The Mobile Application Security Testing Guide (MASTG) is a comprehensive manual for mobile app security testing and reverse engineering. It describes the technical processes for verifying the controls listed in the OWASP Mobile Application Security Verification Standard (MASVS).

Binary instrumentation framework based on FRIDA

Python antivirus evasion tool

An analysis tool for Python that blurs the line between testing and type systems.

HaboMalHunter is a sub-project of Habo Malware Analysis System (https://habo.qq.com), which can be used for automated malware analysis and security assessment on the Linux system.

Packj stops ⚡ Solarwinds-, ESLint-, and PyTorch-like attacks by flagging malicious/vulnerable open-source dependencies ("weak links") in your software supply-chain

Python AV Evasion Tools

An ethereum evm bytecode disassembler and static/dynamic analysis tool

OPEM (Open Source PEM Fuel Cell Simulation Tool)

Frida scripts for mobile application dynamic-analysis.

Elevate your 🐍 code with optimal data structure recommendations from pyggester.

Static and dynamic Android application security analysis

Find exploitable PHP files by parameter fuzzing and function call tracing

Malware Detection using Machine Learning (MDML)

Cryptographic Dataset Generation & Modelling Framework

Android malware detection using static and dynamic analysis

DIG is a numerical invariant generation tool. It infers program invariants or properties over (i) program execution traces or (ii) program source code. DIG supports many forms of numerical invariants, including nonlinear equalities, octagonal and interval properties, min/max-plus relations, and congruence relations.

AutoCorpus is a tool backed by a large language model (LLM) for automatically generating corpus files for fuzzing.

EVM debugger

Sample Python script for automating WebInspect scans and pushing results to SSC