// HackTricks · CC BY-NC 4.0
Mobile
67 pages · adapted from upstream with source attribution on every page.
001 Mobile Abusing Android Media Pipelines & Image Parsers android-app-pentesting 002 Mobile ADB Commands android-app-pentesting 003 Mobile Air Keyboard Remote Input Injection (Unauthenticated TCP / WebSocket Listener) ios-pentesting 004 Mobile Android Accessibility Service Abuse android-app-pentesting 005 Mobile Android Anti-Instrumentation & SSL Pinning Bypass (Frida/Objection) android-app-pentesting 006 Mobile Android APK Checklist mobile-pentesting 007 Mobile Android Application-Level Virtualization (App Cloning) android-app-pentesting 008 Mobile Android Applications Basics android-app-pentesting 009 Mobile Android Applications Pentesting android-app-pentesting 010 Mobile Android Enterprise Work Profile Required-App Replacement android-app-pentesting 011 Mobile Android HCE NFC/EMV Relay Attacks android-app-pentesting 012 Mobile Android IME / InputMethodService Abuse (Malicious Keyboards) android-app-pentesting 013 Mobile Android In-Memory Native Code Execution via JNI (shellcode) android-app-pentesting 014 Mobile Android Physical Attacks android-app-pentesting 015 Mobile Android Task Hijacking android-app-pentesting 016 Mobile Android VPN Bypass android-app-pentesting 017 Mobile APK decompilers android-app-pentesting 018 Mobile AVD - Android Virtual Device android-app-pentesting 019 Mobile Baseband/Modem and SoC Isolation Exploitation android-app-pentesting 020 Mobile Bypass Biometric Authentication (Android) android-app-pentesting 021 Mobile Content Protocol in Android android-app-pentesting 022 Mobile Cordova Apps mobile-pentesting 023 Mobile Drozer Tutorial drozer-tutorial 024 Mobile Exploiting a Debuggable Application android-app-pentesting 025 Mobile Exploiting Content Providers drozer-tutorial 026 Mobile Extracting Entitlements from Compiled Application ios-pentesting 027 Mobile Firmware-level Android Backdoor via libandroidruntime Zygote Injection android-app-pentesting 028 Mobile Flutter android-app-pentesting 029 Mobile Frida Tutorial frida-tutorial 030 Mobile Frida Tutorial 1 frida-tutorial 031 Mobile Frida Tutorial 2 frida-tutorial 032 Mobile Frida Tutorial 3 frida-tutorial 033 Mobile Google CTF 2018 - Shall We Play a Game? android-app-pentesting 034 Mobile Insecure In-App Update Mechanisms – Remote Code Execution via Malicious Plugins android-app-pentesting 035 Mobile Install Burp Certificate android-app-pentesting 036 Mobile Intent Injection android-app-pentesting 037 Mobile iOS App Extensions ios-pentesting 038 Mobile iOS Basic Testing Operations ios-pentesting 039 Mobile iOS Basics ios-pentesting 040 Mobile iOS Burp Suite Configuration ios-pentesting 041 Mobile iOS Custom URI Handlers / Deeplinks / Custom Schemes ios-pentesting 042 Mobile iOS Frida Configuration ios-pentesting 043 Mobile iOS Hooking with Objection ios-pentesting 044 Mobile iOS Pasteboard ios-pentesting 045 Mobile iOS Pentesting ios-pentesting 046 Mobile iOS Pentesting Checklist mobile-pentesting 047 Mobile iOS Pentesting without Jailbreak ios-pentesting 048 Mobile iOS Serialisation and Encoding ios-pentesting 049 Mobile iOS Testing Environment ios-pentesting 050 Mobile iOS UIActivity Sharing ios-pentesting 051 Mobile iOS Universal Links ios-pentesting 052 Mobile iOS WebViews ios-pentesting 053 Mobile itunesstored and bookassetd Sandbox Escape ios-pentesting 054 Mobile Make an APK Trust a User CA Certificate android-app-pentesting 055 Mobile Manual De-obfuscation Techniques android-app-pentesting 056 Mobile Objection Tutorial frida-tutorial 057 Mobile Play Integrity Attestation Bypass (SafetyNet Replacement) android-app-pentesting 058 Mobile React Native Application Analysis android-app-pentesting 059 Mobile Reversing Native Libraries android-app-pentesting 060 Mobile Shizuku Privileged API android-app-pentesting 061 Mobile Smali - Decompiling/[Modifying]/Compiling android-app-pentesting 062 Mobile Spoofing Your Location in Google Play Store android-app-pentesting 063 Mobile Tapjacking android-app-pentesting 064 Mobile Webview Attacks android-app-pentesting 065 Mobile WebView Protocol Handlers ios-pentesting 066 Mobile Xamarin Apps mobile-pentesting 067 Mobile Zero-click Messaging → Image Parser Chains ios-pentesting