One-touch mobile penetration testing platform

A non-transitory, computer-readable medium storing one or more instructions executable by a computer system to perform operations comprising:

• determining, for a penetration testing device, a mode of operation from one of a headless mode and a remote mode;
• if the determined mode of operation is the headless mode:
• determining a penetration test script customized for a target application;
• in response to receiving an instruction to perform an autonomous penetration test, executing the penetration test script to perform the autonomous penetration test on the target application;
• based on results of the autonomous penetration test, compiling data indicative of security vulnerabilities in the target application;
• and
• storing the compiled data in a memory of the penetration testing device;
• and
• if the determined mode of operation is the remote mode:
• establishing a secure connection between the penetration testing device and a remote computing device;
• receiving from the remote computing device instructions for performing a remote penetration test on the target application;
• performing the instructions to determine the security vulnerabilities of the target application;
• and
• providing the remote computing device with a compilation of the security vulnerabilities.

A method comprising:

• determining, for a penetration testing device, a mode of operation from one of a headless mode and a remote mode;
• if the determined mode of operation is the headless mode:
• determining a penetration test script customized for a target application;
• in response to receiving an instruction to perform an autonomous penetration test, executing the penetration test script to perform the autonomous penetration test on the target application;
• based on results of the autonomous penetration test, compiling data indicative of security vulnerabilities in the target application;
• and
• storing the compiled data in a memory of the penetration testing device;
• and
• if the determined mode of operation is the remote mode:
• establishing a secure connection between the penetration testing device and a remote computing device;
• receiving from the remote computing device instructions for performing a remote penetration test on the target application;
• performing the instructions to determine the security vulnerabilities of the target application;
• and
• providing the remote computing device with a compilation of the security vulnerabilities.