Zygisk module that intercepts Flutter app traffic — redirects to a proxy and bypasses BoringSSL TLS pinning. Persistent, no Frida session. Installable via MMRL.

一款内网综合扫描工具，方便一键自动化、全方位漏扫扫描。(An intranet comprehensive scanning tool, enabling one-click automated, all-round vulnerability scanning)

mobile reverse engineering framework

9Drive is a storage gateway web app for connecting multiple Google Drive accounts into one virtual storage dashboard. Users can connect Google Drive accounts, track quota, upload files, organize fi…

A kernel-assisted shared-library injector for Android. Loads any .so into a target process without ptrace, in-process dlopen, or visible traces in /proc/<pid>/maps. GKI 2.0 (Android 12-16).

Passive leak enumeration tool.

Self-contained, dependency-free ART method hooking for Android 8–15. ArtMethod-level, lock-free.

A Linux tool to limit the bandwidth of any device on your local network, no router access required.

Find, validate, and map the impact of leaked secrets across your stack. Revoke fast. 900+ rules.

Drop-in AGENTS.md that makes every coding agent behave like a senior engineer instead of an eager intern. Kills sycophancy, stops drive-by refactors, forces verification loops. Synthesizes Karpathy…

Unwaf is a Go tool designed to help identify WAF bypasses using passive techniques, such as: SPF records and DNS history. By default, Unwaf will check SPF records.

Proxy system that routes traffic through Cloudflare Workers for IP rotation and anonymity

Flutter Reverse Engineering Framework

GO Simple Tunnel - a simple tunnel written in golang

An executable to convert SOCKS5 proxy into HTTP proxy

Undetected web-scraping & seamless HTML parsing in Python!

Tokopedia scraper

An Android app to easily manage Frida server on your device or emulator

Android RASP project, Protect APK from any vulnerabilities.

Misconfig Mapper is a fast tool to help you uncover security misconfigurations on popular third-party services used by your company and/or bug bounty targets!