Ecosyste.ms: Awesome
An open API service indexing awesome lists of open source software.
awesome-hacking-tools
😱An awesome curated list for hacking & pentesting tools!
https://github.com/Jackelele/awesome-hacking-tools
Last synced: 1 day ago
JSON representation
-
Android Security
-
Static Analysis Tools
- SmaliSCA - Smali Static Code Analysis
- CFGScanDroid - Scans and compares CFG against CFG of malicious applications
- Madrolyzer - Extracts actionable data like C&C, phone number etc.
- RiskInDroid - A tool for calculating the risk of Android apps based on their permissions, with online demo available.
- SUPER - Secure, Unified, Powerful and Extensible Rust Android Analyzer
- ClassyShark - Standalone binary inspection tool which can browse any Android executable and show important infos.
- StaCoAn - Crossplatform tool which aids developers, bugbounty hunters and ethical hackers performing static code analysis on mobile applications. This tool was created with a big focus on usability and graphical guidance in the user interface.
- JAADAS - Joint intraprocedure and interprocedure program analysis tool to find vulnerabilities in Android apps, built on Soot and Scala
- Android Decompiler - Decompile and debug, breakdown and analyse files. **Demo Available**
- PSCout - A tool that extracts the permission specification from the Android OS source code using static analysis
- SPARTA - Verifies (proves) that an app satisfies an information-flow security policy; built on the [Checker Framework](https://types.cs.washington.edu/checker-framework/)
- Androwarn - detect and warn the user about potential malicious behaviours developed by an Android application.
-
Application Vulnerability Scanners
- QARK - QARK by LinkedIn is for app developers to scan app for security issues (Updated 17 months ago)
- AndroBugs - A Framework for Android vulnerability anslysis to find potential security vulernabilities. (Updated 5 years ago)
- Nogotofail - Network security testing tool for developers and security researchers (Updated 5 months ago)
-
Dynamic Analysis Tools
- Mobile-Security-Framework MobSF - Mobile Security Framework is an intelligent, all-in-one open source mobile application (Android/iOS) automated pen-testing framework capable of performing static, dynamic analysis and web API testing
- Inspeckage - Android Package Inspector - dynamic analysis with api hooks, start unexported activities and more. (Xposed Module)
- Android Hooker - Dynamic Java code instrumentation (requires the Substrate Framework)
- ProbeDroid - Dynamic Java code instrumentation
- DECAF - Dynamic Executable Code Analysis Framework based on QEMU (DroidScope is now an extension to DECAF)
- CuckooDroid - Android extension for Cuckoo sandbox
- Mem - Memory analysis of Android (root required)
- AuditdAndroid
- Aurasium - place reference monitor.
- StaDynA - A system supporting security app analysis in the presence of dynamic code update features (dynamic class loading and reflection). This tool combines static and dynamic analysis of Android applications in order to reveal the hidden/updated behavior and extend static analysis results with this information.
- Vezir Project - Virtual Machine for Mobile Application Pentesting and Mobile Malware Analysis
- MARA - Mobile Application Reverse engineering and Analysis Framework
- AndroPyTool - A tool for extracting static and dynamic features from Android APKs. It combines different well-known Android apps analysis tools such as DroidBox, FlowDroid, Strace, AndroGuard or VirusTotal analysis.
- Runtime Mobile Security (RMS) - A powerful web interface that helps you to manipulate Android and iOS Apps at Runtime
- Androidl4b - A Virtual Machine For Assessing Android applications, Reverse Engineering and Malware Analysis
- AppUse - Custom build platform for security testing ($200 1 year License)
- Android Tamer - Virtual / Live Platform for Android Security Professionals
- Appie - Appie is a software package that has been pre-configured to function as an Android Pentesting Environment. It is completely portable and can be carried on USB stick or smartphone. This is a one stop answer for all the tools needed in Android Application Security Assessment and an awesome alternative to existing virtual machines.
- Android Security Evaluation Framework - not under active development anymore
- Taintdroid - requires AOSP compilation
-
Reverse Engineering
- Smali/Baksmali
- Emacs syntax coloring for smali files
- Androguard
- Android Framework for Exploitation
- Bypass signature and permission checks for IPCs
- Android OpenDebug
- Dex2Jar - Dex to jar converter
- Enjarify - Dex to jar converter from Google
- JD-GUI - Java decompiler
- Jad - Java decompiler
- Vim syntax coloring for smali files
- Indroid
-
Fuzz Testing
- Radamsa Fuzzer - Android port of [Radamsa](https://gitlab.com/akihe/radamsa)
- Honggfuzz - A security oriented, feedback-driven, evolutionary, easy-to-use fuzzer with interesting analysis options.
- An Android port of the melkor ELF fuzzer - An ELF File Format Fuzzer
- MMFA - Media Fuzzing Framework for Android
- AndroFuzz - A simple file format fuzzer for android. Used by me to fuzz pdf readers, but should work for any file format.
-
Application Repackaging Detectors
- FSquaDRA - A tool for detection of repackaged Android applications based on app resources hash comparison.
-
Market Crawlers
- Google play crawler (Java)
- Google play crawler (Python)
- Google play crawler (Node) - get app details and download apps from official Google Play Store.
- Aptoide downloader (Node) - download apps from Aptoide third-party Android market
- Appland downloader (Node) - download apps from Appland third-party Android market
- Apkpure - Online apk downloader. Provides also an own app for downloading.
-
Misc Tools
- adb autocomplete - This is a Bash completion script
- Android InsecureBank - For practice
- mitmproxy - This repository contains the mitmproxy and pathod projects
- dockerfile/androguard - Docker file for building androguard dependencies w/ an optional interactive shell environment.
- Android Vulnerability Test Suite - Android-vts scans a device for set of vulnerabilities
- AppMon - AppMon is an automated framework for monitoring and tampering system API calls of native macOS, iOS and android apps. It is based on Frida.
- Internal Blue - Bluetooth experimentation framework based on Reverse Engineering of Broadcom Bluetooth Controllers
- Dalvik opcodes
- ExploitMe Android Labs - For practice
- Android Device Security Database - Database of security features of Android devices
-
Research Papers
-
Others
-
Vulnerabilities
- Android Malware Github repo
- Contagio Mobile Malware Mini Dump
- Kharon Malware Dataset - 7 malwares which have been reverse engineered and documented
- Android Reports and Resources - List of Android Hackerone disclosed reports and other resources
- Android's reported security vulnerabilities
- Android Devices Security Patch Status
- AOSP - Issue tracker
- Android Malware Genome Project - contains 1260 malware samples categorized into 49 different malware families, free for research purpose.
- VirusTotal Malware Intelligence Service - powered by VirusTotal, not free
- Drebin
- Android Adware and General Malware Dataset
- Android PRAGuard Dataset - The dataset contains 10479 samples, obtained by obfuscating the MalGenome and the Contagio Minidump datasets with seven different obfuscation techniques.
- AndroZoo - AndroZoo is a growing collection of Android Applications collected from several sources, including the official Google Play app market.
- Android Security Reward Program
-
Online Analyzers
- AMAaaS - Free Android Malware Analysis Service. A baremetal service features static and dynamic analysis for Android applications. A product of MalwarePot. **(FREE)**
- Appknox - A platform to help you build safe and secure mobile systems **(PAID)**
- AVC UnDroid - Select an APK to be analysed using AVC unDroid. **(FREE)**
- Virus Total - Analyse a file, URL or search using the tool online. **(FREE)**
- AppCritique - Upload your Android APKs & iOS Apps and receive comprehensive free security assessments. **(FREE & PAID)**
- App Detonator - Detonate APK binary to provide source code level details including app author, signature, build and manifest information. **3 Analysis/day free quota**.
- BitBann - Analyse files or via URL, maximum upload is 20 MB - You can login to maximise size **(FREE)**
- App Ray - An automated mobile application security testing. Identifying vulnerabilities and more. **(PAID)**
-
Books
-
-
Asset Discovery
-
Domain / Subdomain Discovery
- Amass - A subdomain enumeration utility
- Sublist3r - Subdomains enumeration tool with multiple sources
- Aiodnsbrute - Asynchronous DNS brute force utility
- LDNS - A DNS library useful for DNS tool programming
- Nsec3map - A tool to NSEC and NSEC3 walking
- Ct-exposer - A tool to discovers sub-domains by searching Certificate Transparency logs
- Certgraph - A tool to crawl the graph of certificate Alternate Names
- Appsecco - The art of subdomain enumeration - The supplement material for the book "The art of sub-domain enumeration"
- SSLScrape - A scanning tool to scrape hostnames from SSL certificates
- GoBuster - Directory/File, DNS and VHost busting tool written in Go
- Bluto - Recon, Subdomain Bruting, Zone Transfers
- Dns-nsec3-enum - Nmap NSE Script for NSEC3 walking
- Crt.sh
- Wolframalpha - Computational knowledge engine
- Project Sonar - Forward DNS Data
- Project Sonar - Reverse DNS Data
-
Content Discovery
- RustButer - Files, directories and vhost buster written in Rust.
-
IP Address Discovery
- Massdns - A DNS resolver utility for bulk lookups
- Mxtoolbox - Bulk Domain/IP lookup tool
- Domaintoipconverter - Bulk domain to IP converter
- Googleapps Dig - Online Dig tool by Google
- DataSploit (IP Address Modules) - An OSINT Framework to perform various recon techniques
- Domain Dossier - Investigate domains and IP addresses
- Bgpview - Search ASN, IPv4/IPv6 or resource name
- Viewdns
- Ultratools ipv6Info - Multiple information related to IPv6 address
- Whois - Command line utility usually used to find information about registered users/assignees of an Internet resource.
- Linux - us/windows-server/administration/windows-commands/nslookup) - Command line utility usually used for querying the DNS records
- bgp - Internet Backbone and Colocation Provider ... Hurricane Electric IP Transit. Our Global Internet Backbone provides IP Transit with low latency, access to thousands of networks, and dual-stack
-
Email Discovery
- linkedin2username - OSINT Tool: Generate username lists for companies on LinkedIn
- Hunter - Email search for a domain
- Email Extractor - Chrome extension to extract emails from web pages
-
Network/Port Scanning
-
Business Communication Infrastructure Discovery
- MicroBurst - PowerShell based Azure security assessment scripts
- Lyncsmash - Tools to enumerate and attack self-hosted Lync/Skype for Business
- Enumeration-as-a-Service
- ruler - A tool to abuse Exchange services
- Mxtoolbox - Online tool to check mail exchanger (MX) records
-
Source Code Aggregators / Search - Information Discovery
-
Cloud Infrastructure Discovery
- CloudScraper - A tool to spider websites for cloud resources (S3 Buckets, Azure Blobs, DigitalOcean Storage Space)
- InSp3ctor - AWS S3 Bucket/Object finder
- Spaces-finder - A tool to hunt for publicly accessible DigitalOcean Spaces
- GCPBucketBrute - A Google Storage buckets enumeration script
- CloudStorageFinder - Tools to find public data in cloud storage systems
- Buckets Grayhatwarfare - Search for Open Amazon s3 Buckets and their contents
-
Social Media / Employee Profiling
- LinkedInt - A LinkedIn scraper for reconnaissance
- Glassdoor - Company review and rating search
- SocialBlade - Track user statistics for different platforms including YouTube and Twitter
- Social-Searcher - Social Media Search Engine
-
Data Leaks
- Scavenger - Paste sites crawler (bot) looking for leaked credentials
- Pwnbin - Python based Pastebin crawler for keywords.
- PwnedOrNot - Tool to find passwords for compromised accounts
- Dumpmon - A twitter bot which monitors multiple paste sites for password dumps and other sensitive information
- Pastebin_scraper - Automated tool to monitor pastebin for interesting information
-
Company Information and Associations
- Crunchbase - Information about companies (funding, acquisition, merger etc.) and the people behind them
- OverSeas Registries - List of company registries located around the world
-
Internet Survey Data
- Project Sonar - Rapid7’s internet-wide surveys data across different services and protocols
- Portradar - Free and open port scan data by packet.tel
-
Internet Scan / Archived Information
- Cachedviews
- Wayback Machine - Internet Archive
- Zoomeye - Cyberspace Search Engine
-
-
Application Security
-
Websites
- Juice Shop - An intentionally insecure Javascript Web Application.
- OWASP NodeGoat - Purposly vulnerable to the OWASP Top 10 Node.JS web application, with [tutorials](https://nodegoat.herokuapp.com/tutorial), [security regression testing with the OWASP Zap API](https://github.com/OWASP/NodeGoat/wiki/NodeGoat-Security-Regression-tests-with-ZAP-API), [docker image](https://github.com/owasp/nodegoat#option-3---run-nodegoat-on-docker). With several options to get up and running fast.
- Web App Sec Quiz - Self-assessment quiz for web application security
- SecurePasswords.info - Secure passwords in several languages/frameworks.
- Security News Feeds Cheat-Sheet - A list of security news sources.
- MicroCorruption - Capture The Flag - Learn Assembly and Embedded Device Security
-
Application Security Learning Resources
-
Blogs
- NCC Group - Blog - The blog of NCC Group, formerly Matasano, iSEC Partners, and NGS Secure.
-
Tools
- Qualys SSL Labs - The infamous suite of SSL and TLS tools.
-
-
Credits
-
Internet Scan / Archived Information
-
Programming Languages
Sub Categories
Dynamic Analysis Tools
20
Domain / Subdomain Discovery
16
Vulnerabilities
14
IP Address Discovery
12
Static Analysis Tools
12
Reverse Engineering
12
Misc Tools
10
Online Analyzers
8
Websites
6
Cloud Infrastructure Discovery
6
Market Crawlers
6
Others
5
Fuzz Testing
5
Data Leaks
5
Source Code Aggregators / Search - Information Discovery
5
Internet Scan / Archived Information
5
Business Communication Infrastructure Discovery
5
Network/Port Scanning
4
Social Media / Employee Profiling
4
Application Vulnerability Scanners
3
Email Discovery
3
Company Information and Associations
2
Internet Survey Data
2
Research Papers
2
Blogs
1
Books
1
Application Repackaging Detectors
1
Tools
1
Content Discovery
1
Application Security Learning Resources
1
Keywords
android
16
security
12
pentesting
11
osint
8
reverse-engineering
7
dns
6
mobile-security
6
python
5
hacking
5
dynamic-analysis
5
android-security
5
reconnaissance
5
static-analysis
5
security-tools
5
recon
4
owasp
4
apk
4
ios-app
3
subdomain
3
application-security
3
infosec
3
bugbounty
3
enumeration
3
java
3
android-application
3
network-analysis
2
go
2
runtime-analysis
2
nodejs
2
ios-security
2
owasp-top-ten
2
malware-analysis
2
javascript
2
mastg
2
mstg
2
crawler
2
frida
2
macos
2
brute-force
2
vulnerabilities
2
network-security
2
research
2
dex
2
ios
2
penetration-testing
2
golang
2
linux
2
dnssec
2
mobile-app
2
c
1