Android Nougat changed the default behavior for apps, so installing the Burp CA to user certs no longer works. Here’s two ways to bypass it

A collection of android security related resources - ashishb/android-security-awesome

Documentation:. Contribute to dpnishant/appmon development by creating an account on GitHub.

Damn Vulnerable Hybrid Mobile App (DVHMA) is an hybrid mobile app (for Android) that intentionally contains vulnerabilities. - logicalhacking/DVHMA

Mobile security trainings based on android. Contribute to enovella/androidtrainings development by creating an account on GitHub.

Cydia modified for iOS 11/Electra. Contribute to ElectraJailbreak/cydia development by creating an account on GitHub.

iOS 11.1.2 (15B202) Jailbreak. Contribute to Coalfire-Research/iOS-11.1.2-15B202-Jailbreak development by creating an account on GitHub.

Droidstat-x is a static and dynamic analysis framework for Android applications, developed to create a consistent methodology for security assessments, debuted at BSides Lisbon in 2015. The tool generates an XMind map with information on vulnerabilities identified…

This article is meant to be a collection of things I found useful to know while building an encryption layer within an Android app. If you…

I have been doing more of mobile application security testing these days and I found the list of intentionally vulnerable apps…

During the process of analyzing android malware, we usually meet some APK samples which hide or encrypt their main logic code.  Only at some point does the actual code exist in the memory, so we ne…

StaCoAn is a crossplatform tool which aids developers, bugbounty hunters and ethical hackers performing static code analysis on mobile applications. - vincentcox/StaCoAn

If you read through the disclosed bug bounty reports on platforms such as hackerone.com it is clear that most bug bounty hunters are…