Scrounger - Mobile application testing toolkit

Scrounger - a person who borrows from or lives off others.

There is no better description for this tool for two main reasons, the first is because this tool takes inspiration from many other tools that have already been published, the second reason is because it lives off mobile application's vulnerabilities.

Why

Even though several other mobile application analysis tools have been developed, there is no one tool that can be used for both android and ios and can be called a "standard" must use on every mobile application assessment.

The idea behind Scrounger is to make a metasploit-like tool that will not do a pentesters work but help the pentester on his assessment by executing mundane tasks that need to be performed on all assessments.

The Difference

The main features Scrounger offers that others don't:

• Works with Android and iOS
• Metasploit-like console and modules
• Offers a variaty of modules that can be run to give the pentester a starting point
• Easily extendable

Inspiration / Thanks

Scrounger was inspired by other tools, a huge thanks to the developers of:

• Drozer (https://github.com/mwrlabs/drozer);
• Needle (https://github.com/mwrlabs/needle); and
• iOS Application Analysis (https://github.com/timb-machine/ios-application-analyser).

Github Project