cxzero

jwt-editor

A Burp Suite extension for creating and editing JSON Web Tokens. This tool supports signing and verification of JWS, encryption and decryption of JWE and automation of several well-known attacks against applications that consume JWT.

RWXfinder

The program uses the Windows API functions to traverse through directories and locate DLL files with RWX section

JavaClasses

GeneXus Standard Classes for Java and Android generators.

DotNetClasses

GeneXus Standard Classes for .NET and .NET Core generators.

TrollStore

Jailed iOS app that can install IPAs permanently with arbitary entitlements and root helpers because it trolls Apple

CCSupport

Support tweak for CC modules!

adbproxy

ADB proxy for capturing port forward/reverse-forward messages

darter

:detective: Dart / Flutter VM snapshot analyzer

blutter

Flutter Mobile Application Reverse Engineering Tool

JNI-Frida-Hook

Script to quickly hook natives call to JNI in Android

frida-scripts

A collection of my Frida.re instrumentation scripts to facilitate reverse engineering of mobile apps.

APKEnum

CVE-2024-4577

PHP CGI Argument Injection (CVE-2024-4577) Remote Code Execution PoC

param-miner

x8-Burp

Hidden parameters discovery suite

Doldrums

A Flutter/Dart reverse engineering tool

ConscryptTrustUserCerts

adguardcert

Magisk module that allows using AdGuard's HTTPS filtering for all apps

Tutorial-AndroidNetworkInterception

How to intercept network trafic on Android

android-ssl-pinning-demo

A tiny demo Android app using SSL pinning to block HTTPS MitM interception

community-plugins

Repository for community provided Binary Ninja plugins

Wallbreaker

🔨 Break Java Reverse Engineering form Memory World!

frida-dexdump

A frida tool to dump dex in memory to support security engineers analyzing malware.

Esteemaudit-Metasploit

Porting for Metasploit of the infamous Esteemaudit RDP Exploit

kwetza

Python script to inject existing Android applications with a Meterpreter payload.

mallet

Mallet is an intercepting proxy for arbitrary protocols

reGeorg

The successor to reDuh, pwn a bastion webserver and create SOCKS proxies through the DMZ. Pivot and pwn.

gowitness

🔍 gowitness - a golang, web screenshot utility using Chrome Headless

CMSeeK

CMS Detection and Exploitation suite - Scan WordPress, Joomla, Drupal and over 180 other CMSs

ctfr

Abusing Certificate Transparency logs for getting HTTPS websites subdomains.