⚡ Architecture

flowchart TD
    A["🤖 AI Client\n(Cursor · Claude · Gemini · etc.)\nvia MCP JSON-RPC over stdio"]
    A --> B

    subgraph B["🔥 Ultimate Mobile Pentest MCP"]
        P["⚙️ 6-Layer Token Optimization Pipeline\nLRU Cache → Tiering → Diffing → Summary → Gzip → Artifact Offload"]
        P --> E1 & E2 & E3 & E4 & E5 & E6
        E1[" ADB\n21 tools"]
        E2[" Frida\n14 tools"]
        E3[" Objection\n13 tools"]
        E4[" MobSF\n10 tools"]
        E5[" JADX\n9 tools"]
        E6[" APKTool\n10 tools"]
    end

    E1 --> D1["Device"]
    E2 --> D2["Memory"]
    E3 --> D3["Runtime"]
    E4 --> D4["Web UI"]
    E5 --> D5["Java"]
    E6 --> D6["Smali"]

🧠 The Context Window Problem — Annihilated

A single decompiler listing can generate 100KB+ of output — that's 30,000+ tokens gone in one command. Three commands and your context is dead.

🛡️ The 6-Layer Defense

| # | Layer | What It Does | Tokens Saved | |:-:|:------|:-------------|:------------:| | 1 | LRU Cache | Identical calls return instantly — zero execution, zero tokens | 100% on repeats | | 2 | Tiered Delivery | minimal · summary · full — AI picks what it needs | 60 – 80% | | 3 | Smart Diffing | Sends only what changed between repeated polling calls | 85 – 95% | | 4 | Summary Extraction | RegExp matchers strip boilerplate, surface only critical findings | 50 – 70% | | 5 | Gzip Compression | Artifacts stored compressed, preserving local disk | 70% size cut | | 6 | Artifact Offloading | Dumps >500 lines saved as .md — AI gets path + summary only | 95%+ |

Before:  ████████████████████████████████████  100,000 tokens
After:   ████                                   11,600 tokens  (88.4% saved)

🛠️ Arsenal — 83 Tools, 6 Engines

Installation

Step 1 — Prerequisites

sudo apt install -y adb apktool jadx python3-pip npm
pip3 install frida-tools objection

# Optional: MobSF via Docker
docker run -it --rm -p 8000:8000 opensecurity/mobsf:latest

brew install adb apktool jadx
pip3 install frida-tools objection

# Optional: MobSF via Docker
docker run -it --rm -p 8000:8000 opensecurity/mobsf:latest

Step 2 — Clone & Build

git clone https://github.com/Wael-Rd/ultimate-mobile-mcp.git
cd ultimate-mobile-mcp
npm install && npm run build

Step 3 — Register (Claude Desktop — One Command)

npm run register
# ✓ Detected OS config path
# ✓ Injected mobile-pentest server entry
# ✓ Restart Claude Desktop to activate

⚙️ Manual Config

Cursor / Windsurf

{
  "mcpServers": {
    "mobile-pentest": {
      "command": "node",
      "args": ["/absolute/path/to/ultimate-mobile-mcp/dist/index.js"],
      "env": {
        "MOBSF_URL": "http://127.0.0.1:8000",
        "MOBSF_API_KEY": "YOUR_MOBSF_API_KEY_HERE"
      }
    }
  }
}

Claude Desktop Config Paths

| OS | Path | |:---|:-----| | macOS | ~/Library/Application Support/Claude/claude_desktop_config.json | | Windows | %APPDATA%\Claude\claude_desktop_config.json | | 🐧 Linux | ~/.config/Claude/claude_desktop_config.json |

💡 Real-World Prompts

Full Automated Scan

"Run a full pentest_workflow on test.apk and report all high-severity findings."

Decompiles · parses manifest · scans secrets · audits crypto · outputs a single MD dossier

🔓 SSL Pinning Bypass

"Launch frida_hook_ssl_pinning on process com.insecure.bank so I can proxy traffic."

Spawns under Frida · injects universal bypass · logs intercepted traffic in real time

🔧 Patch APK & Recompile

"Add android:debuggable=true to the manifest and recompile with apktool_patch_and_rebuild."

Injects flag · patches smali check · rebuilds APK · signs it · done

🔑 Live Crypto Key Extraction

"Inject crypto tracer into com.insecure.bank and show me raw AES keys from login."

Hooks cryptographic APIs · dumps live keys · captures payload before encryption

📊 Performance

╔══════════════════════════════════════════════════╗
║           MCP OPTIMIZATION METRICS              ║
╠══════════════════════╦═══════════════════════════╣
║  Total Calls Logged  ║  83                      ║
║  Raw Bytes Processed ║  2.4 MB                  ║
║  LLM Context Saved   ║  1,840,000 tokens        ║
║  Compression Ratio   ║  88.4%                   ║
╠══════════════════════╩═══════════════════════════╣
║                                                  ║
║  Raw    ████████████████████████  100%          ║
║  After  ████                      11.6%  🔥     ║
╚══════════════════════════════════════════════════╝

Run token_stats at any time to view your live dashboard.

⚠️ Legal Disclaimer

This tool is intended STRICTLY for:

• ✅ Authorized security research
• ✅ Application security auditing
• ✅ Bug bounty evaluations with explicit scope

Usage against targets without explicit written consent is ILLEGAL under the CFAA, Computer Misuse Act, and equivalent laws worldwide.

The author assumes ZERO liability for misuse. You own your actions. Use responsibly.