awesome-hacking-tools
😱An awesome curated list for hacking & pentesting tools!
https://github.com/Jackelele/awesome-hacking-tools
Last synced: 1 day ago
JSON representation
-
Android Security
-
Static Analysis Tools
- SmaliSCA - Smali Static Code Analysis
- CFGScanDroid - Scans and compares CFG against CFG of malicious applications
- Madrolyzer - Extracts actionable data like C&C, phone number etc.
- RiskInDroid - A tool for calculating the risk of Android apps based on their permissions, with online demo available.
- SUPER - Secure, Unified, Powerful and Extensible Rust Android Analyzer
- ClassyShark - Standalone binary inspection tool which can browse any Android executable and show important infos.
- StaCoAn - Crossplatform tool which aids developers, bugbounty hunters and ethical hackers performing static code analysis on mobile applications. This tool was created with a big focus on usability and graphical guidance in the user interface.
- JAADAS - Joint intraprocedure and interprocedure program analysis tool to find vulnerabilities in Android apps, built on Soot and Scala
- Android Decompiler - Decompile and debug, breakdown and analyse files. **Demo Available**
- PSCout - A tool that extracts the permission specification from the Android OS source code using static analysis
- SPARTA - Verifies (proves) that an app satisfies an information-flow security policy; built on the [Checker Framework](https://types.cs.washington.edu/checker-framework/)
- Androwarn - detect and warn the user about potential malicious behaviours developed by an Android application.
-
Application Vulnerability Scanners
- QARK - QARK by LinkedIn is for app developers to scan app for security issues (Updated 17 months ago)
- AndroBugs - A Framework for Android vulnerability anslysis to find potential security vulernabilities. (Updated 5 years ago)
- Nogotofail - Network security testing tool for developers and security researchers (Updated 5 months ago)
- QARK - QARK by LinkedIn is for app developers to scan app for security issues (Updated 17 months ago)
-
Dynamic Analysis Tools
- Mobile-Security-Framework MobSF - Mobile Security Framework is an intelligent, all-in-one open source mobile application (Android/iOS) automated pen-testing framework capable of performing static, dynamic analysis and web API testing
- Inspeckage - Android Package Inspector - dynamic analysis with api hooks, start unexported activities and more. (Xposed Module)
- Android Hooker - Dynamic Java code instrumentation (requires the Substrate Framework)
- ProbeDroid - Dynamic Java code instrumentation
- DECAF - Dynamic Executable Code Analysis Framework based on QEMU (DroidScope is now an extension to DECAF)
- CuckooDroid - Android extension for Cuckoo sandbox
- Mem - Memory analysis of Android (root required)
- AuditdAndroid
- Aurasium - place reference monitor.
- StaDynA - A system supporting security app analysis in the presence of dynamic code update features (dynamic class loading and reflection). This tool combines static and dynamic analysis of Android applications in order to reveal the hidden/updated behavior and extend static analysis results with this information.
- Vezir Project - Virtual Machine for Mobile Application Pentesting and Mobile Malware Analysis
- MARA - Mobile Application Reverse engineering and Analysis Framework
- AndroPyTool - A tool for extracting static and dynamic features from Android APKs. It combines different well-known Android apps analysis tools such as DroidBox, FlowDroid, Strace, AndroGuard or VirusTotal analysis.
- Runtime Mobile Security (RMS) - A powerful web interface that helps you to manipulate Android and iOS Apps at Runtime
- AuditdAndroid
- Androidl4b - A Virtual Machine For Assessing Android applications, Reverse Engineering and Malware Analysis
- AppUse - Custom build platform for security testing ($200 1 year License)
- Android Tamer - Virtual / Live Platform for Android Security Professionals
- Appie - Appie is a software package that has been pre-configured to function as an Android Pentesting Environment. It is completely portable and can be carried on USB stick or smartphone. This is a one stop answer for all the tools needed in Android Application Security Assessment and an awesome alternative to existing virtual machines.
- Taintdroid - requires AOSP compilation
- Taintdroid - requires AOSP compilation
- Taintdroid - requires AOSP compilation
-
Reverse Engineering
- Smali/Baksmali
- Emacs syntax coloring for smali files
- Androguard
- Android Framework for Exploitation
- Bypass signature and permission checks for IPCs
- Android OpenDebug
- Dex2Jar - Dex to jar converter
- Enjarify - Dex to jar converter from Google
- JD-GUI - Java decompiler
- Jad - Java decompiler
- Vim syntax coloring for smali files
- Indroid
- Vim syntax coloring for smali files
- Apktool
-
Fuzz Testing
- Radamsa Fuzzer - Android port of [Radamsa](https://gitlab.com/akihe/radamsa)
- Honggfuzz - A security oriented, feedback-driven, evolutionary, easy-to-use fuzzer with interesting analysis options.
- An Android port of the melkor ELF fuzzer - An ELF File Format Fuzzer
- MMFA - Media Fuzzing Framework for Android
- AndroFuzz - A simple file format fuzzer for android. Used by me to fuzz pdf readers, but should work for any file format.
-
Application Repackaging Detectors
- FSquaDRA - A tool for detection of repackaged Android applications based on app resources hash comparison.
-
Market Crawlers
- Google play crawler (Java)
- Google play crawler (Python)
- Google play crawler (Node) - get app details and download apps from official Google Play Store.
- Aptoide downloader (Node) - download apps from Aptoide third-party Android market
- Appland downloader (Node) - download apps from Appland third-party Android market
- Apkpure - Online apk downloader. Provides also an own app for downloading.
-
Misc Tools
- adb autocomplete - This is a Bash completion script
- Android InsecureBank - For practice
- mitmproxy - This repository contains the mitmproxy and pathod projects
- dockerfile/androguard - Docker file for building androguard dependencies w/ an optional interactive shell environment.
- Android Vulnerability Test Suite - Android-vts scans a device for set of vulnerabilities
- AppMon - AppMon is an automated framework for monitoring and tampering system API calls of native macOS, iOS and android apps. It is based on Frida.
- Internal Blue - Bluetooth experimentation framework based on Reverse Engineering of Broadcom Bluetooth Controllers
- Dalvik opcodes
- ExploitMe Android Labs - For practice
- Android Device Security Database - Database of security features of Android devices
- Dalvik opcodes
- ExploitMe Android Labs - For practice
-
Research Papers
-
Others
- OWASP Mobile Security Testing Guide Manual
- Doridori/Android-Security-Reference
- Mobile App Pentest Cheat Sheet
- Android Reverse Engineering 101 by Daniele Altomare (Web Archive link)
- Android Reverse Engineering 101 by Daniele Altomare (Web Archive link)
- OWASP Mobile Security Testing Guide Manual
- Android app security checklist
-
Vulnerabilities
- Android Malware Github repo
- Contagio Mobile Malware Mini Dump
- Kharon Malware Dataset - 7 malwares which have been reverse engineered and documented
- Android Reports and Resources - List of Android Hackerone disclosed reports and other resources
- Android's reported security vulnerabilities
- Android Devices Security Patch Status
- AOSP - Issue tracker
- Android Malware Genome Project - contains 1260 malware samples categorized into 49 different malware families, free for research purpose.
- VirusTotal Malware Intelligence Service - powered by VirusTotal, not free
- Drebin
- Android Adware and General Malware Dataset
- Android PRAGuard Dataset - The dataset contains 10479 samples, obtained by obfuscating the MalGenome and the Contagio Minidump datasets with seven different obfuscation techniques.
- AndroZoo - AndroZoo is a growing collection of Android Applications collected from several sources, including the official Google Play app market.
- Android Security Reward Program
- Android Malware Genome Project - contains 1260 malware samples categorized into 49 different malware families, free for research purpose.
- VirusTotal Malware Intelligence Service - powered by VirusTotal, not free
- Androguard - Database Android Malwares wiki
-
Online Analyzers
- NowSecure Lab Automated - Enterprise tool for mobile app security testing both Android and iOS mobile apps. Lab Automated features dynamic and static analysis on real devices in the cloud to return results in minutes. **(6 MONTHS FREE)**
- Appknox - A platform to help you build safe and secure mobile systems **(PAID)**
- AVC UnDroid - Select an APK to be analysed using AVC unDroid. **(FREE)**
- Virus Total - Analyse a file, URL or search using the tool online. **(FREE)**
- AppCritique - Upload your Android APKs & iOS Apps and receive comprehensive free security assessments. **(FREE & PAID)**
- AMAaaS - Free Android Malware Analysis Service. A baremetal service features static and dynamic analysis for Android applications. A product of MalwarePot. **(FREE)**
- App Detonator - Detonate APK binary to provide source code level details including app author, signature, build and manifest information. **3 Analysis/day free quota**.
- BitBann - Analyse files or via URL, maximum upload is 20 MB - You can login to maximise size **(FREE)**
- App Ray - An automated mobile application security testing. Identifying vulnerabilities and more. **(PAID)**
-
Books
-
-
Asset Discovery
-
IP Address Discovery
- Massdns - A DNS resolver utility for bulk lookups
- Mxtoolbox - Bulk Domain/IP lookup tool
- Domaintoipconverter - Bulk domain to IP converter
- Googleapps Dig - Online Dig tool by Google
- DataSploit (IP Address Modules) - An OSINT Framework to perform various recon techniques
- Domain Dossier - Investigate domains and IP addresses
- Bgpview - Search ASN, IPv4/IPv6 or resource name
- Viewdns
- Ultratools ipv6Info - Multiple information related to IPv6 address
- Whois - Command line utility usually used to find information about registered users/assignees of an Internet resource.
- Linux - us/windows-server/administration/windows-commands/nslookup) - Command line utility usually used for querying the DNS records
- bgp - Internet Backbone and Colocation Provider ... Hurricane Electric IP Transit. Our Global Internet Backbone provides IP Transit with low latency, access to thousands of networks, and dual-stack
- Domaintoipconverter - Bulk domain to IP converter
- ICANN Whois - Whois service by Internet Corporation for Assigned Names and Numbers (ICANN)
-
Domain / Subdomain Discovery
- Amass - A subdomain enumeration utility
- Sublist3r - Subdomains enumeration tool with multiple sources
- Aiodnsbrute - Asynchronous DNS brute force utility
- LDNS - A DNS library useful for DNS tool programming
- Nsec3map - A tool to NSEC and NSEC3 walking
- Ct-exposer - A tool to discovers sub-domains by searching Certificate Transparency logs
- Certgraph - A tool to crawl the graph of certificate Alternate Names
- Appsecco - The art of subdomain enumeration - The supplement material for the book "The art of sub-domain enumeration"
- SSLScrape - A scanning tool to scrape hostnames from SSL certificates
- GoBuster - Directory/File, DNS and VHost busting tool written in Go
- Bluto - Recon, Subdomain Bruting, Zone Transfers
- Dns-nsec3-enum - Nmap NSE Script for NSEC3 walking
- Crt.sh
- Wolframalpha - Computational knowledge engine
- Project Sonar - Forward DNS Data
- Project Sonar - Reverse DNS Data
- SubFinder - SubFinder is a subdomain discovery tool that discovers valid subdomains for websites. Designed as a passive framework to be useful for bug bounties and safe for penetration testing.
- Amass - A subdomain enumeration utility
-
Content Discovery
- RustButer - Files, directories and vhost buster written in Rust.
-
Email Discovery
- linkedin2username - OSINT Tool: Generate username lists for companies on LinkedIn
- Hunter - Email search for a domain
- Email Extractor - Chrome extension to extract emails from web pages
- Convertcsv - Online tool to extract email addresses in text, web pages, data files etc.
- Skrapp
- Email Extractor - Chrome extension to extract emails from web pages
- Office365UserEnum - Enumerate valid usernames from Office 365 using ActiveSync.
-
Network/Port Scanning
-
Business Communication Infrastructure Discovery
- MicroBurst - PowerShell based Azure security assessment scripts
- Lyncsmash - Tools to enumerate and attack self-hosted Lync/Skype for Business
- Enumeration-as-a-Service
- ruler - A tool to abuse Exchange services
- Mxtoolbox - Online tool to check mail exchanger (MX) records
-
Source Code Aggregators / Search - Information Discovery
-
Cloud Infrastructure Discovery
- CloudScraper - A tool to spider websites for cloud resources (S3 Buckets, Azure Blobs, DigitalOcean Storage Space)
- InSp3ctor - AWS S3 Bucket/Object finder
- Spaces-finder - A tool to hunt for publicly accessible DigitalOcean Spaces
- GCPBucketBrute - A Google Storage buckets enumeration script
- CloudStorageFinder - Tools to find public data in cloud storage systems
- Buckets Grayhatwarfare - Search for Open Amazon s3 Buckets and their contents
-
Social Media / Employee Profiling
- LinkedInt - A LinkedIn scraper for reconnaissance
- Glassdoor - Company review and rating search
- SocialBlade - Track user statistics for different platforms including YouTube and Twitter
- Social-Searcher - Social Media Search Engine
- Checkuser - Social existence checker
-
Data Leaks
- Scavenger - Paste sites crawler (bot) looking for leaked credentials
- Pwnbin - Python based Pastebin crawler for keywords.
- PwnedOrNot - Tool to find passwords for compromised accounts
- Dumpmon - A twitter bot which monitors multiple paste sites for password dumps and other sensitive information
- Pastebin_scraper - Automated tool to monitor pastebin for interesting information
- Dumpmon - A twitter bot which monitors multiple paste sites for password dumps and other sensitive information
-
Company Information and Associations
- Crunchbase - Information about companies (funding, acquisition, merger etc.) and the people behind them
- OverSeas Registries - List of company registries located around the world
- Opencorporates - Open database of companies in the world
-
Internet Survey Data
- Portradar - Free and open port scan data by packet.tel
- Project Sonar - Rapid7’s internet-wide surveys data across different services and protocols
- Project Resonance - RedHunt Labs’s Internet wide surveys to study and understand the security state of the Internet.
- Scans.io - Internet-Wide Scan Data Repository, hosted by the ZMap Team
-
Internet Scan / Archived Information
- Cachedviews
- Wayback Machine - Internet Archive
- Zoomeye - Cyberspace Search Engine
- Shodan - Search engine for Internet-connected devices
- Zoomeye - Cyberspace Search Engine
-
-
Application Security
-
Websites
- Juice Shop - An intentionally insecure Javascript Web Application.
- OWASP NodeGoat - Purposly vulnerable to the OWASP Top 10 Node.JS web application, with [tutorials](https://nodegoat.herokuapp.com/tutorial), [security regression testing with the OWASP Zap API](https://github.com/OWASP/NodeGoat/wiki/NodeGoat-Security-Regression-tests-with-ZAP-API), [docker image](https://github.com/owasp/nodegoat#option-3---run-nodegoat-on-docker). With several options to get up and running fast.
- Web App Sec Quiz - Self-assessment quiz for web application security
- SecurePasswords.info - Secure passwords in several languages/frameworks.
- Security News Feeds Cheat-Sheet - A list of security news sources.
- MicroCorruption - Capture The Flag - Learn Assembly and Embedded Device Security
-
Blogs
- NCC Group - Blog - The blog of NCC Group, formerly Matasano, iSEC Partners, and NGS Secure.
- Crypto Fails - Showcasing bad cryptography
- Scott Helme - Learn about security and performance.
- Cossack Labs blog - Blog of cryptographic company that makes open-source libraries and tools, and describes practical data security approaches for applications and infrastructures.
-
Tools
- Qualys SSL Labs - The infamous suite of SSL and TLS tools.
- report-uri.io - A free CSP and HPKP reporting service.
-
Application Security Learning Resources
-
-
Credits
-
Internet Scan / Archived Information
-
Programming Languages
Sub Categories
Dynamic Analysis Tools
22
Domain / Subdomain Discovery
18
Vulnerabilities
17
IP Address Discovery
14
Reverse Engineering
14
Static Analysis Tools
12
Misc Tools
12
Online Analyzers
9
Others
7
Internet Scan / Archived Information
7
Email Discovery
7
Cloud Infrastructure Discovery
6
Data Leaks
6
Market Crawlers
6
Source Code Aggregators / Search - Information Discovery
6
Websites
6
Social Media / Employee Profiling
5
Business Communication Infrastructure Discovery
5
Fuzz Testing
5
Blogs
4
Network/Port Scanning
4
Application Vulnerability Scanners
4
Internet Survey Data
4
Company Information and Associations
3
Books
2
Tools
2
Research Papers
2
Application Repackaging Detectors
1
Content Discovery
1
Application Security Learning Resources
1
Keywords
android
18
security
12
pentesting
12
osint
10
reverse-engineering
9
hacking
7
mobile-security
7
dns
7
dynamic-analysis
6
static-analysis
6
reconnaissance
6
security-tools
5
apk
5
python
5
android-security
5
owasp
5
recon
5
bugbounty
4
enumeration
4
android-application
4
ios-app
4
subdomain
4
go
3
mstg
3
network-security
3
java
3
mobile-app
3
ios
3
network-analysis
3
application-security
3
golang
3
research
3
runtime-analysis
3
infosec
3
mastg
3
brute-force
2
mast
2
owasp-top-ten
2
javascript
2
osint-reconnaissance
2
ios-security
2
maltego
2
information-gathering
2
malware-analysis
2
testing-cryptography
2
attack-surfaces
2
vulnerabilities
2
reverse-enginnering
2
frida
2
dex
2