Martin Vigo

rayhunter. Rust tool to detect cell site simulators on an orbic mobile hotspot

netzob. Netzob: Protocol Reverse Engineering, Modeling and Fuzzing

apple_bleee. Apple BLE research

hardware-hacking. Some stuff about Hardware Hacking

IMSI-catcher. This program show you IMSI numbers of cellphones around you.

phoneinfoga. Information gathering framework for phone numbers

PEASS-ng. PEASS - Privilege Escalation Awesome Scripts SUITE (with colors)

MBE. Course materials for Modern Binary Exploitation by RPISEC

Real-Time-Voice-Cloning. Clone a voice in 5 seconds to generate arbitrary speech in real-time

data-brokers. A simply complicated guide to removing your info from data brokers

The-Hackers-Hardware-Toolkit. The best hacker's gadgets for Red Team pentesters and security researchers.

PayloadsAllTheThings. A list of useful payloads and bypass for Web Application Security and Pentest/CTF

evilarc. Create tar/zip archives that can exploit directory traversal vulnerabilities

linux-exploit-suggester. Linux privilege escalation auditing tool

sqli-labs. SQLI labs to test error based, Blind boolean based, Time based.

bug-bounty-reference. Inspired by https://github.com/djadmin/awesome-bug-bounty, a list of bug bounty write-up that is categorized by the bug nature

awesome-infosec. A curated list of awesome infosec courses and training resources.

awesome-threat-intelligence. A curated list of Awesome Threat Intelligence resources

Awesome-Red-Teaming. List of Awesome Red Teaming Resources

awesome-exploit-development. A curated list of resources (books, tutorials, courses, tools and vulnerable applications) for learning about Exploit Development

Infosec_Reference. An Information Security Reference That Doesn't Suck; https://rmusser.net/git/admin-2/Infosec_Reference for non-MS Git hosted version.

linux-exploitation-course. A Course on Intermediate Level Linux Exploitation

pixel-captcha-project. It's a unicode based visual CAPTCHA scheme that can be solved with 2-4 mouse clicks.

awesome-appsec. A curated list of resources for learning about application security

aboriginal. Aboriginal Linux - http://landley.net/aboriginal/about.html

write-ups-2016. Wiki-like CTF write-ups repository, maintained by the community. 2016

iOS10-Runtime-Headers. iOS 10 Runtime Headers

iOS9-SpringBoard-Headers. Objective-C

xsser. Cross Site "Scripter" (aka XSSer) is an automatic -framework- to detect, exploit and report XSS vulnerabilities in web-based applications.

SecLists. SecLists is the security tester's companion. It's a collection of multiple types of lists used during security assessments, collected in one place. List types include usernames, passwords, URLs, sensitive data patterns, fuzzing payloads, web shells, and many more.

certbot. Certbot is EFF's tool to obtain certs from Let's Encrypt and (optionally) auto-enable HTTPS on your server. It can also act as a client for any other CA that uses the ACME protocol.

lastpass-ruby. LastPass Ruby API

qark. Tool to look for several security related Android application vulnerabilities

dex2jar. Tools to work with android .dex and java .class files

Core-Data-Editor. Core Data Editor lets you easily view, edit and analyze applications‘ data. Core Data Editor is compatible with Mac and iOS applications and supports XML, SQLite and binary stores, visualizes all relationships and is able to edit the data and generate Objective-C code for the data model.

androwarn. Yet another static code analyzer for malicious Android applications

Vezir-Project. Yet Another Linux Virtual Machine for Mobile Application Pentesting and Mobile Malware Analysis

retire.js. scanner detecting the use of JavaScript libraries with known vulnerabilities. Can also generate an SBOM of the libraries it finds.

DVIA. Damn Vulnerable iOS App (DVIA) is an iOS application that is damn vulnerable. Its main goal is to provide a platform to mobile security enthusiasts/professionals or students to test their iOS penetration testing skills in a legal environment. This application covers all the common vulnerabilities found in iOS applications (following OWASP top 10 mobile risks) and contains several challenges that the user can try. This application also contains a section where a user can read various articles on iOS application security. This project is developed and maintained by @prateekg147. The vulnerabilities and solutions covered in this app are tested upto iOS 8.1 .

ios-keychain-analyzer. iOS Keychain Analyzer

idb. idb is a tool to simplify some common tasks for iOS pentesting and research

sslyze. Fast and powerful SSL/TLS scanning library.