📱 Mobile Pentest Toolkit

Mobile Pentest Toolkit is a comprehensive, cross-platform penetration testing application built with Flutter — supporting Android, iOS, Desktop (Windows, macOS, Linux), and Web.

Designed for security professionals, ethical hackers, bug bounty hunters, and cybersecurity students, this toolkit provides a wide range of security testing tools including reconnaissance, port scanning, HTTP request testing, JWT analysis, SSL/TLS inspection, technology detection, and much more — all directly from your device.

---

🚀 Fitur Utama

🔐 Authentication & Security

• Secure Login + "Remember Me"
  • Autentikasi lokal berbasis SHA-256
  • Menyimpan kredensial secara aman dengan Flutter Secure Storage

🔎 Network Scanning

• Port Scanner

  • Scan rentang TCP port di host IPv4/IPv6
  • Hasil real-time dengan progress indicator
  • Deteksi layanan umum (HTTP, SSH, FTP, dll)

• Subdomain Scanner

  • Fetch subdomain live dari HackerTarget API
  • Otomatis sortir & hilangkan duplikasi
  • Export hasil ke clipboard

🌐 Web Analysis

• HTTP Request Builder

  • Mendukung metode GET, POST, PUT, DELETE, PATCH
  • Custom headers support
  • Menampilkan status code, headers & response body
  • Syntax highlighting untuk JSON response

• Header Analyzer

  • Analisis security headers (CSP, X-Frame-Options, HSTS, dll)
  • Deteksi missing security headers
  • Rekomendasi keamanan

• SSL/TLS Checker

  • Validasi sertifikat SSL/TLS
  • Informasi issuer, validity, dan fingerprint
  • Deteksi protokol yang didukung

• Technology Detector

  • Deteksi framework, CMS, dan teknologi web
  • Identifikasi server, bahasa pemrograman
  • Analisis headers dan cookies

• Directory Bruteforce

  • Bruteforce direktori dan file tersembunyi
  • Wordlist bawaan yang dapat dikustomisasi
  • Filter berdasarkan status code

🔑 Cryptography & Encoding

• Hash Identifier & Generator

  • Generate hash MD5, SHA-1, SHA-256, SHA-512
  • Identifikasi jenis hash secara otomatis
  • Compare hash untuk verifikasi

• JWT Decoder

  • Decode dan analisis JSON Web Tokens
  • Tampilkan header, payload, dan signature
  • Validasi expiration time
  • Deteksi algoritma yang digunakan

🔍 OSINT & Reconnaissance

• DNS Lookup

  • Resolve A, AAAA, MX, NS, TXT records
  • Reverse DNS lookup
  • Salin hasil ke clipboard

• WHOIS Lookup

  • Informasi registrasi domain lengkap
  • Data registrar, nameserver, dan tanggal
  • Export hasil

• Username Checker

  • Cek ketersediaan username di berbagai platform
  • Support 50+ platform populer
  • Hasil real-time dengan link langsung

📊 History & Settings

• History Screen

  • Riwayat semua aktivitas scanning
  • Filter berdasarkan jenis aktivitas
  • Re-run scan dari history
  • Export history

• Settings

  • Kustomisasi timeout dan thread
  • Tema gelap/terang
  • Manage wordlists
  • Clear history

🎨 User Experience

• Modern Dark Theme
  • UI konsisten dengan tema gelap yang elegan
  • Animasi halus dan transisi smooth
  • Loading overlay dengan progress indicator
  • Responsive design untuk semua ukuran layar

---

📸 Screenshots

Login	Dashboard	Port Scanner

HTTP Request	JWT Decoder	SSL Checker

---

🛠️ Prasyarat

Platform	Tools Wajib
Umum	Flutter SDK (≥ v3.0), Dart SDK (≥ v3.0)
Android	Android SDK + Build Tools, Android Studio
iOS	Xcode (macOS only), CocoaPods
Desktop	Windows: Visual Studio + "Desktop development with C++" macOS: Xcode CLI tools Linux: clang, cmake, ninja-build, pkg-config, libgtk-3-dev
Web	Chrome browser

---

💻 Cara Menjalankan

1. Clone Repository

git clone https://github.com/tenggara25/mobilepentesttoolkit.git
cd mobilepentesttoolkit

2. Install Dependencies

flutter pub get

3. Jalankan Aplikasi

Android / iOS:

flutter run

Desktop (Windows/macOS/Linux):

flutter run -d windows  # atau macos, linux

Web:

flutter run -d chrome

---

📦 Build untuk Rilis

Android APK

flutter clean
flutter build apk --release
# Output: build/app/outputs/flutter-apk/app-release.apk

Android App Bundle

flutter build appbundle --release
# Output: build/app/outputs/bundle/release/app-release.aab

Desktop

flutter build windows  # atau macos, linux
# Output: build/windows/runner/Release/

Web

flutter build web
# Output: build/web/

---

⚙️ Cara Pakai

1. Login

   • Username: admin
   • Password: admin123

2. Gunakan Bottom Navigation atau Drawer Menu untuk mengakses fitur

3. Fitur Utama:

   • 🔎 Port Scanner → Masukkan IP & range port → Klik Scan
   • 🌐 HTTP Builder → Masukkan URL, pilih method → Klik Send
   • 🔍 DNS Lookup → Masukkan domain → Klik Lookup
   • 🧮 Hash Generator → Masukkan teks → Pilih algoritma
   • 📡 Subdomain Scanner → Masukkan domain → Klik Scan
   • 🔑 JWT Decoder → Paste token → Klik Decode
   • 🔒 SSL Checker → Masukkan domain → Klik Check
   • 🛡️ Header Analyzer → Masukkan URL → Klik Analyze
   • 🔧 Tech Detector → Masukkan URL → Klik Detect
   • 📁 Dir Bruteforce → Masukkan URL → Klik Start
   • 👤 Username Checker → Masukkan username → Klik Check
   • 🌍 WHOIS Lookup → Masukkan domain → Klik Lookup

---

📁 Struktur Proyek

mobilepentesttoolkit/
├── lib/
│   ├── main.dart                 # Entry point
│   ├── screens/                  # UI Screens
│   │   ├── login_screen.dart
│   │   ├── port_scanner_screen.dart
│   │   ├── http_request_screen.dart
│   │   ├── dns_lookup_screen.dart
│   │   ├── hash_identifier_screen.dart
│   │   ├── subdomain_scanner_screen.dart
│   │   ├── jwt_decoder_screen.dart
│   │   ├── ssl_checker_screen.dart
│   │   ├── header_analyzer_screen.dart
│   │   ├── tech_detector_screen.dart
│   │   ├── directory_bruteforce_screen.dart
│   │   ├── username_checker_screen.dart
│   │   ├── whois_lookup_screen.dart
│   │   ├── history_screen.dart
│   │   └── settings_screen.dart
│   ├── services/                 # Business Logic
│   │   └── database_helper.dart
│   ├── utils/                    # Utilities
│   │   └── app_theme.dart
│   └── widgets/                  # Reusable Widgets
│       └── app_widgets.dart
├── assets/
│   └── wordlists/
│       └── directories.txt       # Wordlist untuk bruteforce
├── android/                      # Android platform files
├── ios/                          # iOS platform files
├── web/                          # Web platform files
├── linux/                        # Linux platform files
├── macos/                        # macOS platform files
├── windows/                      # Windows platform files
└── pubspec.yaml                  # Dependencies

---

🧯 Troubleshooting

NDK Version Error

Tambahkan di android/app/build.gradle.kts:

android {
    ndkVersion = "27.0.12077973"
}

Internet Permission (Android)

Pastikan ada di android/app/src/main/AndroidManifest.xml:

<uses-permission android:name="android.permission.INTERNET"/>

Flutter Doctor

Jalankan untuk cek environment:

flutter doctor -v

---

🔒 Security Notice

⚠️ DISCLAIMER: This tool is intended for authorized security testing only. Always obtain proper authorization before testing any systems you don't own. The developers are not responsible for any misuse of this tool.

---

🤝 Kontribusi

1. Fork repo ini
2. Buat branch fitur baru

   git checkout -b feature/namafitur

3. Commit perubahan

   git commit -m "Menambahkan fitur XYZ"

4. Push branch

   git push origin feature/namafitur

5. Buka Pull Request

Ikuti panduan Effective Dart untuk gaya penulisan kode.

---

📋 Roadmap

• API Security Testing
• Vulnerability Scanner
• Report Generation (PDF/HTML)
• Multi-language Support
• Plugin System
• Cloud Sync

---

📄 Lisensi

Proyek ini dilisensikan di bawah MIT License.

---

👨‍💻 Author

Alamsyah Hutama - @tenggara25

---

"Penetration testing is not a one-time event, but a continuous process."

⭐ Star this repo if you find it useful! ⭐