thec00n

smart-contract-honeypots. This repo contains a collection of smart contract honeypots.

Smart-Contract-Hacker-Playground. Learn smart contract security by hacking popular smart contract systems.

etherscan_verified_contracts. Verified contracts synced from Etherscan

Uploader. Burp extension to test for directory traversal attacks in insecure file uploads

Dradis-Vuln-Table. Dradis Vuln Table extension for Burp suite

smart-contract-best-practices. A guide to smart contract security best practices

0x_audit_report_2018-07-23. 0x Protocol v2 Audit

not-so-smart-contracts. Examples of Solidity security issues

blockchainSecurityDB. HTML

0x-protocol-specification. Specification for 0x protocol

learn-plasma. Learn all about Plasma with LearnPlasma!

EIPs. The Ethereum Improvement Proposal repository

solidity-parser-antlr. A Solidity parser for JS built on top of a robust ANTLR4 grammar

solidity. Solidity, the Contract-Oriented Programming Language

SWC-registry. Smart Contract Weakness Classification and Test Cases

sabre. Security Verification Tool for Solidity Code

ethereum-analyzer-suites-runner. Code for running the Ethereum analysis tools over the analyzer benchmark suites

crossclient-chainspec. Templates for Parity chainspec and Geth genesis - both compatible for a cross-client development network

owasp-mstg. The Mobile Security Testing Guide (MSTG) is a manual for testing the security of mobile apps. It describes technical processes for verifying the controls listed in the OWASP Mobile Application Verification Standard (MASVS). The MSTG is meant to provide a baseline set of test cases for black-box and white-box security tests, and to help ensure completeness and consistency of the tests.

mythril. Security analysis tool for Ethereum smart contracts

AndroidDecompiler. Decompile any APK

burp-suite-error-message-checks. Burp Suite extension to passively scan for applications revealing server error messages