Android Vulnerability Test Suite Logo

Android Vulnerability Test Suite

0
Free
Visit Website

This tool was meant to show the end user the attack surface that a given device is susceptible to. In implementing these checks we attempt to minimize or eliminate both false positives/false negatives without negatively affecting system stability. Rationale for necessity: When a vulnerability is discovered, Google receives word and applies a patch to Android. The Nexus devices are usually the devices that receive these patches quickest as they deviate the least (read: not at all) from AOSP (Android Open Source Project - The core of Android, where Google commits to). For example, the futex bug (CVE-2014-3153/Towelroot) was known about in late May, early June. This bug took multiple months to get patched on the flagship (at the time) Nexus 5. This leaves users extremely vulnerable to attack from applications. Users mostly do not know that their devices are vulnerable.

FEATURES

ALTERNATIVES

Finds publicly known security vulnerabilities in a website's frontend JavaScript libraries.

A collection of resources for securing AWS environments using the CIS Amazon Web Services Foundations Benchmark 1.1

A utility for testing AWS Lambda functions for SQL Injection vulnerabilities using SQLMap attacks.

Simple script to check a domain's email protections and identify vulnerabilities.

XGuardian XARA Security Scanner for OSX with URL scheme, Bundle ID, and keychain hijack checks.

A vulnerable web site in NodeJS for testing security source code analyzers.

Linux privilege escalation auditing tool for detecting security deficiencies in Linux kernels.

A tool for static analysis of known vulnerabilities, trojans, viruses, malware & other malicious threats in docker images/containers

PINNED