H3arts

analysisApk

get_url_ip_from_apk

androguard

Reverse engineering, Malware and goodware analysis of Android applications ... and more (ninja !)

android-security-awesome

A collection of android security related resources

awesome-hacking

Awesome hacking is an awesome collection of hacking tools.

BurpSuite-collections

BurpSuite收集：包括不限于 Burp 文章、破解版、插件(非BApp Store)、汉化等相关教程，欢迎添砖加瓦

cobra

Cobra - Cobra is a static code analysis system that automates the detecting vulnerabilities and security issue.(白盒代码安全审计系统)

dirfuzz

多线程网站目录穷举扫描

docker

docker

drozer

The Leading Security Assessment Framework for Android.

drozer-modules

find-sec-bugs

The FindBugs plugin for security audits of Java web applications and Android applications. (Also work with Scala projects)

free-programming-books

:books: Freely available programming books

h3arts.github.io

hosts

:statue_of_liberty:最新可用的google hosts文件。镜像：

ivideo

一个可以观看国内主流视频平台所有视频的客户端（Mac、Windows、Linux），包括 VIP 资源

JAADAS

Joint Advanced Defect assEsment for android applications

LinuxCheck

linux信息收集脚本 主要用于应急响应

Micro8

Mind-Map

各种安全相关思维导图整理收集

Mobile-Security-Framework-MobSF

Mobile Security Framework is an intelligent, all-in-one open source mobile application (Android/iOS) automated pen-testing framework capable of performing static, dynamic analysis and web API testing.

qark

Tool to look for several security related Android application vulnerabilities

search

搜索

secbook

信息安全从业者书单推荐

soot

Soot - A Java optimization framework

sqlmap

Automatic SQL injection and database takeover tool

w9scan

Plug-in type web vulnerability scanner

WeChatLuckyMoney

:money_with_wings: WeChat's lucky money helper (微信抢红包插件). An Android app that helps you grab red packets in WeChat groups.

wiki.secmobi.com

SecMobi Wiki is a collection of mobile security resources.

wooyun_public

乌云公开漏洞、知识库爬虫和搜索 crawl and search for wooyun.org public bug(vulnerability) and drops

wyproxy

proxying and recording HTTP/HTTPs/Socks5 proxy flow, save to MYSQL database.