The OWASP Mobile Application Security Testing Guide (MASTG) is a comprehensive manual for mobile app security testing and reverse engineering. It describes technical processes for verifying the OWASP Mobile Security Weakness Enumeration (MASWE) weaknesses, which are in alignment with the OWASP MASVS.
Repository Index
47,133 repositories indexed
25–48 of 257 · Most stars
Exploitation Framework for Embedded Devices
Scapy: the Python-based interactive packet manipulation program & library.
- scapy
- python
- network
- network-analysis
Main Sigma Rule Repository
🛡️ Open-source and cloud-native Web Application Firewall (WAF)
Low code web framework for real world applications, in Python and Javascript
- frappe
- erpnext
- python
- javascript
The recursive internet scanner for hackers. 🧡
the LLM vulnerability scanner
- ai
- llm-evaluation
- llm-security
- security-scanners
🐚 Python-powered shell. Full-featured, cross-platform and AI-friendly.
- xonsh
- devops
- iterm2
- data-engineering
📱 objection - runtime mobile exploration
Prevent cloud misconfigurations and find vulnerabilities during build-time in infrastructure as code, container images and open source packages with Checkov by Bridgecrew.
Malicious traffic detection system
Bandit is a tool designed to find common security issues in Python code.
- linter
- bandit
- security-tools
- security-scanner
Trail of Bits skills for security research, vulnerability detection, and audit workflows
Multi-Cloud Security Auditing Tool
Automated Adversary Emulation Platform
- adversary-emulation
- caldera
- security-automation
- red-team
Centralized network visibility and continuous asset discovery. Monitor devices, detect change, and stay aware across distributed networks.
- network-security
- selfhosted
- wifi-network
- wifi-security
Securely and anonymously share files, host websites, and chat with friends using the Tor network
- tor
- file-sharing
- onionshare
- onion-service
Infection Monkey - An open-source adversary emulation platform
- penetration-testing
- security-tools
- security-automation
- infection-monkey
CTFs as you need them
An AI-powered security review GitHub Action using Claude to analyze code changes for security vulnerabilities.
Cowrie SSH/Telnet Honeypot https://docs.cowrie.org/
An all-in-one hacking tool to remotely take over Android devices.
- adb
- android
- android-debug-bridge
- cybersecurity
Scanning APK file for URIs, endpoints & secrets.
- mobile-security
- android-security
- reverse-engineering
- bugbounty