drozer
mvt
Our great sponsors
drozer | mvt | |
---|---|---|
2 | 91 | |
3,610 | 9,809 | |
8.3% | 1.8% | |
8.2 | 8.7 | |
6 days ago | 3 days ago | |
Python | Python | |
GNU General Public License v3.0 or later | GNU General Public License v3.0 or later |
Stars - the number of stars that a project has on GitHub. Growth - month over month growth in stars.
Activity is a relative number indicating how actively a project is being developed. Recent commits have higher weight than older ones.
For example, an activity of 9.0 indicates that a project is amongst the top 10% of the most actively developed projects that we are tracking.
drozer
-
Is drozer still relevant for mobile pentest?
Does anyone still use drozer for mobile pentest nowadays? I've just checked it's github page https://github.com/FSecureLABS/drozer and found that the development had been stopped.
-
Google have declared Droidscript is malware
Drozer does (did?) this, except with Python rather than JS. https://github.com/FSecureLABS/drozer
mvt
-
Exploiting the iPhone 4
Amnesty International released Mobile Verification Toolkit to check your phone for malware, by checking encrypted backups on your computer. https://github.com/mvt-project/mvt
-
Meduza co-founder's phone infected with Pegasus
From what I was able to read previously, it has no ability to spread by itself and has to be installed by a targeted attack. There is also a tool from Amnesty International that can detect it (or was able to): https://github.com/mvt-project/mvt
It is a race though, so past info may no longer be valid. However, I doubt it will ever be able to spread by itself, since it uses very expensive zero days to infect and they will be quickly fixed after detection.
-
NSO Group iPhone Zero-Click, Zero-Day Exploit Captured in the Wild
Public Service Announcement:
Amnesty International has a program on GitHub with Citizens Lab for those keeping an eye out for additional protections
https://github.com/mvt-project/mvt
MVT (Mobile Verification Toolkit) helps with conducting forensics of mobile devices in order to find signs of a potential compromise.
-
As recommended, I ask it here : how can I find out if my phone is being tapped, and what should I do if it is?
You can do a backup of your phone and analyze said backup using digital forensics to see if for example "automated software" will detect any of the more mainstream spyware/hacks. You can use mobile verification toolkit (mvt) to do this, but it won't detect everything. It is however a good start, you can investigate the basic results with limited knowledge and if something is detected you can further it up to a digital forensics company because it will very highly likely be beyond your qualifications to analyze by yourself. Hope this helps.
- How do I download this on iPhone
-
I dont know if i downloaded malware
I was extremly paranoid i got a virus a few months ago and i think i may have downloaded something. Its been more thank half a year and just remebered that i tried to download something from here,https://github.com/mvt-project/mvt i dont know if i was even sucessful, i am fully updated ios, cant find anything in files so i dont think i had it for very long and prob dealted after a whille
- iOS 16.5.1 TriangleDB spyware
-
Can anyone hack my phone via sending a WhatsApp Photo? How to know it?
If you wanna check your phone, maybe try using this: https://github.com/mvt-project/mvt
- Disabling Apple from Spying on You
-
Extent of getting hacked for iPhone vs Android
if android, this is available -- https://github.com/mvt-project/mvt
What are some alternatives?
objection - 📱 objection - runtime mobile exploration
hardened_malloc - Hardened allocator designed for modern systems. It has integration into Android's Bionic libc and can be used externally with musl and glibc as a dynamic library for use on other Linux-based platforms. It will gain more portability / integration over time.
termux-packages - A package build system for Termux.
whatsapp-media-decrypt - Decrypt WhatsApp encrypted media files
SQLMap - Automatic SQL injection and database takeover tool
WhatsDump - Extract WhatsApp private key from any non-rooted Android device (Android 7+ supported)
AppWarden
AMDH - Android Mobile Device Hardening
capacitor - Build cross-platform Native Progressive Web Apps for iOS, Android, and the Web ⚡️
XiaomiADBFastbootTools - A simple tool for managing Xiaomi devices on desktop using ADB and Fastboot
RearGen - Native based fast android app development framework with html/css/js with modern features
WebKit - Home of the WebKit project, the browser engine used by Safari, Mail, App Store and many other applications on macOS, iOS and Linux.