go1f

AndroBugs_Framework

AndroBugs Framework is an efficient Android vulnerability scanner that helps developers or hackers find potential security vulnerabilities in Android applications. No need to install on Windows.

androbugs2

AndroBugs Framework is an efficient Android vulnerability scanner that helps developers or security researchers find potential security vulnerabilities in Android applications.

fernflower

Unofficial mirror of FernFlower Java decompiler (All pulls should be submitted upstream)

lynis

Lynis - Security auditing tool for Linux, macOS, and UNIX-based systems. Assists with compliance testing (HIPAA/ISO27001/PCI DSS) and system hardening. Agentless, and installation optional.

qark

Tool to look for several security related Android application vulnerabilities

webvm

Virtual Machine for the Web

-root-

利用漏洞获取临时root权限，再永久获取root权限，仅限于mtk设备2021年以前的内核

reptyr

Reparent a running program to a new terminal

presidio

Context aware, pluggable and customizable data protection and de-identification SDK for text and images

sieve

procyon

Procyon is a suite of Java metaprogramming tools, including a rich reflection API, a LINQ-inspired expression tree API for runtime code generation, and a Java decompiler.

go-netflow

go netflow, capture process in/out traffic, similar to c Nethogs.

appshark

Appshark is a static taint analysis platform to scan vulnerabilities in an Android app.

ChatGPT-Next-Web

A cross-platform ChatGPT/Gemini UI (Web / PWA / Linux / Win / MacOS). 一键拥有你自己的跨平台 ChatGPT/Gemini 应用。

cfr

This is the public repository for the CFR Java decompiler

gocat

21st century, multi-purpose relay from source to destination

strongR-frida-android

An anti detection version frida-server for android.

copilot-gpt4-service

Convert Github Copilot to ChatGPT

LAN-port-scan-forbidder

Forbid untrusted webs to access localhost or LAN. An anti-scan protection 🛡️🏡

webscan

Browser-based network scanner & local-IP detection

turnscan.js

Scanning LAN hosts from Chrome using ICE servers

SS-Rule-Snippet

搜集、整理、维护 Surge / Quantumult (X) / Shadowrocket / Surfboard / clash (Premium) 实用规则。

awesome-adb

ADB Usage Complete / ADB 用法大全

Detect-It-Easy

Program for determining types of files for Windows, Linux and MacOS.

eop-next-api

BlueTeamTools

蓝队分析研判工具箱，功能包括内存马反编译分析、各种代码格式化、网空资产测绘功能、溯源辅助、解密冰蝎流量、解密哥斯拉流量、解密Shiro/CAS/Log4j2的攻击payload、IP/端口连接分析、各种编码/解码功能、蓝队分析常用网址、java反序列化数据包分析、Java类名搜索、Fofa搜索、Hunter搜索等。

ecapture

Capturing SSL/TLS plaintext without a CA certificate using eBPF. Supported on Linux/Android kernels for amd64/arm64.

owasp-mastg

The Mobile Application Security Testing Guide (MASTG) is a comprehensive manual for mobile app security testing and reverse engineering. It describes the technical processes for verifying the controls listed in the OWASP Mobile Application Security Verification Standard (MASVS).

AutoFuze

Autofuze has been developped to provide a full toolkit to fuzz and pentest several protocols used in automotive industry such as USB, XCP, UDS, CAN. Everything is done in Python to provide a convenient way to develop automated test.

adb-arm

ADB for ARM (binary + build script)