ConDroid is a project that performs concolic execution of Android apps, driving the execution to specific code locations without manual interaction, allowing dynamic analysis of behaviors like network traffic or dynamic code loading. It is an extension of the Acteve project and aims to automate the testing of smartphone apps.
FEATURES
EXPLORE BY TAGS
SIMILAR TOOLS
BunkerWeb is a next-generation and open-source Web Application Firewall (WAF) with seamless integration and user-friendly customization options.
A vulnerable by design infrastructure on Azure featuring the latest released OWASP Top 10 web application security risks (2021) and other misconfigurations.
A tool to conduct preliminary security checks in code, infrastructure, or IAM configurations using various open-source tools.
A collection of mobile security resources with tools, white papers, ebooks, and webinars.
An integrated security platform that provides API discovery, runtime protection, security testing, and incident response capabilities for web applications, APIs, and AI systems.
StaCoAn is a cross-platform tool for static code analysis on mobile applications, emphasizing the identification of security vulnerabilities.
An API security and governance platform that provides discovery, security testing, compliance monitoring and lifecycle management capabilities for enterprise API implementations.
A third-party Nginx module that prevents common web attacks by reading a small subset of simple rules containing 99% of known patterns involved in website vulnerabilities.
A web application designed to be 'Xtremely Vulnerable' for security enthusiasts to learn application security.
PINNED

Mandos
Fractional CISO service that helps B2B companies implement security leadership to win enterprise deals, achieve compliance, and develop strategic security programs.

Checkmarx SCA
A software composition analysis tool that identifies vulnerabilities, malicious code, and license risks in open source dependencies throughout the software development lifecycle.

Orca Security
A cloud-native application protection platform that provides agentless security monitoring, vulnerability management, and compliance capabilities across multi-cloud environments.

DryRun
A GitHub application that performs automated security code reviews by analyzing contextual security aspects of code changes during pull requests.