TartarusLabs

iGoat-Swift

OWASP iGoat (Swift) - A Damn Vulnerable Swift Application for iOS

igoat

OWASP iGoat - A Learning Tool for iOS App Pentesting and Security by Swaroop Yermalkar

dumpdecrypted

Dumps decrypted mach-o files from encrypted iPhone applications from memory to disk. This tool is necessary for security researchers to be able to look under the hood of encryption.

objection

📱 objection - runtime mobile exploration

ssl-kill-switch2

Blackbox tool to disable SSL certificate validation - including certificate pinning - within iOS and macOS applications.

password_cracking_rules

One rule to crack all passwords. or atleast we hope so.

drozer

The Leading Security Assessment Framework for Android.

frida

Clone this repo to build Frida

naabu

A fast port scanner written in go with a focus on reliability and simplicity. Designed to be used in combination with other tools for attack surface discovery in bug bounties and pentests

nuclei-templates

Community curated list of templates for the nuclei engine to find security vulnerabilities.

nuclei

Fast and customizable vulnerability scanner based on simple YAML based DSL.

mobile-nuclei-templates

Mobile-Security-Framework-MobSF

Mobile Security Framework (MobSF) is an automated, all-in-one mobile application (Android/iOS/Windows) pen-testing, malware analysis and security assessment framework capable of performing static and dynamic analysis.

AndroidEmbedIT

A quick and dirty python script to embed a Metasploit generated APK file into another APK for fun.

dex2jar

Tools to work with android .dex and java .class files

amass

In-depth attack surface mapping and asset discovery

zigdiggity

A ZigBee hacking toolkit by Bishop Fox

killerbee

IEEE 802.15.4/ZigBee Security Research Toolkit

rtl_433

Program to decode radio transmissions from devices on the ISM bands (and other frequencies)

btlejuice

BtleJuice Bluetooth Smart (LE) Man-in-the-Middle framework

modbus-cli

Modbus command line utility

warvox

sipvicious

SIPVicious OSS is a VoIP security testing toolset. It helps security teams, QA and developers test SIP-based VoIP systems and applications. This toolset is useful in simulating VoIP hacking attacks against PBX systems especially through identification, scanning, extension enumeration and password cracking.

vlany

Linux LD_PRELOAD rootkit (x86 and x86_64 architectures)

Jynx2

JynxKit2 is an LD_PRELOAD userland rootkit based on the original JynxKit. The backdoor has been replaced with an "accept()" system hook.

AggressorScripts

Aggressor scripts for use with Cobalt Strike 3.0+

MalleableC2Profiles

Malleable C2 profiles for Cobalt Strike

Empire

Empire is a post-exploitation and adversary emulation framework that is used to aid Red Teams and Penetration Testers.

Invoke-ZeroLogon

Invoke-ZeroLogon allows attackers to impersonate any computer, including the domain controller itself, and execute remote procedure calls on their behalf.

Invoke-PSImage

Encodes a PowerShell script in the pixels of a PNG file and generates a oneliner to execute