Posts
-
prisma-multi-tenant
🧭 Use Prisma as a multi-tenant provider for your application
npm i -g prisma-multi-tenant prisma-multi-tenant init # Init multi-tenancy in your Prisma projectTags: #typescript • prisma • multi-tenant
-
needle
The iOS Security Testing Framework
Assessing the security of an iOS application typically requires a plethora of tools, each developed for a specific need and all with different modes of operation and syntax. The Android ecosystem has tools like “drozer” that have solved this problem and aim to be a ‘one stop shop’ for the majority of use cases, however iOS does not have an equivalent.
Needle is the MWR’s iOS Security Testing Framework, released at Black Hat USA in August 2016. It is an open source modular framework which aims to streamline the entire process of conducting security assessments of iOS applications, and acts as a central point from which to do so. Needle is intended to be useful not only for security professionals, but also for developers looking to secure their code. A few examples of testing areas covered by Needle include: data storage, inter-process communication, network communications, static code analysis, hooking and binary protections. The only requirement in order to run Needle effectively is a jailbroken device.
The release of version 1.0.0 provided a major overhaul of its core and the introduction of a new native agent, written entirely in Objective-C. The new NeedleAgent is an open source iOS app complementary to Needle, that allows to programmatically perform tasks natively on the device, eliminating the need for third party tools.
Needle has been presented at and used by workshops in various international conferences like Black Hat USA/EU, OWASP AppSec and DEEPSEC. It was also included by ToolsWatch in the shortlist for the Top Security Tools of 2016, and it is featured in the OWASP Mobile Testing Guide.
Needle is open source software, maintained by MWR InfoSecurity.
Tags: #python • pentesting • ios
-
git-labelmaker
:flags: Manage your GitHub labels from the command line!
Edit GitHub labels from the command line using
git-labelmaker! You can easily add or remove GitHub labels, making it easier for your projects to adhere to a sane labelling scheme.Tags: #javascript • command-line • cli
-
recommendable
:+1::-1: A recommendation engine using Likes and Dislikes for your Ruby app
Recommendable is a gem that allows you to quickly add a recommendation engine for Likes and Dislikes to your Ruby application using my version of [Jaccardian similarity and memory-based collaborative filtering][collaborative filtering].
Tags: #ruby • redis • sidekiq
-
strongbox
Strongbox is an artifact repository manager.
Strongbox is a modern OSS artifact repository manager. With a well-developed architecture, it provides native implementations for various layout formats, such as [Maven][docs-maven], [NPM][docs-npm], [NuGet][docs-nuget], and [Raw][docs-raw].
All of the implemented layout formats (a.k.a. “[layout providers][docs-providers]”) are written natively in Java. Our goal is to implement a universal repository manager that can host and serve artifacts in every mainstream format.
Strongbox has a search engine and an [Artifact Query Language][docs-aql].
Tags: #java • artifact-repository-manager • maven
-
one_gadget
The best tool for finding one gadget RCE in libc.so.6
When playing ctf pwn challenges we usually need the one-gadget RCE (remote code execution), which leads to call
execve('/bin/sh', NULL, NULL).This gem provides such gadgets finder, no need to use objdump or IDA-pro every time like a fool :wink:
To use this tool, type
one_gadget /path/to/libcin command line and enjoy the magic :laughing:Tags: #ruby • ctf • pwnable
-
homebrew-rmtree
Remove a formula and its unused dependencies
It’s an external command for Homebrew that provides a new command,
rmtree, that will uninstall that formula, and uninstall any of its dependencies that have no formula left installed that depend on them. The command will check all dependencies recursively starting at the one specified on the command line.This is tricky business. So this command comes with a warning.
Tags: #ruby
-
ts-mockito
Mocking library for TypeScript
Mocking library for TypeScript inspired by http://mockito.org/
Tags: #typescript • mockito • stub
-
bot
Completely free and open-source human-like Instagram bot. Powered by UIAutomator2 and compatible with basically any Android device 5.0+ that can run Instagram - real or emulated.
It’s very hard nowadays to grow an account. Have you ever been on the explore page? IG will show your post only to close accounts & accounts you interact most with, you will never be on the explore page. Nobody will see your beautiful photos, your hilarious memes, or whatever you are posting. But now you can do something about that! With GramAddict you can get noticed easily, and if you really deserve it, your account will grow super fast!
Tags: #python • android • automation
-
react-native-image-resizer
🗻 Resize local images with React Native
⚠ Warning Since version 3.0.0 this library has been moved from
react-native-image-resizerto@bam.tech/react-native-image-resizerTags: #java • react-native • android
subscribe via RSS