MobileApp-Pentest-Cheatsheet
Consult concise notes on mobile application penetration-testing topics with this cheat sheet.
About MobileApp-Pentest-Cheatsheet
This GitHub repository is a cheat sheet of concise notes on mobile application penetration-testing topics for Android and iOS. Its stated purpose is to collect high-value information on specific testing topics, and it includes a checklist mapped to the OWASP Mobile Risk Top 10.
The notes are organized into sections for each platform, covering reverse engineering and static analysis, dynamic and runtime analysis, network analysis and server-side testing, bypassing root detection and SSL pinning, and security libraries. The page also lists third-party tools and frameworks, such as virtual machine distributions, MobSF, Needle, Objection, and APKTool, with short descriptions and some command examples. The excerpt reviewed does not show every section, and it describes the tools rather than providing a complete testing guide.
Key features
- Concise notes on mobile app penetration-testing topics for Android and iOS
- Checklist mapped to the OWASP Mobile Risk Top 10
- Sections on static analysis, runtime analysis, and network testing for each platform
- Notes on bypassing root detection and SSL pinning
- Directory of mobile security tools, distributions, and frameworks with short descriptions
- Command examples for decoding and rebuilding Android APK files with APKTool
Best for: Security testers and students who want a quick reference to mobile application penetration-testing topics and related tools.
Good for
- Organizes information into short, topic-specific notes for quick reference
- Maps its checklist to the OWASP Mobile Risk Top 10
- Covers both Android and iOS
Watch out for
- Described as a concise collection, so it is not a full testing guide
- Links to and describes third-party tools, which have their own requirements and documentation
MobileApp-Pentest-Cheatsheet at a glance
- Category
- Privacy & Security › Security Tools
- Type
- Open-source project
- Pricing
- Not confirmed. Check the site
- Platforms
- Android, iOS
- Open source
- Not stated
- Language
- English
- Last checked
- Oct 6, 2026 · Online when checked
- Listed
- Oct 5, 2026
Guides for Security Tools
MobileApp-Pentest-Cheatsheet alternatives
Tools and sites you could use instead, ranked by how closely they match.
Set up a Windows virtual machine for reverse engineering with FLARE-VM’s software installation scripts.
Open source
24 alternatives
Analyze and reverse engineer software with radare2, a Unix-like framework and command-line toolkit.
Browse plugins for x64dbg, a Windows debugger used for reverse engineering and malware analysis.
Use reference sheets for reverse engineering, binary analysis, and assembly programming tools.
Open source
24 alternatives
Browse Android reverse engineering training, tools, and learning resources in this curated repository.
Open source
24 alternatives
Browse community-maintained materials and plugins for the Ghidra reverse engineering framework.
Popular in Security Tools
Well-known listings from the same topic.
Online Password Hash Crackonlinehashcrack.comOTP Authapps.apple.com/app/otp-auth/id659877384MD5 reverse lookupmd5.gromweb.comMozilla SSLssl-config.mozilla.orgchallenges.rechallenges.reGoPlus Locker V3gopluslabs.io
MobileApp-Pentest-Cheatsheet FAQ
Is the checklist mapped to a recognized standard?
Yes. The cheat sheet states that its checklist is mapped to the OWASP Mobile Risk Top 10.
Which platforms does the cheat sheet cover?
It covers Android and iOS, with separate sections for each platform.
Does the repository include checklist files?
Yes. The repository includes two Excel checklist files, one from 2017 and one labeled as a Mobile App Security Checklist, version 1.2.
Is something wrong or out of date?
Tell us and an editor will check it.
Own this website?
Claim this listing
Claim the listing and suggest updates yourself. An editor checks every claim first.