isecpartners Goto Github PK

android-killpermandsigchecks

Bypass signature and permission checks for IPCs

android-opendebug

Make any application debuggable

android-ssl-bypass

Black box tool to bypass SSL verification on Android, even when pinning is used.

android-ssl-trustkiller

Bypass SSL certificate pinning for most applications

ccs-testing-tool

dnsredir

extractparam

femtocatcher

fuzzbox

A multi-codec media fuzzing tool.

gizmo

A graphical web proxy written in Java. It is designed to be speedy, with the user interfaced centered around keyboard use. It should do what you want, and then get out of your way.

hiccupy

Jython binding for Burp to facilitate realtime traffic analysis and modification using simple plugins.

introspy-analyzer

introspy-android

Security profiling for blackbox Android

introspy-ios

Security profiling for blackbox iOS

ios-ssl-kill-switch

Blackbox tool to disable SSL certificate validation - including certificate pinning - within iOS Apps

jailbreak

Jailbreak

jailbreak-windows

Certificate extraction tool for Windows

libshambles

A library for efficient interception of established TCP connections

libtech-auditing-cheatsheet

manifest-explorer

A tool for viewing Android application Manifests.

nano-ecc

A very small ECC implementation for 8-bit microcontrollers

package-play

Tool for viewing Android package details, including permissions, services, activities, and more.

peachfarmer

A log collector for Peach fuzzing in the cloud

publications

iSEC Partners' research publications

r2b2

A brute-forcing delta robot

rtspfuzzer

RTSP network protocol fuzzer

samlpummel

A BeanShell plugin for WebScarab to automate SAML auditing.

scout

AWS EC2 and S3 Security Auditing Tool

securenscoder

NSKeyed(Un)ArchiverDelegate implementation to encrypt state prior to preservation and decrypt it when restoring.

sqlperms

A tool for calculating necessary SQL Server permissions