一款内网综合扫描工具，方便一键自动化、全方位漏扫扫描。(An intranet comprehensive scanning tool, enabling one-click automated, all-round vulnerability scanning)

Burp Suite extension for API security testing with 15 attack types, 108+ payloads, intelligent fuzzing, BOLA/IDOR detection, AI integration, and automated reconnaissance. Supports REST/GraphQL/SOAP…

Zygisk module that intercepts Flutter app traffic — redirects to a proxy and bypasses BoringSSL TLS pinning. Persistent, no Frida session. Installable via MMRL.

build frida for android arch : arm, arm64, x86 and x86_64

Analysis scripts for Ghidra to work with Android NDK libraries.

9Drive is a storage gateway web app for connecting multiple Google Drive accounts into one virtual storage dashboard. Users can connect Google Drive accounts, track quota, upload files, organize fi…

Detect leaked secrets + live validation. Map blast radius across your stack. Revoke fast. 1,000+ rules.

The world's first agentic reverse engineer.

Unwaf is a Go tool designed to help identify WAF bypasses using passive techniques. It automates the process of discovering the real origin IP behind a WAF/CDN by combining multiple discovery metho…

GO Simple Tunnel - a simple tunnel written in golang

An executable to convert SOCKS5 proxy into HTTP proxy

Flutter Mobile Application Reverse Engineering Tool

Text to speech alignment using CTC forced alignment

A Python scraper for Tokopedia that supports filtered product search, detailed product information, and customer reviews with accurate mobile pricing and Jupyter Notebook compatibility.

Very Vulnerable Management API (VVMA) is a deliberately insecure RESTful API built with Node.js for educational and testing purposes. It includes vulnerabilities from the OWASP Top 10 API, allowing…

40X/HTTP bypasser in Go. Features: Verb tampering, headers, #bugbountytips, User-Agents, extensions, default credentials...

An Android app to easily manage Frida server on your device or emulator

Misconfig Mapper is a fast tool to help you uncover security misconfigurations on popular third-party services used by your company and/or bug bounty targets!

Misconfig Mapper is a fast tool to help you uncover security misconfigurations on popular third-party services used by your company and/or bug bounty targets!

Android RASP project, Protect APK from any vulnerabilities.

Formatify is a Burp Suite extension that instantly converts HTTP requests into multiple formats like cURL, Python, PowerShell, and more—saving time and streamlining your workflow. 🚀

The recursive internet scanner for hackers. 🧡

Dnsbruter is a powerful tool designed to perform active subdomain enumeration and discovery. It uses DNS resolution to efficiently bruteforce and identify potential subdomains for a given target do…

A deobfuscator for scripts obfuscated by Obfuscator.io

SMBMap is a handy SMB enumeration tool

No more View Once because i'm tired of it

A .DS_Store file disclosure exploit. It parses .DS_Store file and downloads files recursively.

OCR KTP Indonesia - Fast API Python

A repository with 3 tools for pwn'ing websites with .git repositories available