tsug0d

AndroidMobilePentest101

Pentesting Android Application Course For Kids+ (English and Vietnamese edition)

MyAwesomeWebChallenge

Collection of my capture-the-flag web challenge in any levels

LearnJavaVulnerability

Things help you get started with Java Vulnerability

PhpNoAlnum

The tool that help convert php function to php noAlnum-function

TAODOS

TAODOS stands for The Art of Denial-of-Service

PentestQA

Pentest Q&A trick written in Vietnamese

PayloadsAllTheThings

A list of useful payloads and bypass for Web Application Security and Pentest/CTF

svg_test

collection of svg images

broken-link-checker

Find broken links, missing images, etc in your HTML.

ds_store_exp

A .DS_Store file disclosure exploit. It parse .DS_Store file and download files recursively.

flume-ng-kafka-sink

An Apache Flume Sink implementation to publish data to Apache Kafka

linux-kernel-exploitation

A bunch of links related to Linux kernel exploitation

SecLists

SecLists is the security tester's companion. It is a collection of multiple types of lists used during security assessments. List types include usernames, passwords, URLs, sensitive data grep strings, fuzzing payloads, and many more.

Tabnabbing

target=_blank tabnabbing test file

afl-training

Exercises to learn how to fuzz with American Fuzzy Lop

Brida

The new bridge between Burp Suite and Frida!

iRET

jadx

Dex to Java decompiler

kubelet-exploit

linux-re-101

A collection of resources for linux reverse engineering

luna

luna webscanner

MagiskTrustUserCerts

A Magisk module that automatically adds user certificates to the system root CA store

PHP_CodeSniffer

PHP_CodeSniffer tokenizes PHP files and detects violations of a defined set of coding standards.

windowsblindread

A list of files / paths to probe when arbitrary files can be read on a Microsoft Windows operating system