Data

Tools

Indexes

Applications

Experiments

Awesome

An open API service indexing awesome lists of open source software.

awesome-hacking-tools

😱An awesome curated list for hacking & pentesting tools!
https://github.com/Jackelele/awesome-hacking-tools

Last synced: 21 days ago
JSON representation

Android Security

Application Repackaging Detectors

  • FSquaDRA - A tool for detection of repackaged Android applications based on app resources hash comparison.

Application Vulnerability Scanners

  • QARK - QARK by LinkedIn is for app developers to scan app for security issues (Updated 17 months ago)
  • AndroBugs - A Framework for Android vulnerability anslysis to find potential security vulernabilities. (Updated 5 years ago)
  • Nogotofail - Network security testing tool for developers and security researchers (Updated 5 months ago)
  • QARK - QARK by LinkedIn is for app developers to scan app for security issues (Updated 17 months ago)

Books

Dynamic Analysis Tools

  • Androidl4b - A Virtual Machine For Assessing Android applications, Reverse Engineering and Malware Analysis
  • AppUse - Custom build platform for security testing ($200 1 year License)
  • Android Tamer - Virtual / Live Platform for Android Security Professionals
  • Appie - Appie is a software package that has been pre-configured to function as an Android Pentesting Environment. It is completely portable and can be carried on USB stick or smartphone. This is a one stop answer for all the tools needed in Android Application Security Assessment and an awesome alternative to existing virtual machines.
  • Taintdroid - requires AOSP compilation
  • Mobile-Security-Framework MobSF - Mobile Security Framework is an intelligent, all-in-one open source mobile application (Android/iOS) automated pen-testing framework capable of performing static, dynamic analysis and web API testing
  • Inspeckage - Android Package Inspector - dynamic analysis with api hooks, start unexported activities and more. (Xposed Module)
  • Android Hooker - Dynamic Java code instrumentation (requires the Substrate Framework)
  • ProbeDroid - Dynamic Java code instrumentation
  • DECAF - Dynamic Executable Code Analysis Framework based on QEMU (DroidScope is now an extension to DECAF)
  • CuckooDroid - Android extension for Cuckoo sandbox
  • Mem - Memory analysis of Android (root required)
  • AuditdAndroid
  • Aurasium - place reference monitor.
  • StaDynA - A system supporting security app analysis in the presence of dynamic code update features (dynamic class loading and reflection). This tool combines static and dynamic analysis of Android applications in order to reveal the hidden/updated behavior and extend static analysis results with this information.
  • Vezir Project - Virtual Machine for Mobile Application Pentesting and Mobile Malware Analysis
  • MARA - Mobile Application Reverse engineering and Analysis Framework
  • AndroPyTool - A tool for extracting static and dynamic features from Android APKs. It combines different well-known Android apps analysis tools such as DroidBox, FlowDroid, Strace, AndroGuard or VirusTotal analysis.
  • Runtime Mobile Security (RMS) - A powerful web interface that helps you to manipulate Android and iOS Apps at Runtime
  • Taintdroid - requires AOSP compilation
  • Taintdroid - requires AOSP compilation
  • AuditdAndroid
  • DECAF - Dynamic Executable Code Analysis Framework based on QEMU (DroidScope is now an extension to DECAF)
  • Android Security Evaluation Framework - not under active development anymore
  • Xposed - equivalent of doing Stub based code injection but without any modifications to the binary

Fuzz Testing

Market Crawlers

Misc Tools

Online Analyzers

  • Appknox - A platform to help you build safe and secure mobile systems (PAID)
  • AVC UnDroid - Select an APK to be analysed using AVC unDroid. (FREE)
  • Virus Total - Analyse a file, URL or search using the tool online. (FREE)
  • AppCritique - Upload your Android APKs & iOS Apps and receive comprehensive free security assessments. (FREE & PAID)
  • AMAaaS - Free Android Malware Analysis Service. A baremetal service features static and dynamic analysis for Android applications. A product of MalwarePot. (FREE)
  • App Detonator - Detonate APK binary to provide source code level details including app author, signature, build and manifest information. 3 Analysis/day free quota.
  • BitBann - Analyse files or via URL, maximum upload is 20 MB - You can login to maximise size (FREE)
  • App Ray - An automated mobile application security testing. Identifying vulnerabilities and more. (PAID)
  • NowSecure Lab Automated - Enterprise tool for mobile app security testing both Android and iOS mobile apps. Lab Automated features dynamic and static analysis on real devices in the cloud to return results in minutes. (6 MONTHS FREE)

Others

Research Papers

Reverse Engineering

Static Analysis Tools

  • Android Decompiler - Decompile and debug, breakdown and analyse files. Demo Available
  • PSCout - A tool that extracts the permission specification from the Android OS source code using static analysis
  • SPARTA - Verifies (proves) that an app satisfies an information-flow security policy; built on the Checker Framework
  • SmaliSCA - Smali Static Code Analysis
  • CFGScanDroid - Scans and compares CFG against CFG of malicious applications
  • Madrolyzer - Extracts actionable data like C&C, phone number etc.
  • RiskInDroid - A tool for calculating the risk of Android apps based on their permissions, with online demo available.
  • SUPER - Secure, Unified, Powerful and Extensible Rust Android Analyzer
  • ClassyShark - Standalone binary inspection tool which can browse any Android executable and show important infos.
  • StaCoAn - Crossplatform tool which aids developers, bugbounty hunters and ethical hackers performing static code analysis on mobile applications. This tool was created with a big focus on usability and graphical guidance in the user interface.
  • JAADAS - Joint intraprocedure and interprocedure program analysis tool to find vulnerabilities in Android apps, built on Soot and Scala
  • Androwarn - detect and warn the user about potential malicious behaviours developed by an Android application.
  • CFGScanDroid - Scans and compares CFG against CFG of malicious applications

Vulnerabilities

Application Security

Application Security Learning Resources

Blogs

  • NCC Group - Blog - The blog of NCC Group, formerly Matasano, iSEC Partners, and NGS Secure.

Tools

Websites

Asset Discovery

Business Communication Infrastructure Discovery

Cloud Infrastructure Discovery

  • Buckets Grayhatwarfare - Search for Open Amazon s3 Buckets and their contents
  • CloudScraper - A tool to spider websites for cloud resources (S3 Buckets, Azure Blobs, DigitalOcean Storage Space)
  • InSp3ctor - AWS S3 Bucket/Object finder
  • Spaces-finder - A tool to hunt for publicly accessible DigitalOcean Spaces
  • GCPBucketBrute - A Google Storage buckets enumeration script
  • CloudStorageFinder - Tools to find public data in cloud storage systems

Company Information and Associations

  • Crunchbase - Information about companies (funding, acquisition, merger etc.) and the people behind them
  • OverSeas Registries - List of company registries located around the world

Content Discovery

  • RustButer - Files, directories and vhost buster written in Rust.

Data Leaks

  • Dumpmon - A twitter bot which monitors multiple paste sites for password dumps and other sensitive information
  • Pastebin_scraper - Automated tool to monitor pastebin for interesting information
  • Scavenger - Paste sites crawler (bot) looking for leaked credentials
  • Pwnbin - Python based Pastebin crawler for keywords.
  • PwnedOrNot - Tool to find passwords for compromised accounts

Domain / Subdomain Discovery

  • Dns-nsec3-enum - Nmap NSE Script for NSEC3 walking
  • Crt.sh
  • Wolframalpha - Computational knowledge engine
  • Project Sonar - Forward DNS Data
  • Project Sonar - Reverse DNS Data
  • Amass - A subdomain enumeration utility
  • Sublist3r - Subdomains enumeration tool with multiple sources
  • Aiodnsbrute - Asynchronous DNS brute force utility
  • LDNS - A DNS library useful for DNS tool programming
  • Nsec3map - A tool to NSEC and NSEC3 walking
  • Ct-exposer - A tool to discovers sub-domains by searching Certificate Transparency logs
  • Certgraph - A tool to crawl the graph of certificate Alternate Names
  • Appsecco - The art of subdomain enumeration - The supplement material for the book "The art of sub-domain enumeration"
  • SSLScrape - A scanning tool to scrape hostnames from SSL certificates
  • GoBuster - Directory/File, DNS and VHost busting tool written in Go
  • Bluto - Recon, Subdomain Bruting, Zone Transfers
  • SubFinder - SubFinder is a subdomain discovery tool that discovers valid subdomains for websites. Designed as a passive framework to be useful for bug bounties and safe for penetration testing.
  • Amass - A subdomain enumeration utility

Email Discovery

  • Hunter - Email search for a domain
  • Email Extractor - Chrome extension to extract emails from web pages
  • linkedin2username - OSINT Tool: Generate username lists for companies on LinkedIn
  • Convertcsv - Online tool to extract email addresses in text, web pages, data files etc.
  • Email Extractor - Chrome extension to extract emails from web pages
  • Email Extractor - Chrome extension to extract emails from web pages

Internet Scan / Archived Information

Internet Survey Data

  • Project Sonar - Rapid7’s internet-wide surveys data across different services and protocols
  • Portradar - Free and open port scan data by packet.tel

IP Address Discovery

  • Mxtoolbox - Bulk Domain/IP lookup tool
  • Domaintoipconverter - Bulk domain to IP converter
  • Googleapps Dig - Online Dig tool by Google
  • DataSploit (IP Address Modules) - An OSINT Framework to perform various recon techniques
  • Domain Dossier - Investigate domains and IP addresses
  • Bgpview - Search ASN, IPv4/IPv6 or resource name
  • bgp - Internet Backbone and Colocation Provider ... Hurricane Electric IP Transit. Our Global Internet Backbone provides IP Transit with low latency, access to thousands of networks, and dual-stack
  • Viewdns
  • Ultratools ipv6Info - Multiple information related to IPv6 address
  • Whois - Command line utility usually used to find information about registered users/assignees of an Internet resource.
  • Linux - us/windows-server/administration/windows-commands/nslookup) - Command line utility usually used for querying the DNS records
  • Massdns - A DNS resolver utility for bulk lookups
  • Domaintoipconverter - Bulk domain to IP converter

Network/Port Scanning

  • Nmap - A free and open source utility for network discovery. The most popular port scanner.
  • Zmap - A fast network scanner designed for Internet-wide network surveys
  • Masscan - An asynchronously TCP port scanner