skills.rest
gglessner
gglessnerCOMMUNITY
Explore all skills by this author →
GitHub

corellium-mcp

Orchestrate mobile penetration testing with Corellium virtual devices and Parley traffic interception.

2|Updated Feb 16, 2026
Search Tags:#automation#security assessment#traffic interception#mobile pentesting#corellium#parley
One-click install
npx skills add https://github.com/gglessner/Corellium-MCP --skill corellium-mcp
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: corellium-mcp
Source: https://github.com/gglessner/Corellium-MCP/tree/main/.cursor/skills/corellium-mcp
Command: npx skills add https://github.com/gglessner/Corellium-MCP --skill corellium-mcp

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) and references (resource) components.

What problem does it solve?

This Skill automates complex mobile penetration testing workflows by orchestrating virtual device control and network traffic interception, enabling comprehensive security assessments.

Core Features & Use Cases

  • Automated Security Assessments: Run MATRIX assessments aligned with OWASP MASVS and MASTG.
  • Active MITM & Rewriting: Intercept, analyze, and rewrite network traffic on-the-fly using AI-authored Python modules.
  • Deep Device Visibility: Utilize CoreTrace for undetectable syscall monitoring and filesystem analysis.
  • Use Case: Automatically map authorization boundaries by having the AI increment user IDs in API requests (via Parley) and observing the app's reaction and data processing (via Corellium's CoreTrace).

Quick Start

Use the corellium-mcp skill to set up a proxy for api.targetapp.com, install the target app, and then run a security assessment.

Frequently Asked Questions about corellium-mcp

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I automate mobile pentesting for iOS and Android applications?▼

Automated mobile pentesting is orchestrated by integrating Corellium virtual device management with Parley active traffic interception to perform dynamic analysis and security assessments on iOS and Android apps.

Can I intercept and rewrite network traffic on-the-fly during a security assessment?▼

Active traffic interception and rewriting are supported using AI-authored Python modules, allowing you to analyze and manipulate network traffic dynamically during mobile app security assessments.

What is the best way to map authorization boundaries and test for OWASP MASVS compliance?▼

Mapping authorization boundaries is achieved by having the AI increment user IDs in API requests via Parley and observing the app's data processing through Corellium's CoreTrace, aligning with OWASP MASVS methodologies.

Does this approach support undetectable syscall monitoring for dynamic analysis?▼

Undetectable syscall monitoring and filesystem analysis are provided through CoreTrace, giving deep device visibility during dynamic analysis without alerting the target application.

How do I set up a proxy to run a security assessment on a target mobile app?▼

To run a security assessment, you set up a proxy for the target app's API domain, install the app on a Corellium virtual device, and then initiate the automated testing workflow.

Related Skills

Explore More Software Engineering Skills→
alexfazioalexfazio
159

cc-trace

Intercept and inspect Claude Code API traffic using mitmproxy.

Community
Advanced
briiirussellbriiirussell
345

mobile-audit

Audit iOS and Android apps against OWASP MASVS and MASTG.

Community
Advanced
jassicsjassics
6

mobile-pentest

Automate MASTG-based mobile penetration tests on Android and iOS apps.

Community
Advanced
florianbuetowflorianbuetow
12

secrets

Scans source code, configuration files, and git history for hardcoded credentials, API keys, tokens, and private keys.

Community
Advanced