---
title: "Offensive Mobile - Air Market"
description: "You have an app on a phone and you need to know what it is doing and what it leaks. This covers reading it without running it, hooking into it while it runs, getting around the checks that stop you w…"
canonical: "https://airmarket.ai/app/offensive-mobile"
---

[Air Market](/) / [Security](/category/security) / Offensive Mobile

Skill by [SnailSploit | Kai Aizen](/@snailsploit)

# Offensive Mobile

Take an app apart, watch it run, and see what it hides badly

## What this does

You have an app on a phone and you need to know what it is doing and what it leaks. This covers reading it without running it, hooking into it while it runs, getting around the checks that stop you watching its traffic, and finding data it stores badly or backends it exposes. Works for both Android and iOS.

### Top 3 things it does for you

- Decompile an Android or iOS app and read what is inside
- Get past pinning, root and jailbreak checks to watch traffic
- Test deep links and components the app exposes to others

## Information

**Offensive Mobile at a glance**

|  |  |
| --- | --- |
| Kind | Skill |
| Publisher | [SnailSploit \| Kai Aizen](/@snailsploit) |
| Category | [Security](/category/security) |
| Works with | Agent Skills - an open standard supported by 40+ agents |
| Size | 14 KB |
| Licence | MIT |
| Repository | [SnailSploit/Claude-Red](https://github.com/SnailSploit/Claude-Red/tree/d03eb08f94d28695fdb83c209fa8c10b564ce758/Skills/mobile/offensive-mobile) |
| GitHub stars | 2,956 (as of Nov 2026) |

## Security report

**Verified.** AIR scanned this exact version of Offensive Mobile and flagged nothing. AIR's verdict: **safe**.

**What Offensive Mobile's check was run against**

|  |  |
| --- | --- |
| Commit | d03eb08f94d28695fdb83c209fa8c10b564ce758 |
| Content hash | c0076063845864620b64d5a0ef59e01c78e80dd0714ef10091c9f9bd5e0d6201 |
| Files read | [Browse the files at this exact commit](https://github.com/SnailSploit/Claude-Red/blob/d03eb08f94d28695fdb83c209fa8c10b564ce758/Skills/mobile/offensive-mobile/SKILL.md) |

A scan is named by the exact content it read, not by a version number. A different version is a different artifact, and nothing here applies to a version AIR has not scanned.

[Read the full security report for Offensive Mobile](/security/offensive-mobile)

## About Offensive Mobile

A mobile application penetration testing methodology for Android and iOS. Static analysis uses apktool and jadx on Android and class-dump, Hopper and IDA on iOS; dynamic work runs through Frida and Objection, including SSL pinning bypass and root or jailbreak detection bypass.

It covers deep link and URL scheme abuse, exported component attacks - Android activities, services, providers and receivers, and on iOS XPC, URL schemes and universal links - insecure data storage across SharedPrefs, KeyStore misuse, NSUserDefaults and Keychain ACL bypass, IPC and Intent redirection, and WebView vulnerabilities such as JavaScriptInterface and file:// access.

Also included: Firebase, AWS and Azure misconfiguration leakage, mobile API testing, biometric bypass across Face ID and Touch ID, app cloning and runtime patching, and primitives for mobile malware and RAT analysis. Use it for a mobile pentest, bug bounty mobile triage, or app store reconnaissance.

## What's inside

- SKILL.md - instructions

## Questions

### Is Offensive Mobile safe to install?

AIR scanned this exact version of Offensive Mobile and flagged nothing. AIR's verdict: safe. The verdict is named by the content that was read, at commit d03eb08f94d2, so it cannot drift onto a version nobody scanned. The full report is at https://airmarket.ai/security/offensive-mobile.

### How do I install Offensive Mobile?

Open https://airmarket.ai/app/offensive-mobile on Air Market and use the install action: Air Market hands Claude a prompt naming this exact skill, and Claude sets it up. Source, pinned to the exact commit this listing describes: https://github.com/SnailSploit/Claude-Red/tree/d03eb08f94d28695fdb83c209fa8c10b564ce758/Skills/mobile/offensive-mobile. Install from that link, not the branch.

## Related on Air Market

- [More Security listings](/category/security)
- [Everything by SnailSploit | Kai Aizen](/@snailsploit)

---

Canonical URL: <https://airmarket.ai/app/offensive-mobile>