Tools

ucsb-seclab/karonte

Karonte is a static analysis tool to detect multi-binary vulnerabilities in embedded firmware

zigrin-security/cakefuzzer

Cake Fuzzer is a project that is meant to help automatically and continuously discover vulnerabilities in web applications created based on specific…

s4dhulabs/vimana-framework

Vimana is a modular security framework for auditing Python APIs and Web applications. The plugin-based architecture enables security professionals to…

spiralbl0ck/skypeaclkeygen.exe-analysis-for-hacking-team

SkypeACLKeyGen.exe analysis for hacking team

werwolv/imhex

🔍 A Hex Editor for Reverse Engineers, Programmers and people who value their retinas when working at 3 AM.

owasp/mastg

Comprehensive OWASP guide for mobile app security testing, reverse engineering, and verifying MASVS/MASWE weaknesses through static, dynamic, and…

crytic/slither

Static Analyzer for Solidity and Vyper

vaib25vicky/awesome-mobile-security

An effort to build a single place for all useful android and iOS security related stuff. All references and tools belong to their respective owners.…

kelvinben/appinfoscanner

一款适用于以HW行动/红队/渗透测试团队为场景的移动端(Android、iOS、WEB、H5、静态网站)信息收集扫描工具，可以帮助渗透测试工程师、攻击队成员、红队成员快速收集到移动端或者静态WEB站点中关键的资产信息并提供基本的信息输出,如：Title、Domain、CDN、指纹信息、状态信息等。

seqra/opentaint

Formal inter-procedural taint analysis engine for application security. Tracks untrusted data across function boundaries, persistence layers, and…

hahwul/xspear

🔱 Powerfull XSS Scanning and Parameter analysis tool&gem

hahwul/droid-hunter

(deprecated) Android application vulnerability analysis and Android pentest tool

rehints/efixplorer

IDA plugin and loader for UEFI firmware analysis and reverse engineering automation

ret5et/watchguard_webui_unpacker

Watchguard Sysa-dl file format

certcc/trommel

TROMMEL: Sift Through Embedded Device Files to Identify Potential Vulnerable Indicators

beardypig/ghidra-emotionengine

Ghidra Processor for the Play Station 2's Emotion Engine MIPS based CPU