scriptingxss

owasp-fstm

The Firmware Security Testing Methodology (FSTM) is composed of nine stages tailored to enable security researchers, software developers, consultants, and Information Security professionals with conducting firmware security assessments.

IoTGoat

IoTGoat is a deliberately insecure firmware based on OpenWrt.

EmbedOS

EmbedOS - Embedded security testing virtual machine

embeddedappsec

Embedded AppSec Best Practices

firmwalker

Script for searching the extracted firmware file system for goodies!

OWASP-IoT-Top-10-2018-Mapping

OWASP IoT Top 10 2018 Mapping Project

ubi_reader

Collection of Python scripts for reading information about and extracting data from UBI and UBIFS images.

GPCamera

GoPro

IoT-Top10

IoT Top 10 Document Repository

owasp-mstg

The Mobile Security Testing Guide (MSTG) is a comprehensive manual for mobile app security development, testing and reverse engineering.

ROPgadget

This tool lets you search your gadgets on your binaries to facilitate your ROP exploitation. ROPgadget supports ELF, PE and Mach-O format on x86, x64, ARM, ARM64, PowerPC, SPARC and MIPS architectures.

armx

ARM-X Firmware Emulation Framework

awesome-embedded-and-iot-security

A curated list of awesome embedded and IoT security resources.

dragonslayer

fwanalyzer

a tool to analyze filesystem images

iot-inspector-client

IoT Inspector Client

IoT-Security-Verification-Standard-ISVS

OWASP IoT Security Verification Standard (ISVS)

jtd-remote

Example of Just the Docs as a remote theme

OHSTM

Open Hardware Security Testing Methodology

openwrt-examples

Examples for creating OpenWrt programs&packages.

owasp-masvs

The Mobile Application Security Verification Standard (MASVS) is a standard for mobile app security.

PASTA1.0

PASTA: Portable Automotive Security Testbed with Adaptability

pupy

Pupy is an opensource, cross-platform (Windows, Linux, OSX, Android) remote administration and post-exploitation tool mainly written in python

qira

QEMU Interactive Runtime Analyser

r00kie-kr00kie

PoC exploit for the CVE-2019-15126 kr00k vulnerability

s3enum

Fast Amazon S3 bucket enumeration tool for pentesters.

ScoutSuite

Multi-Cloud Security Auditing Tool

securekubernetes

Attacking and Defending Kubernetes Clusters: A Guided Tour

Software-Component-Verification-Standard

Software Component Verification Standard (SCVS)

The-Hackers-Hardware-Toolkit

The best hacker's gadgets for Red Team pentesters and security researchers.