Mobile Pentest

This is a mobile app security testing workflow that walks you through both static and dynamic analysis for Android and iOS. You get practical Frida scripts for bypassing SSL pinning and root detection, ADB commands for exploiting exported components and deep links, and guidance on setting up your lab environment with tools like Objection, Magisk, and jailbreak utilities. The static analysis section covers decompiling APKs with jadx and apktool, dumping iOS classes, and hunting for hardcoded secrets in both platforms. What stands out is the exported components section, which shows exactly how to abuse Activities, Services, Broadcasts, and Content Providers via ADB. It's comprehensive enough for both bug bounty work and formal pentests, though you'll still need to adapt the Frida scripts to app specific obfuscation.

Install to Claude Code

npx -y skills add hypnguyen1209/offensive-claude --skill mobile-pentest --agent claude-code