Individual skill
android-pentest
Comprehensive Android mobile application penetration testing with rooted-device ADB and Frida-based MCP tooling. Covers OWASP MASTG full methodology: recon, static + dynamic analysis, SSL/root bypass, IPC fuzzing, data exfiltration, crypto audit, and reporting. Triggers on requests to pentest Android apps, analyze APKs, bypass mobile security controls, or run MASVS/MASTG assessments.
skills/android-pentest/SKILL.md
Source commit a1a68f7010a9c97b22336dcbcfde539c492a7109
What was checked
- Matches the observed repository HEAD
- Yes
- Scanner rules are current
- Yes
- Repository scan complete
- No
- Skill scan complete
- Yes
- Observed behavior
- Network or broad shell
- Last checked
- Nov 11, 2026
These are observations at the recorded commit, not a guarantee of safety. Review the source before running it.
Install this skill
Choose an agent in your Stack or copy a command below. Commands fetch the pinned commit and copy only this skill directory. Existing destinations are refused. Copying a command does not install anything.
An install command is unavailable: current rules, complete repository and skill scans, an eligible behavior level and a permitted license are required.
Repository context
- Repository stars (not skill ratings)
- 109
- Repository last updated
- Apr 19, 2026
- License
- Not available
Observed agent integration: No specific integration evidence. Standard SKILL.md installation does not imply verified compatibility.
- security Derived category
- data Derived category
- testing Derived category
- security-application Derived category
Files and excerpt
File metadata and permitted, redacted excerpts come from the recorded scan. Source links are pinned to that commit.
Browse files
SKILL.mdcore · 13,007 byteschecklists/owasp_mastg_full.mddoc · 11,925 byteschecklists/pre_engagement.mddoc · 6,484 byteschecklists/quick_wins.mddoc · 5,014 byteschecklists/report_items.mddoc · 5,971 bytesexamples/auth_bypass.mddoc · 1,501 bytesexamples/data_storage_investigation.mddoc · 1,302 bytesexamples/new_assessment.mddoc · 1,216 bytesmethodology/auth_testing.mddoc · 13,889 bytesmethodology/client_side_injection.mddoc · 12,896 bytesmethodology/crypto_testing.mddoc · 12,863 bytesmethodology/data_storage.mddoc · 11,039 bytesmethodology/dynamic_analysis.mddoc · 21,925 bytesmethodology/network_testing.mddoc · 7,019 bytesmethodology/recon.mddoc · 7,133 bytesmethodology/static_analysis.mddoc · 8,014 bytespayloads/intent_injection.txtdoc · 6,560 bytespayloads/path_traversal.txtdoc · 2,548 bytespayloads/sql_injection.txtdoc · 2,558 bytespayloads/xss_payloads.txtdoc · 2,025 bytespayloads/xxe_payloads.txtdoc · 3,664 bytesreferences/android_security_checklist.mddoc · 6,614 bytesreferences/bounty_patterns_2024_2026.mddoc · 7,856 bytesreferences/frida_snippets.mddoc · 11,124 bytesreferences/owasp_mobile_top10.mddoc · 7,576 bytesreferences/troubleshooting.mddoc · 2,702 bytesreporting/evidence_collector.pyruns · 23,109 bytesreporting/finding_schema.jsonasset · 7,134 bytesreporting/remediation_db.jsonasset · 27,393 bytesreporting/report_generator.pyruns · 32,510 bytesreporting/severity_calculator.pyruns · 19,701 bytesreporting/templates/executive_report.html.jinja2asset · 10,304 bytesreporting/templates/finding_card.html.jinja2asset · 8,293 bytesreporting/templates/styles.cssasset · 12,457 bytesreporting/templates/technical_report.html.jinja2asset · 17,097 bytesschemas/finding.jsonasset · 3,202 bytesscripts/common_commands.shruns · 12,098 bytesscripts/content_provider_scanner.pyruns · 9,318 bytesscripts/crypto_hooks.jsruns · 10,784 bytesscripts/extract_apk.pyruns · 4,309 bytesscripts/intent_fuzzer.pyruns · 12,373 bytesscripts/keystore_hooks.jsruns · 11,637 bytesscripts/method_tracer.jsruns · 9,091 bytesscripts/root_bypass.jsruns · 11,394 bytesscripts/ssl_pinning_bypass.jsruns · 9,016 bytessetup/burp_cert_installer.shruns · 16,473 bytessetup/check_environment.pyruns · 23,815 bytessetup/docker/.env.exampleasset · 420 bytessetup/docker/Dockerfileruns · 4,447 bytessetup/docker/certs/.gitkeepasset · 104 bytessetup/docker/docker-compose.ymlasset · 2,428 bytessetup/docker/scripts/entrypoint.shruns · 2,381 bytessetup/docker/scripts/setup-emulator.shruns · 4,471 bytessetup/docker/scripts/wait-for-boot.shruns · 978 bytessetup/frida_server_manager.pyruns · 22,863 bytessetup/magisk_module/META-INF/com/google/android/update-binaryruns · 2,612 bytessetup/magisk_module/META-INF/com/google/android/updater-scriptasset · 8 bytessetup/magisk_module/build_module.shruns · 4,729 bytessetup/magisk_module/common/pentest-utils.shruns · 6,545 bytessetup/magisk_module/customize.shruns · 3,797 bytessetup/magisk_module/module.propasset · 228 bytessetup/magisk_module/post-fs-data.shruns · 2,928 bytessetup/magisk_module/service.shruns · 5,429 bytessetup/setup_emulator.pyruns · 29,722 bytessetup/setup_pentest_env.shruns · 12,790 bytessetup/setup_physical_device.shruns · 21,484 bytestemplates/executive_summary.mddoc · 4,461 bytestemplates/finding_template.mddoc · 4,224 bytestemplates/remediation_guide.mddoc · 13,013 bytestemplates/technical_report.mddoc · 6,563 bytesworkflows/__init__.pyruns · 1,207 bytesworkflows/auth_bypass_scanner.pyruns · 28,451 bytesworkflows/auth_testing.mddoc · 1,714 bytesworkflows/base.pyruns · 18,681 bytesworkflows/complete_assessment.mddoc · 1,805 bytesworkflows/component_fuzzer.pyruns · 24,059 bytesworkflows/crypto_analysis.mddoc · 1,932 bytesworkflows/crypto_auditor.pyruns · 25,858 bytesworkflows/data_exfiltration.mddoc · 1,985 bytesworkflows/data_leakage_scanner.pyruns · 23,224 bytesworkflows/deeplink_intent_testing.mddoc · 1,952 bytesworkflows/full_assessment.pyruns · 28,761 bytesworkflows/network_security_scanner.pyruns · 25,995 bytesworkflows/pentest_runner.pyruns · 19,565 bytesworkflows/privacy_analyzer.pyruns · 34,186 bytesworkflows/ssl_pinning_bypass.mddoc · 1,577 bytes
No licensed excerpt is available. You can inspect the pinned source.