A complete Android pentest lab inside your workspace.
Go beyond mobile traffic inspection. Launch a Google Play-enabled Android emulator, install any APK, control per-app instrumentation, and investigate every request with the same local-first workspace you use for web and API testing.
01
Launch lab
02
Test app
03
Validate
The target data never needs to leave your environment.
Emulator, ADB, screen streaming, Frida, proxying, captured traffic, credentials, and evidence stay on your machine. The browser is the control surface; the desktop application provides the local runtime.
Persistent sessions
State is saved continuously until you intentionally start a new Android session.
One-click APK install
Bring an external APK into the running emulator without leaving the workspace.
Unified proxy
Route mobile requests into the DAST proxy, HTTP history, Repeater, Intruder, and Intercept.
Real pentest workflow
Move from discovery and instrumentation to manual validation in one project.
Persistent Android sessions
Show session launch, clean-start controls, and automatic local state persistence.
01
Launch
02
Resume
03
Clean start
Every installed app gets its own testing control plane.
Set capture behavior independently for each package, configure its instrumentation, relaunch it, erase data, remove it, or crawl it—without losing the context of your current workspace.
Launch
Start an installed application directly from the workspace.
Configure hooks
Choose the Frida hook families used for that individual application.
Reset
Clear app data and scrub testing traces without removing the APK.
Uninstall
Remove the package and associated DAST traces completely.
Crawl
Run the smoke walker to exercise application paths automatically.
Capture
Route traffic through the DAST proxy and apply Frida SSL bypass for complete inspection.
Stealth
Use the real upstream path with Frida SSL tap when proxy detection must be avoided.
Aggressive
Combine capture with install-time APK rewriting for applications that resist runtime instrumentation.
Purpose-built hooks for hardened mobile applications.
Select instrumentation per package and relaunch in one operation. The hook families reflect practical testing experience against modern application defenses—not a generic script launcher.
- SSL and certificate-pinning bypass
- Anti-emulator detection
- RASP self-protection bypass
- Play Integrity and SafetyNet controls
- KeyStore attestation
- Sensor simulation
- Hardware and GPU fingerprinting
- VPN presence and SSAID rotation
Install-time APK transformation
Re-patch can strip pinning paths, apply a permissive Network Security Config, extract embedded keystores, re-sign the APK, and register client certificates for proxy mTLS workflows.
Per-app instrumentation
Show hook configuration and capture-mode controls for an installed application.
01
Select app
02
Configure
03
Set mode
Frida hooks walkthrough
Demonstrate SSL pinning, anti-emulator, RASP, attestation, and fingerprint controls.
01
Choose hooks
02
Apply bypass
03
Verify
See mobile traffic where you investigate web and API behavior.
Captured requests populate the site map and HTTP history in real time. Filter by domain, inspect raw or formatted bodies, then move interesting traffic into Repeater, Intruder, Match & Replace, or Intercept.
Live mobile traffic analysis
Capture an application request, inspect its response, and send it to the manual testing tools.
01
Capture
02
Inspect
03
Replay
Complete history
Preserve requests and responses alongside the rest of the workspace evidence.
Live visibility
Observe requests as the app generates them through the emulator session.
Manual exploitation
Send captured traffic into the tools used for deeper validation and exploitation.
One-click Android toolchain setup
Show the desktop application installing and verifying the emulator, ADB, Scrcpy, and Frida.
01
Install
02
Verify
03
Launch
Install the complete Android toolchain from the desktop app.
The Android section checks and installs the emulator, ADB platform tools, system image, virtual device, screen streaming, and Frida. Once ready, create and control sessions from the web workspace.
Bring serious mobile testing into your local pentest workflow.
Mobile pentesting is available with the Professional license and can be evaluated during your trial.