mobile-pentest
Mobile-pentest guides dynamic analysis of Android and iOS applications through Frida-based instrumentation, certificate pinning circumvention, and detection bypass. It covers exported component abuse, deep-link exploitation, WebView attacks, and hybrid app reverse engineering for Flutter and React Native codebases.
Mobile-pentest enables dynamic instrumentation and traffic interception on Android/iOS apps using Frida, component exploitation, and bypass techniques.
AI-generated summary based on this skill's SKILL.md
Decision gist · record as of 2026-07-03
Mobile-pentest enables dynamic instrumentation and traffic interception on Android/iOS apps using Frida, component exploitation, and bypass techniques. Mobile-pentest guides dynamic analysis of Android and iOS applications through Frida-based instrumentation, certificate pinning circumvention, and detection bypass. It covers exported component abuse, deep-link exploitation, WebView attacks, and hybrid app reverse engineering for Flutter and React Native codebases.
Use it when
- Mobile-pentest leverages Frida-based instrumentation to hook certificate validation routines at runtime.
- Yes.
Verify before relying
Read SKILL.md below before installing (13 files). Open directory: indexed for reading, not audited.
Install
hypnguyen1209/offensive-claude/mobile-pentest · repository language: Python
Open directory. Skills are indexed for reading, not audited. Review a skill's body before installing it.
Frequently asked questions
AI-generated answers based on this skill's SKILL.md and metadata
What is mobile-pentest used for?
Mobile-pentest is a framework for dynamic analysis and penetration testing of Android and iOS applications. It enables security researchers to perform runtime instrumentation, intercept traffic, bypass security controls like SSL pinning and root detection, enumerate exported components, and reverse engineer hybrid apps built with Flutter or React Native.
How does mobile-pentest handle frida ssl pinning bypass on mobile?
Mobile-pentest leverages Frida-based instrumentation to hook certificate validation routines at runtime, allowing testers to intercept and modify SSL/TLS traffic even when apps implement certificate pinning. This enables traffic analysis and manipulation without requiring certificate installation on the target device.
Can mobile-pentest help with android root detection and ios jailbreak detection bypass?
Yes. Mobile-pentest provides techniques to bypass both Android root detection and iOS jailbreak detection mechanisms through Frida hooks and runtime patching. Testers can instrument system calls and detection routines to allow security testing on rooted or jailbroken devices.
What exported component and deep link vulnerabilities can mobile-pentest identify?
Mobile-pentest helps enumerate and exploit exported Android components, content providers, and deep links that lack proper access controls. It can identify intent hijacking, task hijacking, and deep-link exploitation vectors that allow unauthorized inter-app communication or data access.
Does mobile-pentest support reverse engineering of flutter and react native apps?
Mobile-pentest covers reverse engineering techniques for hybrid applications, including Flutter and React Native codebases. It addresses Hermes bytecode decompilation for React Native and provides guidance on analyzing cross-platform app logic and extracting sensitive information from compiled binaries.
How can mobile-pentest help extract secrets from insecure app storage?
Mobile-pentest guides extraction of secrets from insecure storage mechanisms including SharedPreferences, SQLite databases, and iOS Keychain. It demonstrates techniques for dumping app data, identifying unencrypted credentials, and leveraging storage vulnerabilities on both rooted Android and jailbroken iOS devices.
SKILL.md
Rendered from the published skill. Quoted content, verbatim.
name: mobile-pentest description: Use when pentesting an Android/iOS app — Frida 17 instrumentation, SSL-pinning & root/jailbreak bypass, Android 14/15 CA injection, exported-component/content-provider abuse, deep-link/WebView chains, biometric bypass, Flutter/React-Native RE metadata: type: offensive phase: exploitation tools: frida, frida-tools, objection, jadx, apktool, reflutter, hermes-dec, hbctool, mitmproxy, burp, palera1n, dopamine, frida-ios-dump, bagbak, mobsf, drozer, nuclei mitre: TA0001 kill_chain: phase: [recon, exploit] step: [1, 4] attck_tactics: [TA0043, TA0001, TA0009, TA0006, TA0005] attck_techniques: [T1626, T1626.001, T1517, T1409, T1517, T1577, T1631, T1407, T1635, T1521, T1521.001, T1417, T1417.001, T1660, T1644, T1623] depends_on: [recon-osint, reverse-engineering] feeds_into: [exploit-development, web-pentest] inputs: [apk_file, ipa_file, mobile_endpoint, app_package_id] outputs: [finding_record, mobile_vulnerability_list, intercepted_traffic, extracted_secrets] references: - references/environment-interception.md - references/android-component-attacks.md - references/webview-deeplink-exploitation.md -
(truncated - see the full file via the links below)
File tree — 13 files
skills/mobile-pentest/SKILL.md
skills/mobile-pentest/references/android-component-attacks.md
skills/mobile-pentest/references/crossplatform-re-instrumentation.md
skills/mobile-pentest/references/environment-interception.md
skills/mobile-pentest/references/insecure-storage-crypto.md
skills/mobile-pentest/references/ios-offensive.md
skills/mobile-pentest/references/webview-deeplink-exploitation.md
skills/mobile-pentest/scripts/android_ca_inject.sh
skills/mobile-pentest/scripts/component_fuzz.sh
skills/mobile-pentest/scripts/hermes_triage.py
skills/mobile-pentest/scripts/ios_bypass_suite.js
skills/mobile-pentest/scripts/manifest_attack_surface.py
skills/mobile-pentest/scripts/universal_unpin.js
Let your AI agent find skills like this
Example. Real query, live index.
You found this page by searching. An agent finds it by wishing: SkillFed indexes 56,283 agent skills by what they can do, searchable in plain language.
wish › “Perform dynamic instrumentation and traffic interception on Android/iOS apps”
Give your agent the search over MCP, or paste the wish link into any chat. No install? Search from any chat →
Related skills
Hermes Dec extracts and analyzes Hermes VM bytecode from React Native Android applications. It provides three core utilities: a file parser for inspecting HBC metadata, a disassembler that converts bytecode to assembly-like representation, and a decompiler that generates pseudo-JavaScript output.
Rev Ios Dump uses Frida to extract decrypted iOS application binaries from jailbroken devices, bypassing FairPlay DRM encryption for security research. The skill automates the process of dumping live app memory and producing analysis-ready IPA files compatible with disassemblers like IDA and Ghidra.
Reverse Engineering provides techniques and tools for static and dynamic analysis of compiled binaries, firmware, and protected code. Recover decompiled source, unpack obfuscated samples, bypass anti-debugging defenses, and extract vulnerability details through patch diffing and protocol inference.
Crypto-analysis evaluates cryptographic posture across TLS/SSL/SSH configurations, public-key implementations, and token schemes. It detects cipher downgrades, weak key generation, nonce reuse, AEAD misuse, and JWT algorithm confusion using integrated tools like testssl.sh, openssl, and hashcat. Use it to identify cryptographic flaws before attackers do.
This skill maps techniques for defeating Windows exploit mitigations—memory protections like ASLR, DEP, CFG, and CET—alongside platform security controls including WDAC, ASR, AMSI, ETW, and PPL. It pairs each bypass method with detection signatures and operational security notes to support both offensive testing and defensive hardening. Includes reconnaissance scripts, gadget finders, and a quick-start workflow for fingerprinting a target's mitigation landscape before weaponizing an exploit.
Master mobile game security research across Android and iOS platforms. This skill covers APK decompilation, native library analysis, IL2CPP dumping, dynamic instrumentation with Frida, memory manipulation, and modern root solutions like KernelSU and APatch. Learn jailbreak techniques, hooking frameworks, and methods to bypass detection systems.
More skills software-mobile (MIT)