Intrascan

Mobile app security scanner that runs Nuclei templates via Frida network injection.

Intrascan enables security scanning of iOS/Android applications by injecting HTTP requests directly from within the app's context, bypassing SSL pinning and VPN tunnels.

🌟 Key Features

• 🔒 Bypass SSL Pinning - Requests originate from within the app's network stack
• 🌐 VPN Passthrough - Access internal networks the app is connected to
• 📋 Nuclei Compatible - Uses standard Nuclei YAML templates

📦 Installation

# Prerequisites: Frida server running on target device

# Activate your frida environment
source /path/to/frida-env/bin/activate

# Install in development mode
pip install -e .

Requirements

• Python 3.10+
• Frida and frida-tools
• iOS/Android device with frida-server running
• USB connection to device

🚀 Quick Start

# Basic scan with single template
intrascan -t template.yaml -u https://target.com -a com.app.bundle

# Scan with Nuclei templates directory
intrascan -t ~/nuclei-templates/http/technologies/ \
    -u https://target.com -a com.app.bundle \
    -s info -s low --limit 50

# Full scan with output
intrascan -t ~/nuclei-templates/http/ \
    -u https://internal-api.company.com -a com.company.app \
    -o results.json --store-responses ./findings/ -v

📖 Documentation

• How It Works - Architecture and flow
• Writing Templates - Template format guide
• Configuration - CLI options reference

🎯 Use Cases

1. Internal API Testing - Test APIs only accessible via mobile app VPN
2. SSL Pinned Apps - Scan apps with certificate pinning

⚙️ CLI Options

🧪 Running Tests

# Run all tests
pytest tests/ -v

# With coverage report
pytest tests/ --cov=nuclei_frida --cov-report=html

🙏 Credits & Acknowledgments

Intrascan is built on the shoulders of giants:

ProjectDiscovery

• Nuclei - The powerful vulnerability scanner that inspired this tool's template format
• nuclei-templates - Community-powered vulnerability templates

Frida

• Dynamic instrumentation toolkit that makes this tool possible

Template Format

Intrascan uses the same YAML template format as Nuclei. You can use templates from the nuclei-templates repository directly.

📄 License

MIT License - See LICENSE for details.

Disclaimer: This tool is intended for authorized security testing only. Always obtain proper authorization before scanning any systems.