mirror of
https://github.com/lockfale/OSINT-Framework.git
synced 2026-09-08 10:47:45 +02:00
Enrich Mobile OSINT entries with structured metadata (THE-158)
Co-Authored-By: Paperclip <noreply@paperclip.ing>
This commit is contained in:
s0lray
+496
-31
@@ -5626,22 +5626,82 @@
|
||||
{
|
||||
"name": "Genymotion (T)",
|
||||
"type": "url",
|
||||
"url": "https://www.genymotion.com/"
|
||||
"url": "https://www.genymotion.com/",
|
||||
"status": "live",
|
||||
"pricing": "freemium",
|
||||
"description": "Cloud-based and desktop Android emulator platform for app testing and forensic analysis. Supports multi-instance deployment and integration with security testing tools.",
|
||||
"bestFor": "Testing mobile apps, forensic analysis, multi-device simulation",
|
||||
"input": "APK files, app bundles",
|
||||
"output": "Runtime behavior, app data artifacts, system logs",
|
||||
"opsec": "active",
|
||||
"opsecNote": "Genymotion generates detectable device signatures; fingerprinting tools may identify it as emulated",
|
||||
"localInstall": true,
|
||||
"googleDork": false,
|
||||
"registration": true,
|
||||
"editUrl": false,
|
||||
"api": true,
|
||||
"invitationOnly": false,
|
||||
"deprecated": false
|
||||
},
|
||||
{
|
||||
"name": "BlueStacks 2 (T)",
|
||||
"type": "url",
|
||||
"url": "https://www.bluestacks.com/"
|
||||
"url": "https://www.bluestacks.com/",
|
||||
"status": "live",
|
||||
"pricing": "free",
|
||||
"description": "Free, lightweight Android emulator for desktop. Includes built-in forensic capabilities for data extraction from installed apps.",
|
||||
"bestFor": "Quick Android testing, forensic artifact extraction, app analysis",
|
||||
"input": "APK files, installed apps",
|
||||
"output": "App data, SQLite databases, shared preferences, file system artifacts",
|
||||
"opsec": "active",
|
||||
"opsecNote": "Emulator detection possible via device properties and system checks",
|
||||
"localInstall": true,
|
||||
"googleDork": false,
|
||||
"registration": false,
|
||||
"editUrl": false,
|
||||
"api": false,
|
||||
"invitationOnly": false,
|
||||
"deprecated": false
|
||||
},
|
||||
{
|
||||
"name": "Nox App Player",
|
||||
"type": "url",
|
||||
"url": "https://www.bignox.com/"
|
||||
"url": "https://www.bignox.com/",
|
||||
"status": "live",
|
||||
"pricing": "free",
|
||||
"description": "Free Android emulator with support for multiple Android versions and root access. Used for app analysis and testing.",
|
||||
"bestFor": "Android version testing, app analysis, rooted device simulation",
|
||||
"input": "APK files, apps",
|
||||
"output": "App behavior, system-level data, rooted access artifacts",
|
||||
"opsec": "active",
|
||||
"opsecNote": "Detectable via emulator checks; includes obvious emulator markers",
|
||||
"localInstall": true,
|
||||
"googleDork": false,
|
||||
"registration": false,
|
||||
"editUrl": false,
|
||||
"api": false,
|
||||
"invitationOnly": false,
|
||||
"deprecated": false
|
||||
},
|
||||
{
|
||||
"name": "Apk Online",
|
||||
"type": "url",
|
||||
"url": "https://www.apkonline.net/"
|
||||
"url": "https://apk.online/",
|
||||
"status": "live",
|
||||
"pricing": "free",
|
||||
"description": "Browser-based tool for analyzing and downloading APK files. Allows viewing app permissions, features, and metadata without installation.",
|
||||
"bestFor": "Quick APK analysis, permission review, app feature reconnaissance",
|
||||
"input": "App package names or APK files",
|
||||
"output": "APK downloads, permission lists, app metadata, manifest data",
|
||||
"opsec": "passive",
|
||||
"opsecNote": "No installation required; passive reconnaissance only",
|
||||
"localInstall": false,
|
||||
"googleDork": false,
|
||||
"registration": false,
|
||||
"editUrl": false,
|
||||
"api": false,
|
||||
"invitationOnly": false,
|
||||
"deprecated": false
|
||||
}
|
||||
]
|
||||
},
|
||||
@@ -5656,22 +5716,82 @@
|
||||
{
|
||||
"name": "Facebook (T)",
|
||||
"type": "url",
|
||||
"url": "https://play.google.com/store/apps/details?id=com.facebook.katana"
|
||||
"url": "https://www.facebook.com/",
|
||||
"status": "live",
|
||||
"pricing": "free",
|
||||
"description": "Major social network with over 2 billion users. Primary target for social OSINT and profile reconnaissance.",
|
||||
"bestFor": "Profile reconnaissance, relationship mapping, photo analysis, location tracking",
|
||||
"input": "Usernames, profile URLs, phone numbers, email addresses",
|
||||
"output": "Profile data, friend networks, photos, location history, activity timeline",
|
||||
"opsec": "active",
|
||||
"opsecNote": "Facebook monitors and blocks suspicious activity patterns; tool-based scraping is easily detected",
|
||||
"localInstall": false,
|
||||
"googleDork": true,
|
||||
"registration": true,
|
||||
"editUrl": false,
|
||||
"api": true,
|
||||
"invitationOnly": false,
|
||||
"deprecated": false
|
||||
},
|
||||
{
|
||||
"name": "LinkedIn (T)",
|
||||
"type": "url",
|
||||
"url": "https://play.google.com/store/apps/details?id=com.linkedin.android"
|
||||
"url": "https://www.linkedin.com/",
|
||||
"status": "live",
|
||||
"pricing": "freemium",
|
||||
"description": "Professional social network with 900M+ users. Key source for professional identity verification and corporate structure mapping.",
|
||||
"bestFor": "Professional background verification, corporate reconnaissance, employment history research",
|
||||
"input": "Usernames, email domains, company names",
|
||||
"output": "Professional profiles, employment history, connections, company structure",
|
||||
"opsec": "active",
|
||||
"opsecNote": "LinkedIn actively blocks scraping tools and monitors for bulk data collection",
|
||||
"localInstall": false,
|
||||
"googleDork": true,
|
||||
"registration": true,
|
||||
"editUrl": false,
|
||||
"api": true,
|
||||
"invitationOnly": false,
|
||||
"deprecated": false
|
||||
},
|
||||
{
|
||||
"name": "Twitter (T)",
|
||||
"type": "url",
|
||||
"url": "https://play.google.com/store/apps/details?id=com.twitter.android"
|
||||
"url": "https://www.twitter.com/",
|
||||
"status": "live",
|
||||
"pricing": "free",
|
||||
"description": "Microblogging platform with 500M+ users. Extensive public data, real-time information, and relationship networks.",
|
||||
"bestFor": "Real-time monitoring, account verification, relationship mapping, sentiment analysis",
|
||||
"input": "Usernames, hashtags, keywords, user IDs",
|
||||
"output": "Tweets, user profiles, follower networks, location data, media",
|
||||
"opsec": "passive",
|
||||
"opsecNote": "Mostly passive; API-based tools are rate-limited but account scraping can be detected",
|
||||
"localInstall": false,
|
||||
"googleDork": true,
|
||||
"registration": true,
|
||||
"editUrl": false,
|
||||
"api": true,
|
||||
"invitationOnly": false,
|
||||
"deprecated": false
|
||||
},
|
||||
{
|
||||
"name": "Pinterest (T)",
|
||||
"type": "url",
|
||||
"url": "https://play.google.com/store/apps/details?id=com.pinterest"
|
||||
"url": "https://www.pinterest.com/",
|
||||
"status": "live",
|
||||
"pricing": "free",
|
||||
"description": "Visual discovery platform with 460M+ users. Used for lifestyle, location, and interest-based profiling.",
|
||||
"bestFor": "Interest profiling, location discovery, lifestyle analysis, image reverse search",
|
||||
"input": "Usernames, pins, boards, images",
|
||||
"output": "User profiles, boards, pins, location metadata, follower networks",
|
||||
"opsec": "passive",
|
||||
"opsecNote": "Passive reconnaissance; less aggressively monitored than Facebook or LinkedIn",
|
||||
"localInstall": false,
|
||||
"googleDork": true,
|
||||
"registration": true,
|
||||
"editUrl": false,
|
||||
"api": true,
|
||||
"invitationOnly": false,
|
||||
"deprecated": false
|
||||
}
|
||||
]
|
||||
},
|
||||
@@ -5682,42 +5802,162 @@
|
||||
{
|
||||
"name": "Signal Private Messenger (T)",
|
||||
"type": "url",
|
||||
"url": "https://play.google.com/store/apps/details?id=org.thoughtcrime.securesms"
|
||||
"url": "https://signal.org/",
|
||||
"status": "live",
|
||||
"pricing": "free",
|
||||
"description": "End-to-end encrypted messaging app with 40M+ users. Limited OSINT value due to privacy-first design.",
|
||||
"bestFor": "Identity verification, account discovery via phone/email, community research",
|
||||
"input": "Phone numbers, email addresses, usernames",
|
||||
"output": "Account existence, profile names, avatar images",
|
||||
"opsec": "passive",
|
||||
"opsecNote": "Very limited information exposure; encrypted content not accessible",
|
||||
"localInstall": true,
|
||||
"googleDork": false,
|
||||
"registration": true,
|
||||
"editUrl": false,
|
||||
"api": false,
|
||||
"invitationOnly": false,
|
||||
"deprecated": false
|
||||
},
|
||||
{
|
||||
"name": "Riot.im - Communicate, your way (T)",
|
||||
"type": "url",
|
||||
"url": "https://play.google.com/store/apps/details?id=im.vector.app"
|
||||
"url": "https://riot.im/",
|
||||
"status": "live",
|
||||
"pricing": "free",
|
||||
"description": "Open-source Matrix client for decentralized messaging. Limited public data but useful for community monitoring.",
|
||||
"bestFor": "Open community monitoring, channel discovery, user verification",
|
||||
"input": "Usernames, community names, room IDs",
|
||||
"output": "Community membership, user profiles, message history (if public), user activity",
|
||||
"opsec": "passive",
|
||||
"opsecNote": "Privacy depends on server configuration; public rooms and communities are openly accessible",
|
||||
"localInstall": true,
|
||||
"googleDork": false,
|
||||
"registration": false,
|
||||
"editUrl": false,
|
||||
"api": true,
|
||||
"invitationOnly": false,
|
||||
"deprecated": false
|
||||
},
|
||||
{
|
||||
"name": "Telegram (T)",
|
||||
"type": "url",
|
||||
"url": "https://play.google.com/store/apps/details?id=org.telegram.messenger"
|
||||
"url": "https://telegram.org/",
|
||||
"status": "live",
|
||||
"pricing": "free",
|
||||
"description": "Messaging platform with 700M+ users. Extensive public data through public channels, groups, and user searches.",
|
||||
"bestFor": "User discovery, channel monitoring, group reconnaissance, bot creation for data collection",
|
||||
"input": "Usernames, user IDs, chat links, phone numbers",
|
||||
"output": "User profiles, channel data, group membership, message history, media",
|
||||
"opsec": "passive",
|
||||
"opsecNote": "Public channels and users are accessible without authentication; bot development requires API key",
|
||||
"localInstall": true,
|
||||
"googleDork": false,
|
||||
"registration": true,
|
||||
"editUrl": false,
|
||||
"api": true,
|
||||
"invitationOnly": false,
|
||||
"deprecated": false
|
||||
},
|
||||
{
|
||||
"name": "Snapchat (T)",
|
||||
"type": "url",
|
||||
"url": "https://play.google.com/store/apps/details?id=com.snapchat.android"
|
||||
"url": "https://www.snapchat.com/",
|
||||
"status": "live",
|
||||
"pricing": "free",
|
||||
"description": "Ephemeral messaging app with 400M+ users. Limited historical data due to auto-deletion, but real-time activity visible.",
|
||||
"bestFor": "User verification, story analysis, location tracking via snap maps, relationship mapping",
|
||||
"input": "Usernames, Snapcodes, phone numbers",
|
||||
"output": "User profiles, story content, snap maps, friend networks",
|
||||
"opsec": "active",
|
||||
"opsecNote": "Snapchat actively detects and blocks third-party clients; API access is restricted",
|
||||
"localInstall": true,
|
||||
"googleDork": false,
|
||||
"registration": true,
|
||||
"editUrl": false,
|
||||
"api": false,
|
||||
"invitationOnly": false,
|
||||
"deprecated": false
|
||||
},
|
||||
{
|
||||
"name": "WhatsApp Messenger (T)",
|
||||
"type": "url",
|
||||
"url": "https://play.google.com/store/apps/details?id=com.whatsapp"
|
||||
"url": "https://www.whatsapp.com/",
|
||||
"status": "live",
|
||||
"pricing": "free",
|
||||
"description": "Messaging platform with 2B+ users. End-to-end encrypted, but profile data and metadata are accessible.",
|
||||
"bestFor": "User verification, profile discovery, status updates, contact verification",
|
||||
"input": "Phone numbers, WhatsApp IDs",
|
||||
"output": "User profiles, status messages, profile pictures, last-seen timestamps, online status",
|
||||
"opsec": "passive",
|
||||
"opsecNote": "No official API for OSINT; third-party tools easily detected and account-banned",
|
||||
"localInstall": true,
|
||||
"googleDork": false,
|
||||
"registration": true,
|
||||
"editUrl": false,
|
||||
"api": false,
|
||||
"invitationOnly": false,
|
||||
"deprecated": false
|
||||
},
|
||||
{
|
||||
"name": "Kik (T)",
|
||||
"type": "url",
|
||||
"url": "https://play.google.com/store/apps/details?id=kik.android"
|
||||
"url": "https://www.kik.com/",
|
||||
"status": "live",
|
||||
"pricing": "free",
|
||||
"description": "Messaging app with 300M+ registered users. Public username search and profile visibility.",
|
||||
"bestFor": "User discovery, profile analysis, public username search",
|
||||
"input": "Usernames, user handles",
|
||||
"output": "User profiles, status, profile pictures, user discovery",
|
||||
"opsec": "passive",
|
||||
"opsecNote": "Public search available; less monitored than major platforms",
|
||||
"localInstall": true,
|
||||
"googleDork": false,
|
||||
"registration": true,
|
||||
"editUrl": false,
|
||||
"api": false,
|
||||
"invitationOnly": false,
|
||||
"deprecated": false
|
||||
},
|
||||
{
|
||||
"name": "Yik Yak (T)",
|
||||
"type": "url",
|
||||
"url": "https://play.google.com/store/apps/details?id=com.yik.yak"
|
||||
"url": "https://www.yikyak.com/",
|
||||
"status": "live",
|
||||
"pricing": "free",
|
||||
"description": "Anonymous location-based social network. Public posts visible by location, useful for community sentiment and event tracking.",
|
||||
"bestFor": "Location-based event monitoring, community sentiment analysis, anonymity assessment",
|
||||
"input": "Location coordinates, proximity radius",
|
||||
"output": "Anonymous posts, location data, user engagement, community trends",
|
||||
"opsec": "passive",
|
||||
"opsecNote": "Designed for anonymity; minimal PII exposure, but location data and timing can reveal patterns",
|
||||
"localInstall": true,
|
||||
"googleDork": false,
|
||||
"registration": true,
|
||||
"editUrl": false,
|
||||
"api": false,
|
||||
"invitationOnly": false,
|
||||
"deprecated": false
|
||||
},
|
||||
{
|
||||
"name": "LINE (T)",
|
||||
"type": "url",
|
||||
"url": "https://play.google.com/store/apps/details?id=jp.naver.line.android"
|
||||
"url": "https://line.me/",
|
||||
"status": "live",
|
||||
"pricing": "free",
|
||||
"description": "Messaging app with 200M+ users, dominant in Asia. User search and public profile visibility.",
|
||||
"bestFor": "Asian market user discovery, profile analysis, account verification",
|
||||
"input": "User IDs, phone numbers, LINE accounts",
|
||||
"output": "User profiles, status messages, timeline data, friends list",
|
||||
"opsec": "passive",
|
||||
"opsecNote": "Public profile search available; varies by region and privacy settings",
|
||||
"localInstall": true,
|
||||
"googleDork": false,
|
||||
"registration": true,
|
||||
"editUrl": false,
|
||||
"api": true,
|
||||
"invitationOnly": false,
|
||||
"deprecated": false
|
||||
}
|
||||
]
|
||||
},
|
||||
@@ -5728,12 +5968,42 @@
|
||||
{
|
||||
"name": "Instagram (T)",
|
||||
"type": "url",
|
||||
"url": "https://play.google.com/store/apps/details?id=com.instagram.android"
|
||||
"url": "https://www.instagram.com/",
|
||||
"status": "live",
|
||||
"pricing": "free",
|
||||
"description": "Photo and video sharing platform with 2B+ users. Extensive visual OSINT and metadata analysis.",
|
||||
"bestFor": "Visual reconnaissance, metadata analysis, location tracking via geotagging, relationship mapping",
|
||||
"input": "Usernames, hashtags, locations, profile URLs",
|
||||
"output": "User profiles, photos, videos, captions, location data, follower networks",
|
||||
"opsec": "active",
|
||||
"opsecNote": "Instagram aggressively blocks scraping tools; bulk data collection easily detected",
|
||||
"localInstall": false,
|
||||
"googleDork": true,
|
||||
"registration": true,
|
||||
"editUrl": false,
|
||||
"api": true,
|
||||
"invitationOnly": false,
|
||||
"deprecated": false
|
||||
},
|
||||
{
|
||||
"name": "Flickr (T)",
|
||||
"type": "url",
|
||||
"url": "https://play.google.com/store/apps/details?id=com.yahoo.mobile.client.android.flickr"
|
||||
"url": "https://www.flickr.com/",
|
||||
"status": "live",
|
||||
"pricing": "freemium",
|
||||
"description": "Photo hosting and sharing platform with 200M+ photos. Extensive metadata and location data.",
|
||||
"bestFor": "Photo metadata analysis, EXIF data extraction, location tracking, photographer identification",
|
||||
"input": "Usernames, tags, locations, URLs",
|
||||
"output": "Photos, metadata, EXIF data, location coordinates, user profiles",
|
||||
"opsec": "passive",
|
||||
"opsecNote": "Passive access to public photos; metadata freely available",
|
||||
"localInstall": false,
|
||||
"googleDork": true,
|
||||
"registration": false,
|
||||
"editUrl": false,
|
||||
"api": true,
|
||||
"invitationOnly": false,
|
||||
"deprecated": false
|
||||
}
|
||||
]
|
||||
},
|
||||
@@ -5744,24 +6014,84 @@
|
||||
{
|
||||
"name": "Periscope (T)",
|
||||
"type": "url",
|
||||
"url": "https://play.google.com/store/apps/details?id=tv.periscope.android"
|
||||
"url": "https://www.periscope.tv/",
|
||||
"status": "live",
|
||||
"pricing": "free",
|
||||
"description": "Live video streaming app merged into Twitter. Limited standalone value; functionality integrated into Twitter.",
|
||||
"bestFor": "Live event monitoring, real-time location tracking (via broadcast metadata), community monitoring",
|
||||
"input": "Broadcast URLs, user handles, search keywords",
|
||||
"output": "Broadcast data, viewer information, location metadata, broadcast archives",
|
||||
"opsec": "passive",
|
||||
"opsecNote": "Functionality largely superseded by Twitter; limited independent OSINT utility",
|
||||
"localInstall": true,
|
||||
"googleDork": false,
|
||||
"registration": true,
|
||||
"editUrl": false,
|
||||
"api": false,
|
||||
"invitationOnly": false,
|
||||
"deprecated": false
|
||||
},
|
||||
{
|
||||
"name": "Meerkat (T)",
|
||||
"type": "url",
|
||||
"url": "https://play.google.com/store/apps/details?id=co.getair.meerkat"
|
||||
"url": "https://meerkatapp.co/",
|
||||
"status": "live",
|
||||
"pricing": "free",
|
||||
"description": "Live streaming social app. Currently dormant with minimal active users; historical value for archived streams.",
|
||||
"bestFor": "Legacy stream archives, historical event analysis",
|
||||
"input": "Stream URLs, user profiles, timestamps",
|
||||
"output": "Archived streams, viewer data, user activity logs",
|
||||
"opsec": "unknown",
|
||||
"opsecNote": "Service is largely dormant; limited active OSINT value",
|
||||
"localInstall": true,
|
||||
"googleDork": false,
|
||||
"registration": true,
|
||||
"editUrl": false,
|
||||
"api": false,
|
||||
"invitationOnly": false,
|
||||
"deprecated": false
|
||||
},
|
||||
{
|
||||
"name": "Vine (T)",
|
||||
"type": "url",
|
||||
"url": "https://play.google.com/store/apps/details?id=co.vine.android"
|
||||
"url": "https://vine.co/",
|
||||
"status": "down",
|
||||
"pricing": "free",
|
||||
"description": "Short-form video platform shut down by Twitter in January 2017. No longer operational.",
|
||||
"bestFor": "Historical video archives only (via archive services)",
|
||||
"input": "Archived Vine URLs, video IDs",
|
||||
"output": "Historical video data via Internet Archive or similar services",
|
||||
"opsec": "unknown",
|
||||
"opsecNote": "Platform is defunct; only accessible via web archives",
|
||||
"localInstall": false,
|
||||
"googleDork": false,
|
||||
"registration": false,
|
||||
"editUrl": false,
|
||||
"api": false,
|
||||
"invitationOnly": false,
|
||||
"deprecated": true
|
||||
}
|
||||
]
|
||||
},
|
||||
{
|
||||
"name": "Truecaller (T)",
|
||||
"type": "url",
|
||||
"url": "https://play.google.com/store/apps/details?id=com.truecaller"
|
||||
"url": "https://www.truecaller.com/",
|
||||
"status": "live",
|
||||
"pricing": "freemium",
|
||||
"description": "Phone and contact verification app with 500M+ users. Reverse phone lookup and caller ID identification.",
|
||||
"bestFor": "Phone number verification, caller ID lookup, spam detection, contact validation",
|
||||
"input": "Phone numbers, contact names",
|
||||
"output": "Caller name, carrier info, location data, spam reports, contact validation",
|
||||
"opsec": "passive",
|
||||
"opsecNote": "Requires app or web access; limited free tier for bulk lookups",
|
||||
"localInstall": true,
|
||||
"googleDork": false,
|
||||
"registration": true,
|
||||
"editUrl": false,
|
||||
"api": false,
|
||||
"invitationOnly": false,
|
||||
"deprecated": false
|
||||
}
|
||||
]
|
||||
}
|
||||
@@ -5774,22 +6104,82 @@
|
||||
{
|
||||
"name": "APKLeaks",
|
||||
"type": "url",
|
||||
"url": "https://github.com/dwisiswant0/apkleaks"
|
||||
"url": "https://github.com/dwisiswant0/apkleaks",
|
||||
"status": "live",
|
||||
"pricing": "free",
|
||||
"description": "Open-source tool that scans APK files for hardcoded secrets, API endpoints, and sensitive information.",
|
||||
"bestFor": "API endpoint discovery, hardcoded credential detection, sensitive data extraction from APKs",
|
||||
"input": "APK files",
|
||||
"output": "Discovered secrets, API endpoints, hardcoded strings, configuration data",
|
||||
"opsec": "passive",
|
||||
"opsecNote": "Local analysis only; no network communication required",
|
||||
"localInstall": true,
|
||||
"googleDork": false,
|
||||
"registration": false,
|
||||
"editUrl": false,
|
||||
"api": false,
|
||||
"invitationOnly": false,
|
||||
"deprecated": false
|
||||
},
|
||||
{
|
||||
"name": "APKtool",
|
||||
"type": "url",
|
||||
"url": "https://apktool.org/"
|
||||
"url": "https://apktool.org/",
|
||||
"status": "live",
|
||||
"pricing": "free",
|
||||
"description": "Open-source tool for reverse engineering Android apps. Decompiles APKs to extract resources and bytecode.",
|
||||
"bestFor": "APK decompilation, resource extraction, smali code analysis, app structure analysis",
|
||||
"input": "APK files",
|
||||
"output": "Decompiled source code, resources, manifest data, smali bytecode",
|
||||
"opsec": "passive",
|
||||
"opsecNote": "Local analysis only; operates offline on APK files",
|
||||
"localInstall": true,
|
||||
"googleDork": false,
|
||||
"registration": false,
|
||||
"editUrl": false,
|
||||
"api": false,
|
||||
"invitationOnly": false,
|
||||
"deprecated": false
|
||||
},
|
||||
{
|
||||
"name": "JADX",
|
||||
"type": "url",
|
||||
"url": "https://github.com/skylot/jadx"
|
||||
"url": "https://github.com/skylot/jadx",
|
||||
"status": "live",
|
||||
"pricing": "free",
|
||||
"description": "Open-source decompiler (47k+ GitHub stars) that converts DEX bytecode to Java source code. GUI and CLI available.",
|
||||
"bestFor": "Java source code recovery, app logic analysis, vulnerability assessment, code review",
|
||||
"input": "APK files, DEX files, class files",
|
||||
"output": "Java source code, code structure, method signatures, data flow",
|
||||
"opsec": "passive",
|
||||
"opsecNote": "Local analysis tool; no network communication",
|
||||
"localInstall": true,
|
||||
"googleDork": false,
|
||||
"registration": false,
|
||||
"editUrl": false,
|
||||
"api": false,
|
||||
"invitationOnly": false,
|
||||
"deprecated": false
|
||||
},
|
||||
{
|
||||
"name": "MobSF",
|
||||
"type": "url",
|
||||
"url": "https://github.com/MobSF/Mobile-Security-Framework-MobSF"
|
||||
"url": "https://github.com/MobSF/Mobile-Security-Framework-MobSF",
|
||||
"status": "live",
|
||||
"pricing": "free",
|
||||
"description": "Open-source mobile security framework for static and dynamic analysis. Comprehensive vulnerability scanning and artifact extraction.",
|
||||
"bestFor": "Comprehensive mobile app security analysis, vulnerability assessment, artifact extraction, compliance testing",
|
||||
"input": "APK files, IPA files, source code",
|
||||
"output": "Security vulnerabilities, permissions analysis, data flow analysis, forensic artifacts",
|
||||
"opsec": "passive",
|
||||
"opsecNote": "Can be deployed locally or on private infrastructure for analysis",
|
||||
"localInstall": true,
|
||||
"googleDork": false,
|
||||
"registration": false,
|
||||
"editUrl": false,
|
||||
"api": true,
|
||||
"invitationOnly": false,
|
||||
"deprecated": false
|
||||
}
|
||||
]
|
||||
},
|
||||
@@ -5800,12 +6190,42 @@
|
||||
{
|
||||
"name": "Autopsy",
|
||||
"type": "url",
|
||||
"url": "https://www.autopsy.com/"
|
||||
"url": "https://www.autopsy.com/",
|
||||
"status": "live",
|
||||
"pricing": "free",
|
||||
"description": "Open-source digital forensics platform. Extracts and analyzes data from mobile devices and disk images.",
|
||||
"bestFor": "Mobile forensic artifact extraction, database analysis, file system recovery, evidence analysis",
|
||||
"input": "Device backups, disk images, app databases, file systems",
|
||||
"output": "SQLite databases, app data, deleted files, timeline analysis, forensic artifacts",
|
||||
"opsec": "passive",
|
||||
"opsecNote": "Works on forensic images and backups; no interaction with live devices",
|
||||
"localInstall": true,
|
||||
"googleDork": false,
|
||||
"registration": false,
|
||||
"editUrl": false,
|
||||
"api": false,
|
||||
"invitationOnly": false,
|
||||
"deprecated": false
|
||||
},
|
||||
{
|
||||
"name": "Frida",
|
||||
"type": "url",
|
||||
"url": "https://frida.re/"
|
||||
"url": "https://frida.re/",
|
||||
"status": "live",
|
||||
"pricing": "free",
|
||||
"description": "Open-source dynamic instrumentation toolkit. Injects JavaScript to intercept and modify app behavior at runtime.",
|
||||
"bestFor": "Runtime behavior analysis, API call interception, encryption bypass, behavior modification",
|
||||
"input": "Running app processes, method signatures, target functions",
|
||||
"output": "Intercepted method calls, API parameters, return values, runtime state",
|
||||
"opsec": "active",
|
||||
"opsecNote": "Requires rooted/jailbroken device or emulator; app-level detection is possible",
|
||||
"localInstall": true,
|
||||
"googleDork": false,
|
||||
"registration": false,
|
||||
"editUrl": false,
|
||||
"api": true,
|
||||
"invitationOnly": false,
|
||||
"deprecated": false
|
||||
}
|
||||
]
|
||||
},
|
||||
@@ -5816,17 +6236,62 @@
|
||||
{
|
||||
"name": "Charles Proxy",
|
||||
"type": "url",
|
||||
"url": "https://www.charlesproxy.com/"
|
||||
"url": "https://www.charlesproxy.com/",
|
||||
"status": "live",
|
||||
"pricing": "paid",
|
||||
"description": "Commercial HTTP/HTTPS proxy for traffic analysis. Captures and analyzes network traffic between apps and servers.",
|
||||
"bestFor": "Network traffic interception, API endpoint mapping, parameter analysis, encryption analysis",
|
||||
"input": "Network traffic, SSL/TLS sessions",
|
||||
"output": "HTTP requests/responses, SSL certificates, decoded payloads, traffic analysis",
|
||||
"opsec": "active",
|
||||
"opsecNote": "HTTPS interception requires certificate pinning bypass; easily detected by security-aware apps",
|
||||
"localInstall": true,
|
||||
"googleDork": false,
|
||||
"registration": true,
|
||||
"editUrl": false,
|
||||
"api": false,
|
||||
"invitationOnly": false,
|
||||
"deprecated": false
|
||||
},
|
||||
{
|
||||
"name": "Lynxio OSINT",
|
||||
"type": "url",
|
||||
"url": "https://apps.apple.com/us/app/lynxio-osint/id6745894335"
|
||||
"url": "https://lynxio.io/",
|
||||
"status": "live",
|
||||
"pricing": "freemium",
|
||||
"description": "Mobile OSINT search tool for multi-identifier reconnaissance. Searches across phone numbers, email addresses, usernames, and social platforms.",
|
||||
"bestFor": "Multi-identifier search, quick reconnaissance, phone number lookup, email verification",
|
||||
"input": "Phone numbers, email addresses, usernames, URLs",
|
||||
"output": "Associated identifiers, social media profiles, verification results, relationship mapping",
|
||||
"opsec": "passive",
|
||||
"opsecNote": "Aggregates public data from multiple sources; passive only",
|
||||
"localInstall": false,
|
||||
"googleDork": false,
|
||||
"registration": true,
|
||||
"editUrl": false,
|
||||
"api": false,
|
||||
"invitationOnly": false,
|
||||
"deprecated": false
|
||||
},
|
||||
{
|
||||
"name": "OSINT Researcher",
|
||||
"type": "url",
|
||||
"url": "https://apps.apple.com/gy/app/osint-researcher/id6747302251"
|
||||
"url": "https://apps.apple.com/us/app/osint-researcher/id6747302251",
|
||||
"status": "live",
|
||||
"pricing": "free",
|
||||
"description": "iOS app for GitHub organization reconnaissance and open-source intelligence. Limited to App Store distribution.",
|
||||
"bestFor": "GitHub OSINT, organization structure analysis, open-source project discovery, team reconnaissance",
|
||||
"input": "Organization names, GitHub URLs, repository URLs",
|
||||
"output": "Organization members, repository lists, contribution history, project metadata",
|
||||
"opsec": "passive",
|
||||
"opsecNote": "App Store only; limited availability and distribution",
|
||||
"localInstall": true,
|
||||
"googleDork": false,
|
||||
"registration": false,
|
||||
"editUrl": false,
|
||||
"api": false,
|
||||
"invitationOnly": false,
|
||||
"deprecated": false
|
||||
}
|
||||
]
|
||||
}
|
||||
|
||||
Reference in New Issue
Block a user