marksee

defcon_27_windbg_workshop

DEFCON 27 workshop - Modern Debugging with WinDbg Preview

drozer

The Leading Security Assessment Framework for Android.

dvja

Damn Vulnerable Java (EE) Application

flightsim

A utility to generate malicious network traffic and evaluate controls

frida-extract

Frida.re based RunPE (and MapViewOfSection) extraction tool

fridump

A universal memory dumper using Frida

glastopf

Web Application Honeypot

GoASQ

General Open Architecture Security Questionnaire

GoRedShell

A cross platform tool for verifying credentials and executing single commands

goSDL

goSDL

gowitness

🔍 gowitness - a golang, web screenshot utility using Chrome Headless

HashBot

IRC bot for cracking hashes

homebridge-fanimation

A plugin for a few Fanimation fans.

Inveigh

Inveigh is a Windows PowerShell LLMNR/NBNS spoofer with challenge/response capture over HTTP/SMB

iOS-11.1.2-15B202-Jailbreak

iOS 11.1.2 (15B202) Jailbreak

iOSAppReverseEngineering

The world’s 1st book of very detailed iOS App reverse engineering skills :)

jeb2-samplecode

Sample code and tutorials using the JEB2 APIs

MacDBG

Simple easy to use C and python debugging framework for OSX

MBE

Course materials for Modern Binary Exploitation by RPISEC

metasploit-payloads

Unified repository for different Metasploit Framework payloads

mitm-vm

An easy-to-deploy virtual machine that can provide flexible man-in-the-middle capabilities.

MobileApp-Pentest-Cheatsheet

The Mobile App Pentest cheat sheet was created to provide concise collection of high value information on specific mobile application penetration testing topics.

opencanary

Modular and decentralised honeypot

secure-mobile-development

Secure Mobile Development - A collection of best practices

slurp

Evaluate the security of S3 buckets

SmashedPotato

threadfixproapi

Python RESTFul API client module for ThreadFix Professional

training

Training materials crafted and publicly provided by Red Naga members

trudy

A transparent proxy that can modify and drop traffic for arbitrary TCP connections.

truffleHog

Searches through git repositories for high entropy strings and secrets, digging deep into commit history