deepkirdat13

JSA

Javascript security analysis (JSA) is a program for javascript analysis during web application security assessment.

bounty-targets-data

This repo contains hourly-updated data dumps of bug bounty platform scopes (like Hackerone/Bugcrowd/Intigriti/etc) that are eligible for reports

kakaotalk_analysis

reFlutter

Flutter Reverse Engineering Framework

Android-App-Link-Verification-Tester

Checks if an Android application has successfully completed the "App Link Verification" process for Android App Links.

quark-engine

Quark Agent - Your AI-powered Android APK Analyst

grapefruit

(WIP) Runtime Application Instruments for iOS. Previously Passionfruit

Swift-Apps-Reverse-Engineering

Swift Apps Reverse Engineering reading book

gow

Unix command line utilities installer for Windows.

igoat

OWASP iGoat - A Learning Tool for iOS App Pentesting and Security by Swaroop Yermalkar

vulnerability-Checklist

This repository contain a lot of web and api vulnerability checklist , a lot of vulnerability ideas and tips from twitter

BetterBugBounty

BetterBugBounty - Here tools are classic, bugs are hunted, and nostalgia is the ultimate weapon!

ParamSpider

Mining URLs from dark corners of Web Archives for bug hunting/fuzzing/further probing

subfuz

A subdomain fuzzing tool

apkleaks

Scanning APK file for URIs, endpoints & secrets.

apkurlgrep

Extract endpoints from APK files

Reverse-Engineering

A FREE comprehensive reverse engineering tutorial covering x86, x64, 32-bit/64-bit ARM and embedded RISC-V architectures.

PoC-in-GitHub

📡 PoC auto collect from GitHub. ⚠️ Be careful Malware.

APKLab

Android Reverse-Engineering Workbench for VS Code

xencrypt

A PowerShell script anti-virus evasion tool

awesome-oneliner-bugbounty

A collection of awesome one-liner scripts especially for bug bounty tips.

the-book-of-secret-knowledge

A collection of inspiring lists, manuals, cheatsheets, blogs, hacks, one-liners, cli/web tools and more.

OSCP

OSCP Cheat Sheet

websec-answers

Websec interview questions by tib3rius answered

Spray

A Password Spraying tool for Active Directory Credentials by Jacob Wilkin(Greenwolf)

spraycharles

Low and slow password spraying tool, designed to spray on an interval over a long period of time

KingOfBugBountyTips

Our main goal is to share tips from some well-known bughunters. Using recon methodology, we are able to find subdomains, apis, and tokens that are already exploitable, so we can report them. We wish to influence Onelinetips and explain the commands, for the better understanding of new hunters..

exploitation-course

Offensive Software Exploitation Course

lzone-cheat-sheets

A collection of sysadmin / DevOps / system architecture cheat sheets hosted on https://lzone.de

exploit-notes

Sticky notes for pentesting, bug bounty, CTF.