Skills for Real Engineers. Straight from my .agents directory.
39 skills
offensive-mobile
Agent skill from
Mobile (Android + iOS) application penetration testing methodology. Covers static analysis (apktool/jadx for Android, class-dump/Hopper/IDA for iOS), dynamic instrumentation with Frida and Objection, SSL pinning bypass strategies, root/jailbreak detection bypass, deep-link / URL-scheme abuse, exported component attacks (Android activities, services, providers, receivers; iOS XPC, URL schemes, universal links), insecure data storage (SharedPrefs, KeyStore misuse, NSUserDefaults, Keychain ACL bypass), IPC / Intent redirection, WebView vulnerabilities (JavaScriptInterface, file:// access), Firebase/AWS/Azure misconfiguration leakage, mobile API testing, biometric/Face ID/Touch ID bypass, app-cloning and runtime patching, and mobile malware/RAT analysis primitives. Use for mobile pentest, bug bounty mobile triage, or app-store reconnaissance.
How to install offensive-mobile
install offensive-mobile
# install the Claude-Red pack with the skills CLI
npx skills add SnailSploit/Claude-Red# or add only this skill to Claude Code: copy the folder
Skills/mobile/offensive-mobile/
# into
~/.claude/skills/offensive-mobile/ (all projects)
.claude/skills/offensive-mobile/ (one project)
1# Mobile (Android + iOS) — Offensive Testing Methodology23## Quick Workflow451. Static: pull the IPA/APK, decompile, dump resources/strings, identify endpoints62. Dynamic: install on rooted/jailbroken device, hook with Frida, intercept TLS73. Map exported attack surface: deep links, URL schemes, exported components84. Storage / Keystore audit: where do secrets live, what protects them95. API: every backend the app talks to is your scope — test like a web app1011---1213## Lab Setup1415### Android16- Rooted device or **Genymotion** / Android Studio AVD with `userdebug` build17- **Magisk** for systemless root; **LSPosed** for hooks; **Frida server** matching device arch18- **Burp / Mitmproxy** with system-trusted CA via Magisk module (`MagiskTrustUserCerts`)1920### iOS21- Jailbroken device (palera1n / checkra1n / Dopamine depending on iOS version)22- **Frida** + **Objection** + **Filza** + **SSH via USB (iproxy 2222 22)**23- Burp CA installed via Settings → General → Device Management → Certificate Trust Settings2425---2627## Static Analysis2829### Android3031```bash32# Decode resources + smali33apktool d app.apk -o app3435# Decompile to Java36jadx -d app_src app.apk3738# Manifest review39xmllint --format app/AndroidManifest.xml | less40# Look for: android:exported="true", intent-filters, custom permissions, debuggable, allowBackup, networkSecurityConfig41```4243```bash44# Secrets and endpoints45grep -rE '(https?://[a-z0-9.-]+|api[_-]?key|secret|token|firebase|amazonaws|appspot)' app_src/46…
Excerpt shown under the repository's MIT license.
More skills in Claude-Red
Keep exploring
Similar skill repositories
An agentic skills framework & software development methodology that works.
15 skills
Public repository for Agent Skills
20 skills
Makes your AI agent think like the laziest senior dev in the room. The best code is the code you never wrote.
CCCU6 skills
An AI skill that provides design intelligence for building professional UI/UX across multiple platforms.
CCCXCUGH6 skills
Persistent Context Across Sessions for Every Agent – Captures everything your agent does during sessions, compresses it with AI, and injects relevant context back into future sessions. Works with Claude Code, OpenClaw, Codex, Gemini, Hermes, Copilot, OpenCode + More
CCCXGHGM+135 skills