thuri10

AdGuardHome

Network-wide ads & trackers blocking DNS server

vulhub

Pre-Built Vulnerable Environments Based on Docker-Compose

AutoDroid

A tool for automating interactions with Android devices - including ADB, AndroGuard, and Frida interactivity.

hi_my_name_is_keyboard

lamda

⚡️ Android reverse engineering & automation framework | 史上最强安卓抓包/逆向/HOOK & 云手机/远程桌面/自动化取证框架，你的工作从未如此简单快捷。

binder-trace

Binder Trace is a tool for intercepting and parsing Android Binder messages. Think of it as "Wireshark for Binder".

AndroidSuperInject

Injecting into SELinux-protected system service processes under root on Android.

postMessage-tracker

A Chrome Extension to track postMessage usage (url, domain and stack) both by logging using CORS and also visually as an extension-icon

http-garden

Differential testing and fuzzing of HTTP servers and proxies

fuel

The easiest HTTP networking library for Kotlin/Android

medusa

Binary instrumentation framework based on FRIDA

postMessage-tracker

A Chrome Extension to track postMessage usage (url, domain and stack) both by logging using CORS and also visually as an extension-icon

nuclei-wordfence-cve

The EXCLUSIVE Collection of 38,000+ Nuclei templates based on Wordfence intel. Daily updates for bulletproof WordPress security.

mariana-trench

A security focused static analysis tool for Android and Java applications.

androguard

Reverse engineering and pentesting for Android applications

diffuse

Diffuse is a tool for diffing APKs, AABs, AARs, and JARs

ysoserial

A proof-of-concept tool for generating payloads that exploit unsafe Java object deserialization.

frida-snippets

Hand-crafted Frida examples

gixy

Nginx configuration static analyzer

Java-Deserialization-Cheat-Sheet

The cheat sheet about Java Deserialization vulnerabilities

weird_proxies

Reverse proxies cheatsheet

x8

Hidden parameters discovery suite

awesome-google-vrp-writeups

🐛 A list of writeups from the Google VRP Bug Bounty program

OneForAll

OneForAll是一款功能强大的子域收集工具

gau

Fetch known URLs from AlienVault's Open Threat Exchange, the Wayback Machine, and Common Crawl.

surf

Escalate your SSRF vulnerabilities on Modern Cloud Environments. `surf` allows you to filter a list of hosts, returning a list of viable SSRF candidates.

flutter-spy

Explore, analyze, and gain valuable data & insights from reverse engineered Flutter apps.

ghidriff

Python Command-Line Ghidra Binary Diffing Engine

coder

Provision remote development environments via Terraform

templ

A language for writing HTML user interfaces in Go.