Identify and exploit security weaknesses in iOS and Android apps via OWASP MASTG.
npx skills add https://github.com/DCx7C5/ai-marketplace --skill pentest-skill-md
Please help me install this Agent Skill. Skill: pentest-SKILL.md Source: https://github.com/DCx7C5/ai-marketplace/tree/main/skills/mobile/pentest Command: npx skills add https://github.com/DCx7C5/ai-marketplace --skill pentest-skill-md
Conducts comprehensive mobile application penetration testing for iOS and Android, following the OWASP Mobile Application Security Testing Guide (MASTG) to identify vulnerabilities across data storage, network communication, authentication, cryptography, and platform-specific security controls. The tester performs static analysis of binaries, dynamic runtime analysis, and API security testing to evaluate the complete mobile attack surface.
Run a full OWASP MASTG-compliant mobile pentest on the target iOS/Android app to generate a prioritized findings report.
High-intent search queries and answers about installing and using this skill.
A mobile app pentest following OWASP MASTG uses static analysis, dynamic runtime testing, and API security checks to identify vulnerabilities in data storage, network communications, authentication, and cryptography across iOS and Android applications.
OWASP MASTG security testing is a comprehensive methodology to evaluate mobile application attack surfaces by inspecting binaries for hardcoded secrets, assessing runtime behavior, and validating backend endpoints to uncover exploitable weaknesses.
Yes, you can test backend API security endpoints during an iOS security assessment to validate access controls, check data exposure during mobile interactions, and identify misconfigurations in network communications.
To check Android apps for hardcoded secrets and insecure storage, perform static analysis on the binaries and conduct dynamic runtime testing to evaluate platform-specific security controls and data storage mechanisms.
Yes, mobile app dynamic testing requires tooling for runtime instrumentation and debugging techniques to assess runtime behavior, resist tampering, and perform comprehensive security testing on the target application.
The best way to identify mobile app cryptography vulnerabilities is to conduct static analysis of binaries and dynamic runtime testing to evaluate platform-specific security controls and verify cryptographic implementations.
AcczdyTest iOS and Android apps for vulnerabilities using OWASP MASTG.
calcosmicAudit completed code phases for vulnerabilities and generate a SECURITY.md with prioritized remediation.
AcczdyAssess REST and GraphQL API endpoints for OWASP API Security Top 10 vulnerabilities.
woohyun212Perform end-to-end penetration testing of Android and iOS mobile applications.
