Android Application Security Testing Part-10: Important Tools

Important Tools for Android App VAPT

§  Operating Systems with Inbuilt tools: Android Tamer ; santoku

§  Test Environment for Windows OS: Pentest box + genymotion (Android device or Emulator)

§  Automated Testing Tools: AndroBugs_Framework; MobSF

§  Manual Testing Tools

§  Static Analysis: apktool, dex2jar, JD-GUI,

§  Dynamic Analysis: Burp Suite

§  Forensic Analysis: ADB

§  Vulnerable Tools

1.    https://github.com/payatu/diva-android

2.    https://github.com/jackMannino/OWASP-GoatDroid-Project

3.    https://github.com/dineshshetty/Android-InsecureBankv2

4.    https://github.com/intrepidusgroup/ig-learner

YOU CAN DOWNLOAD ALL THE TOOLS BY USING BELOW MENTIONED LINKS.

More Tools:

·         https://github.com/ashishb/android-security-awesome

·         https://github.com/OWASP/owasp-mstg/blob/master/Document/0x08-Testing-Tools.md

Useful Links:

https://androidtamer.com/

https://santoku-linux.com/

https://pentestbox.org/

https://www.genymotion.com/

https://github.com/AndroBugs/AndroBugs_Framework

https://github.com/MobSF/Mobile-Security-Framework-MobSF

https://portswigger.net/burp/communitydownload

https://labs.mwrinfosecurity.com/tools/drozer/

https://ibotpeaches.github.io/Apktool/

https://sourceforge.net/projects/dex2jar/