vietnt-uet

PayloadsAllTheThings

A list of useful payloads and bypass for Web Application Security and Pentest/CTF

sherlock

Hunt down social media accounts by username across social networks

SecLists

SecLists is the security tester's companion. It's a collection of multiple types of lists used during security assessments, collected in one place. List types include usernames, passwords, URLs, sensitive data patterns, fuzzing payloads, web shells, and many more.

sqlmap

Automatic SQL injection and database takeover tool

Telegram

Telegram for Android source

nuclei

Fast and customizable vulnerability scanner based on simple YAML based DSL.

httpx

httpx is a fast and multi-purpose HTTP toolkit that allows running multiple probes using the retryablehttp library.

Compressor

An android image compression library.

osmedeus

A Workflow Engine for Offensive Security

Arjun

HTTP parameter discovery suite.

cupp

Common User Passwords Profiler (CUPP)

user-interface-samples

Multiple samples showing the best practices in the user interface on Android.

waybackurls

Fetch all the URLs that the Wayback Machine knows about for a domain

ghauri

An advanced cross-platform tool that automates the process of detecting and exploiting SQL injection security flaws

CardStackView

📱Tinder like swipeable card view for Android

jaeles

The Swiss Army knife for automated Web Application Testing

turbo-intruder

Turbo Intruder is a Burp Suite extension for sending large numbers of HTTP requests and analyzing the results.

notify

Notify is a Go-based assistance package that enables you to stream the output of several tools (or read from a file) and publish it to a variety of supported platforms.

PwnFox

PwnFox is a Firefox/Burp extension that provide usefull tools for your security audit.

ethereum-nft-marketplace-boilerplate

alterx

Fast and customizable subdomain wordlist generator using DSL

react-native-avoid-softinput

Native solution for common React Native problem of focused views being covered by soft input view.

svg-cheatsheet

A cheatsheet for exploiting server-side SVG processors.

postman-collection

Javascript module that allows a developer to work with Postman Collections

AndroidMobilePentest101

Pentesting Android Application Course For Kids+ (English and Vietnamese edition)

cakephp-queue

Queue plugin for CakePHP - simple, pure PHP and without dependencies.

postmaniac

Postman OSINT tool to extract creds, token, username, email & more from Postman Public Workspaces

react-native-redux-boilerplate

A React Native starter template with Redux Toolkit and Typescript

hackvertor

sqlmap-tamper

SQLmap tamper scripts