podvps

Shadowrocket-ADBlock-Rules

提供多款 Shadowrocket 规则，带广告过滤功能。用于 iOS 未越狱设备选择性地自动翻墙。

faraday

Open Source Vulnerability Management Platform

retire.js

scanner detecting the use of JavaScript libraries with known vulnerabilities. Can also generate an SBOM of the libraries it finds.

Scanners-Box

A powerful and open-source toolkit for hackers and security automation - 安全行业从业者自研开源扫描器合辑

XSStrike

Most advanced XSS scanner.

exploitdb

The legacy Exploit Database repository - New repo located at https://gitlab.com/exploit-database/exploitdb

fastjson60-DoS

fastjson 在1.2.60以下时，处理/xHH出现问题，导致程序OOM，最终导致DoS

POC

一些漏洞检测/利用脚本

BuTian_Spider

2019 补天厂商爬虫与数据可视化文件打包

kunpeng

kunpeng是一个Golang编写的开源POC框架/库，以动态链接库的形式提供各种语言调用，通过此项目可快速开发漏洞检测类的系统。

pocsuite3

pocsuite3 is an open-sourced remote vulnerability testing framework developed by the Knownsec 404 Team.

get_domain

JustTrustMe

An xposed module that disables SSL certificate checking for the purposes of auditing an app with cert pinning

Dex2oatHunter

Automatic Unpacking Tool for Android Dex Files

Frida-Android-unpack

this unpack script for Android O and Android P

DexHunter

General Automatic Unpacking Tool for Android Dex Files

Android-Debug-Database

A library for debugging android databases and shared preferences - Make Debugging Great Again

dumpDex

💯一款Android脱壳工具，需要xposed支持, 易开发已集成该项目。

Mobile-Security-Framework-MobSF

Mobile Security Framework (MobSF) is an automated, all-in-one mobile application (Android/iOS/Windows) pen-testing, malware analysis and security assessment framework capable of performing static and dynamic analysis.

drozer

The Leading Security Assessment Framework for Android.

Inspeckage

Android Package Inspector - dynamic analysis with api hooks, start unexported activities and more. (Xposed Module)

wpscan

WPScan WordPress security scanner. Written for security professionals and blog maintainers to test the security of their WordPress websites. Contact us via contact@wpscan.com

stressTestPlatform

基于Jmeter实现的在线压测和管理Jmx的平台。

Geetest3-Crack

🤖 Geetest3 Distributed Cracking Platform 极验3代分布式破解平台

loggrove

Loggrove是对本地、远程日志文件进行 分页阅读、实时阅读、关键词匹配、统计、监控、钉钉告警、Highcharts图表展示 的 Web 平台服务，并包含 用户认证、LDAP认证、操作审计 等基础服务。

metasploit-framework

Metasploit Framework

PayloadsAllTheThings

A list of useful payloads and bypass for Web Application Security and Pentest/CTF

bug-bounty-reference

Inspired by https://github.com/djadmin/awesome-bug-bounty, a list of bug bounty write-up that is categorized by the bug nature

hacker101

Source code for Hacker101.com - a free online web and mobile security class.

AssassinGo

An extensible and concurrency pentest framework in Go, also with WebGUI. Feel free to CONTRIBUTE!