tanprathan/mobileapp-pentest-cheatsheet

The Mobile App Pentest cheat sheet was created to provide concise collection of high value information on specific mobile application penetration testing topics.

mobileapp-pentest-cheatsheet's Issues

Suggestion

I think is a great resource add a section about most common vulnerabilities like OWASP Mobile Top 10 and MITRE ATT&CK (Mobile section) to learn about this.

Drozer link is broken

Drozer link doesn't work. I think the new link should be https://github.com/FSecureLABS/drozer

Another list

Just for info => https://github.com/ashishb/android-security-awesome could be mentioned somehow.

Wireshark

adb shell
tcpdump -s 0 -w - | nc -l -p 4444 #in android phone
adb forward tcp:4444 tcp:4444
nc localhost 4444 | sudo wireshark -k -S -i wlan1

Where wlan1 is being tethered to my current rooted android phone
Can I confirm if the following steps are correct?

Canape is no more

Canape is not maintained anymore in its current form. The Last known version (which might get updated) resides on https://github.com/ctxis/Canape

There is a rewrite of the Core, but the UI only exists in the old version.

Update the Reverse Engineering and Static Analysis in iOS

Hi,

There is a new tool called Ipanema for application security assessment: https://dev.hackercat.ninja/hcninja/ipanema

Could you add it, please?

Needle from MWR for iOS

should consider to add https://github.com/mwrlabs/needle to the iOS list of tools

learning

any advice for learning android penetration testing?
I suggest adding some tutorial or some labs like GoatDroid, ANDRILL,... in your cheat sheet. tnx

Mobil

Hello add this cheat sheet to awesome-cheatsheet

Hello, we have indexd this cheat sheet to awesome-cheatsheet

Thank You !!! 🚀 🚀 🚀

လေ့လာရန် ၁

Fridpa

Recommend to add Fridpa as a part of iOS Application Penetration Testing

Suggestion

What about adding https://github.com/MobileForensicsResearch/mem ?
It's a great tool for extracting memory from an Android device. It's very trivial to install and use.

Update FindBugs to SpotBugs

Hi,
I noticed that in "Android Application Penetration Testing", under "Reverse Engineering and Static Analysis", the section about FindBugs is outdated since that project has not been updated in the last 5 years. However, a new project called SpotBugs which aims to continue the old one (and FindSecBugs is updated to the new one as well).