skills.rest
securityfortech
securityfortechOFFICIAL
Explore all skills by this author →
WebsiteGitHub

mobile-weak-crypto

Detect weak cryptography and hardcoded secrets in Android and iOS apps.

6|1|Updated Mar 9, 2026
Search Tags:#ios#cryptography#android#vulnerability detection#mobile security#masvs
One-click install
npx skills add https://github.com/securityfortech/hacking-skills --skill mobile-weak-crypto
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: mobile-weak-crypto
Source: https://github.com/securityfortech/hacking-skills/tree/main/skills/mobile/crypto/mobile-weak-crypto
Command: npx skills add https://github.com/securityfortech/hacking-skills --skill mobile-weak-crypto

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) and references (resource) components.

What problem does it solve?

This Skill identifies and helps fix critical vulnerabilities in mobile application cryptography, protecting sensitive data from unauthorized access and manipulation.

Core Features & Use Cases

  • Vulnerability Detection: Pinpoints weak algorithms (DES, RC4), insecure modes (ECB), hardcoded keys, predictable IVs, and improper key storage.
  • Platform Coverage: Analyzes both Android and iOS applications.
  • Use Case: A security auditor uses this Skill to quickly scan a new mobile banking app for common cryptographic flaws before release, ensuring compliance with security standards like MASVS.

Quick Start

Analyze the provided Android application's decompiled code for instances of weak cryptographic algorithms and hardcoded keys.

Frequently Asked Questions about mobile-weak-crypto

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I detect weak cryptography in Android and iOS applications?▼

Detect weak cryptography in mobile applications by analyzing decompiled code with tools like jadx, apktool, and Frida to identify insecure algorithms, hardcoded keys, and improper key storage satisfying MASVS requirements.

What mobile security vulnerabilities MASVS-CRYPTO requirements cover?▼

MASVS-CRYPTO requirements cover vulnerabilities in mobile applications including weak algorithm choices like DES or RC4, insecure ECB modes, hardcoded keys, and improper key management. Analyzing these ensures mobile app data protection.

Does this vulnerability detection process work with both Android APK and iOS apps?▼

Yes, vulnerability detection works with both Android and iOS apps. It analyzes decompiled code and runtime environments using Frida and objection to identify insecure cryptographic patterns and hardcoded secrets across both platforms.

How do I scan decompiled mobile app code for hardcoded encryption keys?▼

Scan decompiled mobile app code for hardcoded encryption keys by using static analysis tools like jadx or apktool to parse the application source, identifying embedded cryptographic secrets and insecure implementation patterns.

Can I use Frida and objection to find insecure crypto patterns in mobile apps?▼

Yes, you can use Frida and objection to find insecure crypto patterns in mobile apps. These tools facilitate dynamic analysis to detect improper key management and weak algorithm usage during application runtime.

What is the best way to ensure mobile banking apps comply with MASVS-CRYPTO standards?▼

Ensure mobile banking apps comply with MASVS-CRYPTO standards by performing comprehensive vulnerability detection using MobSF and Frida to verify proper algorithm choices and secure key management before release.

Related Skills

Explore More Software Engineering Skills→
philo-grovesphilo-groves
12

maxtac-re-jadx

Reverse engineer Android APKs and DEX files with Jadx.

Community
Advanced
zhanglimaozhanglimao
23

cryptographic-failures

Audit cryptographic implementations for weak algorithms, key management, and TLS vulnerabilities.

Community
Advanced
woohyun212woohyun212
21

mobile-pentest

Perform end-to-end penetration testing of Android and iOS mobile applications.

Community
Advanced
RIMTHAN-LABRIMTHAN-LAB
1

owasp-mobile-security-checker

Analyze Flutter applications for OWASP Mobile Top 10 vulnerabilities.

Official
Intermediate