Shuffle Apps
All public apps are available in the search engine either in your local instance or on https://shuffler.io/search?tab=apps. This is a repository for apps to be used in Shuffle. PS: These apps should be valid with WALKOFF (from NSA), but the SDK is different, meaning you have to change the FIRST line in each Dockerfile (FROM frikky/shuffle:app_sdk) to make it compatible with Shuffle.
FEATURES
EXPLORE BY TAGS
SIMILAR TOOLS
Tools and documentation for validating hardware security requirements on x86 platforms, including bootable USB key creation and platform configuration verification.
Open-source rules for detecting and preventing email attacks like BEC, malware, and credential phishing.
A comprehensive checklist for securing Android apps
Android application for learning about vulnerabilities in modern Android apps and testing pentesting skills.
A PowerShell script that assesses security configurations of Siemens SIMATIC PCS 7 industrial control systems by collecting and analyzing data from various Windows and PCS7-specific sources.
Practical security policy enforcement for Android apps via bytecode rewriting and in-place reference monitor.
Alternative marketplace for mobile applications with package ID metadata retrieval and APK download capabilities.
Detect and warn about potential malicious behaviors in Android applications through static analysis.
An open-source phishing toolkit for businesses and penetration testers.
PINNED
Mandos
Fractional CISO service that helps B2B companies implement security leadership to win enterprise deals, achieve compliance, and develop strategic security programs.
Checkmarx SCA
A software composition analysis tool that identifies vulnerabilities, malicious code, and license risks in open source dependencies throughout the software development lifecycle.
Orca Security
A cloud-native application protection platform that provides agentless security monitoring, vulnerability management, and compliance capabilities across multi-cloud environments.
DryRun
A GitHub application that performs automated security code reviews by analyzing contextual security aspects of code changes during pull requests.