skills.rest
alicangnll
alicangnllCOMMUNITY
Explore all skills by this author →
WebsiteGitHub

Mobile Pentest

Automate Android and iOS penetration testing workflows via ADB and SSH.

Updated Aug 6, 2026
Search Tags:#data extraction#penetration testing#exploitation#vulnerability scanning#mobile pentest#Android ADB#iOS SSH
One-click install
npx skills add https://github.com/alicangnll/Spectra --skill mobile-pentest-alicangnll
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: Mobile Pentest
Source: https://github.com/alicangnll/Spectra/tree/main/spectra/skills/builtins/mobile-pentest
Command: npx skills add https://github.com/alicangnll/Spectra --skill mobile-pentest-alicangnll

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill requires adb, ssh, scp, mobsf, qark, and includes scripts (resource) and references (resource) components.

What problem does it solve?

This Skill provides an end-to-end automation of mobile penetration testing for Android and iOS devices, eliminating the need for manual intervention in routine tasks and significantly speeding up the vulnerability assessment process.

Core Features & Use Cases

  • Automated Device Connection: Connects to Android and iOS devices via ADB, SSH, or VNC for seamless interaction.
  • Device Control Automation: Performs a range of automation tasks like app installation, permission modification, activity starting, intent firing, content provider query, app data extraction, log monitoring, and more.
  • Exploit Automation: Supports automated exploitation of vulnerabilities through APK manipulation and tweak installation on iOS devices, including sandbox escape, keychain extraction, and pasting content.
  • Data Extraction Automation: Extracts application data from Android and iOS devices using tools like ADB backup, SCP, tar, and SSH commands.
  • Automated Scanning: Automates security scanning of mobile applications using MobSF and QARK for vulnerability identification.
  • Reporting Automation: Automates report generation by compiling results from different stages into a comprehensive report.

Quick Start

To connect to an Android device and install an application, run: /mobile-pentest "adb connect emulators:5554 install /path/to/app.apk"

Frequently Asked Questions about Mobile Pentest

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I automate mobile penetration testing for Android and iOS devices?▼

Mobile penetration testing is automated by connecting to Android and iOS devices via ADB and SSH, then executing scripts for device control, exploit delivery, data extraction, and vulnerability scanning without manual intervention.

Can I use MobSF and QARK to scan mobile applications for vulnerabilities automatically?▼

Yes, MobSF and QARK are utilized to automate security scanning of mobile applications, identifying vulnerabilities and compiling the results into a comprehensive report for both Android and iOS platforms.

How do I extract application data from an Android or iOS device during a penetration test?▼

Application data is extracted using ADB backup for Android and SCP, tar, and SSH commands for iOS, allowing you to pull app data directly from the connected device during penetration testing.

Do I need to know Android ADB and iOS SSH to perform automated exploit delivery?▼

Yes, knowledge of Android ADB and iOS SSH is required to interact with the devices and utilize the automation scripts for APK manipulation, sandbox escape, and tweak installation during exploit delivery.

What is the best way to automate app installation and permission modification on an emulator?▼

The best way to automate app installation and permission modification is by connecting to the emulator via ADB and firing automation scripts that handle app installation, activity starting, and intent firing.

Does this penetration testing workflow automate report generation from vulnerability scans?▼

Yes, the workflow automates report generation by compiling results from device connection, vulnerability scanning, data extraction, and exploit delivery stages into a single comprehensive report.

Related Skills

Explore More Software Engineering Skills→
asnar00asnar00
1

eos-deploy-usb

Build and deploy Android APKs to USB-connected devices via ADB.

Community
Advanced
zapabobzapabob
2

sec-audit

Scan dependencies and custom code for security vulnerabilities.

Community
Advanced
kiwamizamuraikiwamizamurai
7

writeup-generator

Generate CTF challenge writeups as README.md files using templates/writeup.md.

Community
Advanced
xlelibertyxleliberty

security-pen-testing

Perform offensive security assessments with vulnerability scanning and penetration testing.

Community
Advanced