mobile-pentest
Mobile-pentest guides dynamic analysis of Android and iOS applications through Frida-based instrumentation, certificate pinning circumvention, and detection bypass. It covers exported component abuse, deep-link exploitation, WebView attacks, and hybrid app reverse engineering for Flutter and React Native codebases.
Mobile-pentest enables dynamic instrumentation and traffic interception on Android/iOS apps using Frida, component exploitation, and bypass techniques.
AI-generated summary based on this skill's SKILL.md
Install
hypnguyen1209/offensive-claude/mobile-pentest · repository language: Python
git clone https://github.com/hypnguyen1209/offensive-claude
cp -r offensive-claude/skills/mobile-pentest ~/.claude/skills/mobile-pentestnpx skillfed install hypnguyen1209/offensive-claude/mobile-pentestFrequently asked questions
AI-generated answers based on this skill's SKILL.md and metadata
What is mobile-pentest used for?
Mobile-pentest is a framework for dynamic analysis and penetration testing of Android and iOS applications. It enables security researchers to perform runtime instrumentation, intercept traffic, bypass security controls like SSL pinning and root detection, enumerate exported components, and reverse engineer hybrid apps built with Flutter or React Native.
How does mobile-pentest handle frida ssl pinning bypass on mobile?
Mobile-pentest leverages Frida-based instrumentation to hook certificate validation routines at runtime, allowing testers to intercept and modify SSL/TLS traffic even when apps implement certificate pinning. This enables traffic analysis and manipulation without requiring certificate installation on the target device.
Can mobile-pentest help with android root detection and ios jailbreak detection bypass?
Yes. Mobile-pentest provides techniques to bypass both Android root detection and iOS jailbreak detection mechanisms through Frida hooks and runtime patching. Testers can instrument system calls and detection routines to allow security testing on rooted or jailbroken devices.
What exported component and deep link vulnerabilities can mobile-pentest identify?
Mobile-pentest helps enumerate and exploit exported Android components, content providers, and deep links that lack proper access controls. It can identify intent hijacking, task hijacking, and deep-link exploitation vectors that allow unauthorized inter-app communication or data access.
Does mobile-pentest support reverse engineering of flutter and react native apps?
Mobile-pentest covers reverse engineering techniques for hybrid applications, including Flutter and React Native codebases. It addresses Hermes bytecode decompilation for React Native and provides guidance on analyzing cross-platform app logic and extracting sensitive information from compiled binaries.
How can mobile-pentest help extract secrets from insecure app storage?
Mobile-pentest guides extraction of secrets from insecure storage mechanisms including SharedPreferences, SQLite databases, and iOS Keychain. It demonstrates techniques for dumping app data, identifying unencrypted credentials, and leveraging storage vulnerabilities on both rooted Android and jailbroken iOS devices.
SKILL.md
rendered from the published skill — quoted content, verbatim
name: mobile-pentest description: Use when pentesting an Android/iOS app — Frida 17 instrumentation, SSL-pinning & root/jailbreak bypass, Android 14/15 CA injection, exported-component/content-provider abuse, deep-link/WebView chains, biometric bypass, Flutter/React-Native RE metadata: type: offensive phase: exploitation tools: frida, frida-tools, objection, jadx, apktool, reflutter, hermes-dec, hbctool, mitmproxy, burp, palera1n, dopamine, frida-ios-dump, bagbak, mobsf, drozer, nuclei mitre: TA0001 kill_chain: phase: [recon, exploit] step: [1, 4] attck_tactics: [TA0043, TA0001, TA0009, TA0006, TA0005] attck_techniques: [T1626, T1626.001, T1517, T1409, T1517, T1577, T1631, T1407, T1635, T1521, T1521.001, T1417, T1417.001, T1660, T1644, T1623] depends_on: [recon-osint, reverse-engineering] feeds_into: [exploit-development, web-pentest] inputs: [apk_file, ipa_file, mobile_endpoint, app_package_id] outputs: [finding_record, mobile_vulnerability_list, intercepted_traffic, extracted_secrets] references: - references/environment-interception.md - references/android-component-attacks.md - references/webview-deeplink-exploitation.md -
(truncated - see the full file via the links below)
Read as markdown · JSON record · Browse the source repository
File tree — 13 files
skills/mobile-pentest/SKILL.md
skills/mobile-pentest/references/android-component-attacks.md
skills/mobile-pentest/references/crossplatform-re-instrumentation.md
skills/mobile-pentest/references/environment-interception.md
skills/mobile-pentest/references/insecure-storage-crypto.md
skills/mobile-pentest/references/ios-offensive.md
skills/mobile-pentest/references/webview-deeplink-exploitation.md
skills/mobile-pentest/scripts/android_ca_inject.sh
skills/mobile-pentest/scripts/component_fuzz.sh
skills/mobile-pentest/scripts/hermes_triage.py
skills/mobile-pentest/scripts/ios_bypass_suite.js
skills/mobile-pentest/scripts/manifest_attack_surface.py
skills/mobile-pentest/scripts/universal_unpin.js