PentestKit Mobile

The Joloto Project

In-app purchases

About this app

PentestKit Mobile is a security research and learning toolkit designed for bug bounty hunters, penetration testers, security researchers, IT and cybersecurity students.

It brings frequently used security utilities together in one mobile workspace, helping users perform reconnaissance, analyze authorized targets, manage testing sessions, and document security findings.

Key features include:
• Security-focused browser
• WHOIS lookup
• HTTP request builder
• Web endpoint discovery
• Advanced search query builder
• Mock web page generator
• Web crawler
• Phone-number information analysis
• Controlled network testing
• IP address and port scanner
• Proxy utilities
• SSH client and terminal
• CVE database viewer
• Web directory scanner
• WordPress security scanner
• Local development server
• Authorized remote-session management

PentestKit is intended exclusively for education, defensive security research, and testing systems you own or have explicit permission to assess.
You are responsible for obtaining authorization before scanning, testing, or connecting to any system. Do not use PentestKit for unauthorized access, service disruption, privacy invasion, or unlawful activity.

Ratings and reviews

i love the app, but I don't know how to use it or where to start, you guys show add AI features, and a full tutorial on how to use it, that a bash should also be added, and where to get a payload, the app should be connected to GitHub, so that we will not lost our work, please modify be this app by making it real, and also a one programing language to it such as ruby, so that we can use it to get a job Done, Thanks.

The SSH and Persistent shell features are honestly impressive for a mobile app. Being able to reconnect to saved sessions and manage everything directly from android makes testing much more convenient. UI is clean and the workflow feels well thought out.

Great app, exciting features although not all features work as intended, still great for beginners. Update is needed because most features are already outdated (especially the cve)

What’s new

New in this update:

• React/Next Vulnerability Scanner
• Enhanced Browser experience
• Improved WhoIs lookup
• Improved Dorker performance
• Improved Hackbar
• Added multi-language support (Localization)
• Downloadable reports (AI Integration)
• Added support inbox for authenticated users to send bug reports and receive admin replies.
• Added queued usage/statistics logging for tool submissions.
• Added Most Visited tools statistics screen.
• Added Themes
• Updated CVE