skilld
All skills
hardw00t avatar

/android-pentest

@f9bb3b2
by Hardik Mehtahardw00t/ai-security-arsenal104 stars
15

Comprehensive Android mobile application penetration testing with rooted-device ADB and Frida-based MCP tooling. Covers OWASP MASTG full methodology: recon, static + dynamic analysis, SSL/root bypass, IPC fuzzing, data exfiltration, crypto audit, and reporting. Triggers on requests to pentest Android apps, analyze APKs, bypass mobile security controls, or run MASVS/MASTG assessments.

Ask your Agent

Use this Skill: https://skilld.dev/gh/hardw00t/ai-security-arsenal/android-pentest

This session only. Nothing lands on disk.

examplesnew_assessment.md

≈304 tokens on demand. Your agent reads this file only when SKILL.md points to it.

Example: New Assessment Kickoff

Target: com.megabank.mobile (SSL pinning + root detection).

Tool-call blueprint

# Phase 1 — recon (parallel)
info = get_app_info("com.megabank.mobile")          # version, permissions, SDK
apk  = pull_apk("com.megabank.mobile")              # → /tmp/com.megabank.mobile.apk
comp = list_exported_components("com.megabank.mobile")

# Phase 2 — spawn + bypass (sequential)
pid = frida_spawn("com.megabank.mobile")
frida_bypass_ssl(pid)
frida_bypass_root(pid)

# Phase 3 — interception
setup_proxy("emulator-5554", "192.168.1.100", 8080)

Expected observations to record

  • Target SDK, min SDK, dangerous permissions list
  • Exported components: .DeepLinkActivity (scheme megabank://), .ShareReceiveActivity, provider.DocumentProvider, .PushReceiver
  • Frida output: SSL pinning bypass active - hooked N methods, Root detection bypass active

Next-step triage

  1. Deep link handler → URL scheme hijacking (see workflows/deeplink_intent_testing.md)
  2. DocumentProvider → path traversal
  3. PushReceiver → broadcast injection
  4. Kick off workflows/complete_assessment.md phases 3-6 in parallel; delegate static-APK review to a sub-agent.

Source: SKILL.md on GitHub

Third-party checks

1 warning16d4 checks · Risk SAFE
  • Gen Agent Trust Hub16d

    This skill provides a comprehensive environment and automated workflows for Android mobile application penetration testing. It interfaces with standard industry tools like ADB and Frida to perform security audits aligned with the OWASP MASTG methodology. While it performs sensitive operations like command execution and remote tool downloads, these are transparently implemented for its stated purpose using trusted sources.

  • Socket16d

    21 alerts: gptSecurity, gptAnomaly

  • Snyk16d

    Risk: LOW · No issues

  • ZeroLeaks5mo

    2 findings · Score: 80/100

Provenance

Signed by skilld at f9bb3b2. This ties the file your Agent reads to that commit on GitHub. It does not review the instructions.

Last checked against GitHub 2 months ago.

Steadyupdated 6 months ago

README badge

README badge for hardw00t/ai-security-arsenal/android-pentest