bbakbbak2

dvta

Damn Vulnerable Thick Client App

ghidra_scripts

Scripts for the Ghidra software reverse engineering suite.

CVE-2019-0232

Apache Tomcat Remote Code Execution on Windows

jexboss

JexBoss: Jboss (and Java Deserialization Vulnerabilities) verify and EXploitation Tool

API-Security-Checklist

Checklist of the most important security countermeasures when designing, testing, and releasing your API

Inspeckage

Android Package Inspector - dynamic analysis with api hooks, start unexported activities and more. (Xposed Module)

RE-iOS-Apps

A completely free, open source and online course about Reverse Engineering iOS Applications.

android-restriction-bypass

PoC to bypass Android restrictions

capstone

Capstone disassembly/disassembler framework for ARM, ARM64 (ARMv8), Alpha, BPF, Ethereum VM, HPPA, LoongArch, M68K, M680X, Mips, MOS65XX, PPC, RISC-V(rv32G/rv64G), SH, Sparc, SystemZ, TMS320C64X, TriCore, Webassembly, XCore and X86.

cutter

Free and Open Source Reverse Engineering Platform powered by rizin

idaplugins-list

A list of IDA Plugins

JavaDeserH2HC

Sample codes written for the Hackers to Hackers Conference magazine 2017 (H2HC).

CheatSheetSeries

The OWASP Cheat Sheet Series was created to provide a concise collection of high value information on specific application security topics.

MyPapers

Repository for hosting my research papers

Serverless-Goat

OWASP ServerlessGoat: a serverless application demonstrating common serverless security flaws

apkstudio

Open-source, cross platform Qt based IDE for reverse-engineering Android application packages.

WebGoat.NET

OWASP WebGoat.NET

OpenDoor

OWASP WEB Directory Scanner

NodeGoat

The OWASP NodeGoat project provides an environment to learn how OWASP Top 10 security risks apply to web applications developed using Node.js and how to effectively address them.

wstg

The Web Security Testing Guide is a comprehensive Open Source guide to testing the security of web applications and web services.

JAADAS

Joint Advanced Defect assEsment for android applications

skf-flask

Security Knowledge Framework (SKF) Python Flask / Angular project

SecurityShepherd

Web and mobile application security training platform

owasp-masvs

The OWASP MASVS (Mobile Application Security Verification Standard) is the industry standard for mobile app security.

MASTG-Hacking-Playground

chomp-scan

A scripted pipeline of tools to streamline the bug bounty/penetration test reconnaissance phase, so you can focus on chomping bugs.

httpscreenshot

dirsearch

Web path scanner

aquatone

A Tool for Domain Flyovers

WebShell

Webshell && Backdoor Collection