wp2shell (CVE-2026-63030 & CVE-2026-60137) - full RCE chain

A powerful obfuscator for JavaScript and Node.js

Burp MCP proxy with compression pipeline — reduces 182KB responses to ~4KB

Hayabusa (隼) is a sigma-based threat hunting and fast forensics timeline generator for Windows event logs.

The agent that grows with you

HexStrike AI MCP Agents is an advanced MCP server that lets AI agents (Claude, GPT, Copilot, etc.) autonomously run 150+ cybersecurity tools for automated pentesting, vulnerability discovery, bug b…

A basic tool to check security headers of a website

The Web Security Testing Guide is a comprehensive Open Source guide to testing the security of web applications and web services.

A Simple Play Integrity Checker which uses Google Play Integrity API to check the Integrity of the Device

The Magic Mask for Android

Biblioteca da Berna desenvolvida pelo TJGO, Diretoria de Inteligência Artificial, Analise de Dados e Estatística.

Static and dynamic Android application security analysis

Python toolkit for browserless testing of reCAPTCHA v3 and Enterprise token integrations.

LSPosed Framework

Fix Play Integrity <A13 verdicts, allowing custom fields and props

Script to root AVDs running with QEMU Emulator from Android Studio

Adversary Emulation Framework

Pentest Report Generator

Auto Frida is a powerful, all-in-one automation toolkit that handles everything from Frida installation to script injection. Zero manual setup required – just connect your device and start testing.

Android Reverse Engineering Command-Line Automation Workspace. AI-driven security analysis with Claude Code.

Dex to Java decompiler

Nuclei is a fast, customizable vulnerability scanner powered by the global security community and built on a simple YAML-based DSL, enabling collaboration to tackle trending vulnerabilities on the …

SecretFinder - A python script for find sensitive data (apikeys, accesstoken,jwt,..) and search anything on javascript files

Lightweight static analysis for many languages. Find bug variants with patterns that look like source code.

Find, verify, and analyze leaked credentials

Scans remote JavaScript files with Trufflehog + Semgrep to detect leaked secrets

Frida scripts to rewrite mobile applications at runtime to directly MitM all HTTPS traffic

Frida scripts for intercepting and modifying the behavior of Android apps at runtime.

The Network Execution Tool