot of vulnerability ideas and tips from twitter

jaeles

The Swiss Army knife for automated Web Application Testing

ipsw

iOS/macOS Research Swiss Army Knife

metabigor

OSINT tools and more but without API key

BigBountyRecon

BigBountyRecon tool utilises 58 different techniques using various Google dorks and open source tools to expedite the process of initial reconnaissance on the target organisation.

xnLinkFinder

A python tool used to discover endpoints, potential parameters, and a target specific wordlist for a given target

iOS

Most usable tools for iOS penetration testing

webcopilot

An automation tool that enumerates subdomains then filters out xss, sqli, open redirect, lfi, ssrf and rce parameters and then scans for vulnerabilities.

XMachOViewer

XMachOViewer is a Mach-O viewer for Windows, Linux and MacOS

WordList

apk2url

An OSINT tool to quickly extract IP and URL endpoints from APKs by disassembling and decompiling

TryHackMe-Roadmap

a list of 350+ Free TryHackMe rooms to start learning cybersecurity with THM

mobile-nuclei-templates

Turbolist3r

Subdomain enumeration tool with analysis features for discovered domains

ios-penetration-testing-cheat-sheet

Work in progress...

google

Download APK from Google Play or send API requests

CVE-2023-46747-RCE

exploit for f5-big-ip RCE cve-2023-46747

Bug-Bounty-Automation

subdomains.sh

A wrapper around tools used for subdomain enumeration, to automate the workflow, on a given domain, written in bash.

clickjackingpoc

A Proof of Concept for Clickjacking Attacks

file-scraper

Scrape files for sensitive information, and generate an interactive HTML report. Based on Rabin2.

oscp-cheatsheet

Awesome-Mobile-Pentest

Mobile Application Penetration Testing checklist including iOS and Android