// HackTricks · CC BY-NC 4.0

Mobile

67 pages · adapted from upstream with source attribution on every page.

001 MobileAbusing Android Media Pipelines & Image Parsers android-app-pentesting002 MobileADB Commands android-app-pentesting003 MobileAir Keyboard Remote Input Injection (Unauthenticated TCP / WebSocket Listener) ios-pentesting004 MobileAndroid Accessibility Service Abuse android-app-pentesting005 MobileAndroid Anti-Instrumentation & SSL Pinning Bypass (Frida/Objection) android-app-pentesting006 MobileAndroid APK Checklist mobile-pentesting007 MobileAndroid Application-Level Virtualization (App Cloning) android-app-pentesting008 MobileAndroid Applications Basics android-app-pentesting009 MobileAndroid Applications Pentesting android-app-pentesting010 MobileAndroid Enterprise Work Profile Required-App Replacement android-app-pentesting011 MobileAndroid HCE NFC/EMV Relay Attacks android-app-pentesting012 MobileAndroid IME / InputMethodService Abuse (Malicious Keyboards) android-app-pentesting013 MobileAndroid In-Memory Native Code Execution via JNI (shellcode) android-app-pentesting014 MobileAndroid Physical Attacks android-app-pentesting015 MobileAndroid Task Hijacking android-app-pentesting016 MobileAndroid VPN Bypass android-app-pentesting017 MobileAPK decompilers android-app-pentesting018 MobileAVD - Android Virtual Device android-app-pentesting019 MobileBaseband/Modem and SoC Isolation Exploitation android-app-pentesting020 MobileBypass Biometric Authentication (Android) android-app-pentesting021 MobileContent Protocol in Android android-app-pentesting022 MobileCordova Apps mobile-pentesting023 MobileDrozer Tutorial drozer-tutorial024 MobileExploiting a Debuggable Application android-app-pentesting025 MobileExploiting Content Providers drozer-tutorial026 MobileExtracting Entitlements from Compiled Application ios-pentesting027 MobileFirmware-level Android Backdoor via libandroidruntime Zygote Injection android-app-pentesting028 MobileFlutter android-app-pentesting029 MobileFrida Tutorial frida-tutorial030 MobileFrida Tutorial 1 frida-tutorial031 MobileFrida Tutorial 2 frida-tutorial032 MobileFrida Tutorial 3 frida-tutorial033 MobileGoogle CTF 2018 - Shall We Play a Game? android-app-pentesting034 MobileInsecure In-App Update Mechanisms – Remote Code Execution via Malicious Plugins android-app-pentesting035 MobileInstall Burp Certificate android-app-pentesting036 MobileIntent Injection android-app-pentesting037 MobileiOS App Extensions ios-pentesting038 MobileiOS Basic Testing Operations ios-pentesting039 MobileiOS Basics ios-pentesting040 MobileiOS Burp Suite Configuration ios-pentesting041 MobileiOS Custom URI Handlers / Deeplinks / Custom Schemes ios-pentesting042 MobileiOS Frida Configuration ios-pentesting043 MobileiOS Hooking with Objection ios-pentesting044 MobileiOS Pasteboard ios-pentesting045 MobileiOS Pentesting ios-pentesting046 MobileiOS Pentesting Checklist mobile-pentesting047 MobileiOS Pentesting without Jailbreak ios-pentesting048 MobileiOS Serialisation and Encoding ios-pentesting049 MobileiOS Testing Environment ios-pentesting050 MobileiOS UIActivity Sharing ios-pentesting051 MobileiOS Universal Links ios-pentesting052 MobileiOS WebViews ios-pentesting053 Mobileitunesstored and bookassetd Sandbox Escape ios-pentesting054 MobileMake an APK Trust a User CA Certificate android-app-pentesting055 MobileManual De-obfuscation Techniques android-app-pentesting056 MobileObjection Tutorial frida-tutorial057 MobilePlay Integrity Attestation Bypass (SafetyNet Replacement) android-app-pentesting058 MobileReact Native Application Analysis android-app-pentesting059 MobileReversing Native Libraries android-app-pentesting060 MobileShizuku Privileged API android-app-pentesting061 MobileSmali - Decompiling/[Modifying]/Compiling android-app-pentesting062 MobileSpoofing Your Location in Google Play Store android-app-pentesting063 MobileTapjacking android-app-pentesting064 MobileWebview Attacks android-app-pentesting065 MobileWebView Protocol Handlers ios-pentesting066 MobileXamarin Apps mobile-pentesting067 MobileZero-click Messaging → Image Parser Chains ios-pentesting

☧ CPTS · ordered posts

Locked

Unlock with your Main_Key through local GPG.

Start the local GPG helper

In your cheatsheet checkout, run:

npm run unlock:helper

Open the link it prints, or paste its pairing code below. Keep the terminal open until GPG finishes.

Import an index you already decrypted

Download the encrypted index, then decrypt with GPG:

gpg --output report-index.json --decrypt report-index.gpg

Your private key stays in GPG. The decrypted index is saved in this browser so you can reopen it after navigation, refreshes and restarts. Lock this browser or clear this site's browser data to remove the saved index. Nothing is uploaded.