Discover nowsecure/cybertruckchallenge19 Open Source project

monitor filesystem on iOS / OS X / Android / FirefoxOS / Linux

1,159

fsmon

881

secure-mobile-development

A Collection of Secure Mobile Development Best Practices

NodeJS module and commandline utility for re-signing iOS applications (IPA files).

552

node-applesign

Cycript fork powered by Frida.

420

frida-cycript

374

android-forensics

Open source Android Forensics app and framework

OWASP Password Strength Test for Node.js

360

owasp-password-strength-test

Trace APIs declaratively through Frida.

237

frida-trace

AirSpy - Frida-based tool for exploring and tracking the evolution of Apple's AirDrop protocol implementation on i/macOS, from the server's perspective. Released during BH USA 2019 Training https://www.nowsecure.com/event/advanced-frida-and-radare-a-hackers-delight/

217

airspy

Samsung Remote Code Execution as System User

143

samsung-ime-rce-poc

radare2 IO plugin for Linux and Android. Modifies files owned by other users via dirtycow Copy-On-Write cache vulnerability

121

dirtycow

r2lldb

radare2-lldb integration

Mobile Incident Response Book

mobile-incident-response

Inspect and manipulate UIKit-based GUIs through Frida.

frida-uikit

Inspect and manipulate UIWebView-hosted GUIs through Frida.

frida-uiwebview

A C++11 library providing simple API for public-key encryption

nscrypto-cpp

frida-fs

Create a stream from a filesystem resource.

Grab screenshots using Frida.

frida-screenshot

PoC code for android RCE with multidex and ZIP files

android-rce-multidex-and-zip-files

The radare2 + frida book for Mobile Application assessment

r2frida-book

Extract the Info.plist from an IPA

ipa-extract-info

The NowSecure Action delivers fast, accurate, automated security analysis of iOS and Android apps coded in any language

nowsecure-action

Cycript backend powered by Frida.

mjolner

Create an outbound stream over a message transport.

frida-remote-stream

Easy crash-reporting for Frida-based applications.

frida-panic

MVC framework for working with the Gtk3 TreeView widget

datagrid-gtk3

Fork of https://github.com/androguard/androguard w/ bug fixes tests

androguard

Node.js bindings for nscrypto-cpp

node-nscrypto

C++

mobile-security-report

The NowSecure Mobile Security Report

Create a stream from one or more memory regions.

frida-memory-stream

NodeJS library to extract the entitlements from MACH-O or FAT-MACH-O binaries

node-macho-entitlements

fat mach-o file-format parsers

node-fatmacho

Generate a Mobile SBOM for an application and submit to the Dependency submission API

nowsecure-sbom-action

disk-buffer

Disk buffer as a writable stream

nsq-bundle

Check if your Mach-O bin is encrypted

macho-is-encrypted

Parse iTunes Enterprise Partner Feeds.

epf-parser

CLI tool for starting Nowsecure auto security assessments for Android and iOS mobile app

nowsecure-platform-cli

A key-based throttling mechanism for levelup-compliant data stores.

level-throttle

Builder for the io.js packages for Cydia

iojs-cydia

Makefile

interval-to-ltgt

Convert an interval string to a levelup style ltgt object

macho-ts

Golang bindings for the libimobiledevice library.

goidevice

apt-packages-diff

Rust

gitlabci

Dockerfile

auto-gitlab-plugin

Dockerfile

ipa-extract-exec

Extract the executable from an IPA file along with helpful meta data.

NowSecure Auto Security Test Jenkins Plugin

auto-jenkins-plugin

Android security workshop material taught during the CyberTruck Challenge 2022 (Michigan USA).

cybertruckchallenge22

Test app for NowSecure Root Detection Bypass tutorial

NowSecure-Android-Root-Detection-Test-App

auto-azure-extension

Azure DevOps Extension for NowSecure Auto Security Test

NowSecure Auto Security Test CircleCI Plugin

test-apks

Exploiting-Android-WebViews-with-Frida

Kotlin

auto-circleci-plugin