Mobile Audit
Mobile Audit is a SAST and malware analysis tool for Android APKs, utilizing Docker for easy deployment in a multiplatform environment. It provides detailed information such as application info, security info, SAST findings, best practices implemented, Virus Total info, certificate info, strings, databases, and files.
FEATURES
ALTERNATIVES
A script that implements Cognito attacks such as Account Oracle or Priviledge Escalation
A web-based tool for instrumenting and analyzing Android applications using Flask, Jinja, and Redis.
EvoMaster is an open-source tool that automatically generates system-level test cases for web APIs using AI-driven techniques.
Static code analysis tool for infrastructure as code (IaC) and software composition analysis (SCA) with over 1000 built-in policies for AWS, Azure, and Google Cloud.
ffufai is an AI-enhanced wrapper for ffuf that automatically suggests file extensions for web fuzzing based on the target URL and headers.
Yaramod is a library for parsing YARA rules into AST and building new YARA rulesets with C++ programming interface.
A comprehensive cheatsheet for XSS filter evasion techniques.
PINNED
InfoSecHired
An AI-powered career platform that automates the creation of cybersecurity job application materials and provides company-specific insights for job seekers.
Mandos Brief Newsletter
A weekly newsletter providing cybersecurity leadership insights, industry updates, and strategic guidance for security professionals advancing to management positions.
Checkmarx SCA
A software composition analysis tool that identifies vulnerabilities, malicious code, and license risks in open source dependencies throughout the software development lifecycle.
Check Point CloudGuard WAF
A cloud-native web application and API security solution that uses contextual AI to protect against known and zero-day threats without signature-based detection.
Orca Security
A cloud-native application protection platform that provides agentless security monitoring, vulnerability management, and compliance capabilities across multi-cloud environments.
DryRun
A GitHub application that performs automated security code reviews by analyzing contextual security aspects of code changes during pull requests.
Wiz
Wiz Cloud Security Platform is a cloud-native security platform that enables security, dev, and devops to work together in a self-service model, detecting and preventing cloud security threats in real-time.