# BlackHat Tools List | Android | iOS | Mobile Hackers

**URL:** <https://onehack.st/t/blackhat-tools-list-android-ios-mobile-hackers/165874>\
**Category:** Tools & Scripts\
**Tags:** tools, hacking, android, operating-system\
**Created:** [December 11, 2020, 12:44pm UTC](https://onehack.st/t/blackhat-tools-list-android-ios-mobile-hackers/165874 "2020-12-11T12:44:46Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![Aina](https://onehack.st/user_avatar/onehack.st/aina/32/167469_2.png) [@Aina](https://onehack.st/u/Aina)\
**Post date:** [December 11, 2020, 12:44pm UTC](https://onehack.st/t/blackhat-tools-list-android-ios-mobile-hackers/165874/1 "2020-12-11T12:44:46Z")

</div>

![image](https://onehack.st/uploads/default/original/3X/5/8/5818fb38917d11ecac92cbd97eaa5d87b1d33ef3.png)

# Black Hat Tools List 2018

Android, iOS, and mobile hackers

Vulnerable iOS app: Swift version

> [https://github.com/prateek147/DVIA-v2](https://github.com/prateek147/DVIA-v2)

Code evaluation - OWASP dependency check

> [https://github.com/jeremylong/DependencyCheck](https://github.com/jeremylong/DependencyCheck)

Cougar scan

> [http://https//github.com/pumasecurity/puma-scan](http://https//github.com/pumasecurity/puma-scan)

Encryption - DeepViolet: SSL / TLS scanning API and tools

> [https://github.com/spoofzu/DeepViolet](https://github.com/spoofzu/DeepViolet)

Data forensics and incident response - Beginner to expert

> [http://https//github.com/bro/bro](http://https//github.com/bro/bro)

CyBot: Open Source Threat Intelligence Chatbot

> [https://github.com/CylanceSPEAR/CyBot](https://github.com/CylanceSPEAR/CyBot)

LogonTracer

> [https://github.com/JPCERTCC/LogonTracer](https://github.com/JPCERTCC/LogonTracer)

Rastrea2r (reload!): Collect and hunt IOC with Gusto and Style

> [https://github.com/rastrea2r/rastrea2r](https://github.com/rastrea2r/rastrea2r)

RedHunt OS (VM): Virtual machine for adversary emulation and threat search

> [https://github.com/redhuntlabs/RedHunt-OS](https://github.com/redhuntlabs/RedHunt-OS)

Exploitation and ethical hacking - AVET: AntiVirus Evasion Tool

> [http://https//github.com/govolution/avet](http://https//github.com/govolution/avet)

DSP: Docker Security Playground

> [https://github.com/giper45/DockerSecurityPlayground](https://github.com/giper45/DockerSecurityPlayground)

hideNsneak: Attack Confusion Framework

> [https://github.com/rmikehodges/hideNsneak](https://github.com/rmikehodges/hideNsneak)

Merlin

> [https://github.com/Ne0nd0g/merlin](https://github.com/Ne0nd0g/merlin)

RouterSploit

> [https://github.com/threat9/routersploit](https://github.com/threat9/routersploit)

Hardware / Embedded - ChipWhisperer

> [https://github.com/newaetech/chipwhisperer](https://github.com/newaetech/chipwhisperer)

JTAGulator: Uncover the Achilles heel of hardware security

> [https://github.com/grandideastudio/jtagulator](https://github.com/grandideastudio/jtagulator)

Micro-Renovator: Bring the processor firmware into the code

> [https://github.com/syncsrc/MicroRenovator](https://github.com/syncsrc/MicroRenovator)

TumbleRF: RF Blur becomes easy

> [https://github.com/riverloopsec/tumblerf](https://github.com/riverloopsec/tumblerf)

Walrus: Make the most of your card cloning device

> [https://github.com/TeamWalrus/Walrus](https://github.com/TeamWalrus/Walrus)

IoT- Scalable Dynamic Analysis Framework for IoT Devices

> [https://github.com/sycurelab/DECAF](https://github.com/sycurelab/DECAF)

BLE CTF project

> [https://github.com/hackgnar/ble\_ctf](https://github.com/hackgnar/ble_ctf)

WHID Syringe and WHID Elite: Next Generation HID Aggressive Device

> [https://github.com/whid-injector/WHID](https://github.com/whid-injector/WHID)

Malware Defense - Provides advanced deep learning analysis platform for every security researcher

> [https://github.com/intel/Resilient-ML-Research-Platform](https://github.com/intel/Resilient-ML-Research-Platform)

EKTotal

> [https://github.com/nao-sec/ektotal](https://github.com/nao-sec/ektotal)

Firmware Audit: Platform Firmware Security Automation for Blue Teams and DFIR

> [https://github.com/PreOS-Security/fwaudit](https://github.com/PreOS-Security/fwaudit)

MaliceIO

> [https://github.com/maliceio/malice](https://github.com/maliceio/malice)

Goal — see MacOS Security Tools

> [https://github.com/objective-see](https://github.com/objective-see)

Malware offensive: BloodHound 1.5

> [https://github.com/BloodHoundAD/BloodHound](https://github.com/BloodHoundAD/BloodHound)

Cyber ​​attack: armory

> [https://github.com/depthsecurity/armory](https://github.com/depthsecurity/armory)

Chiron: An advanced IPv6 security assessment and [penetration testing](http://www.ddosi.com/2018/07/07/%e6%b8%97%e9%80%8f%e6%b5%8b%e8%af%95/) framework

> [https://github.com/aatlasis/Chiron](https://github.com/aatlasis/Chiron)

DELTA: SDN Security Assessment Framework

> [https://github.com/OpenNetworkingFoundation/DELTA](https://github.com/OpenNetworkingFoundation/DELTA)

Mallet: Intercepting agent for any protocol

> [http://https//github.com/sensepost/mallet](http://https//github.com/sensepost/mallet)

PowerUpSQL: PowerShell Toolkit for attacking SQL Server in an enterprise environment

> [https://github.com/NetSPI/PowerUpSQL](https://github.com/NetSPI/PowerUpSQL)

WarBerryPi

> [https://github.com/secgroundzero/warberry](https://github.com/secgroundzero/warberry)

Network Defense - ANWI (New Wireless IDS): $5 WIDS

> [https://github.com/SanketKarpe/anwi](https://github.com/SanketKarpe/anwi)

CHIRON: Home-based network analysis and machine learning threat detection framework

> [https://github.com/jzadeh/chiron-elk](https://github.com/jzadeh/chiron-elk)

Cloud Security Suite: One-stop tool for AWS / GCP / Azure security auditing at

> [https://github.com/SecurityFTW/cs-suite](https://github.com/SecurityFTW/cs-suite)

DejaVu: An open source spoofing framework

> [https://github.com/bhdresh/Dejavu](https://github.com/bhdresh/Dejavu)

OSINT — Open Source Smart: DataSploit 2.0

> [https://github.com/DataSploit/datasploit](https://github.com/DataSploit/datasploit)

Dradis framework: Learn how to reduce reporting time by half

> [https://github.com/dradis/dradis-ce](https://github.com/dradis/dradis-ce)

Reverse Engineering - Snake: Malware Storage Zoo

> [https://github.com/countercept/snake](https://github.com/countercept/snake)

Smart Grid/Industrial Safety - GRFICS: Graphic Realism Framework for Industrial Control Simulation

> [https://github.com/djformby/GRFICS](https://github.com/djformby/GRFICS)

Vulnerability Assessment - Robustness Toolbox for Machine Learning Models

> [https://github.com/IBM/adversarial-robustness-toolbox](https://github.com/IBM/adversarial-robustness-toolbox)

Android Dynamic Analysis Tool (ADA)

> [https://github.com/ANELKAOS/ada](https://github.com/ANELKAOS/ada)

Archery: Open Source Vulnerability Assessment and Management

> [https://github.com/archerysec/archerysec](https://github.com/archerysec/archerysec)

Boofuzz

> [https://github.com/jtpereyda/boofuzz](https://github.com/jtpereyda/boofuzz)

BTA

> [https://github.com/airbus-seclab/bta](https://github.com/airbus-seclab/bta)

Take advantage of

> [https://github.com/13o-bbr-bbq/machine\_learning\_security/tree/master/DeepExploit](https://github.com/13o-bbr-bbq/machine_learning_security/tree/master/DeepExploit)

Halcyon IDE: for Nmap script developers

> [https://github.com/s4n7h0/Halcyon](https://github.com/s4n7h0/Halcyon)

SimpleRisk

> [https://github.com/simplerisk](https://github.com/simplerisk)

TROMMEL

> [https://github.com/CERTCC/trommel](https://github.com/CERTCC/trommel)

Web AppSec - Take a look at NGINX’s ModSec 3.0: Software Web Application Firewall

> [https://github.com/SpiderLabs/ModSecurity](https://github.com/SpiderLabs/ModSecurity)

Astra: Automatic security testing of the REST API

> [https://github.com/flipkart-incubator/Astra](https://github.com/flipkart-incubator/Astra)

Burp Replicator: Replication of automated complex vulnerabilities

> [https://github.com/PortSwigger/replicator](https://github.com/PortSwigger/replicator)

OWASP offensive web testing framework

> [https://github.com/owtf/owtf](https://github.com/owtf/owtf)

OWASP JoomScan project

> [https://github.com/rezasp/joomscan](https://github.com/rezasp/joomscan)

WSSAT

> [https://github.com/YalcinYolalan/WSSAT](https://github.com/YalcinYolalan/WSSAT)

`Source: GitHub`

## HAPPY LEARNING! ❤

---

<div class="post-metadata">

**Author:** ![Aina](https://onehack.st/user_avatar/onehack.st/aina/32/167469_2.png) [@Aina](https://onehack.st/u/Aina)\
**Post date:** [December 11, 2020, 12:58pm UTC](https://onehack.st/t/blackhat-tools-list-android-ios-mobile-hackers/165874/2 "2020-12-11T12:58:53Z")

</div>


