Stars
Zygisk module that intercepts Flutter app traffic — redirects to a proxy and bypasses BoringSSL TLS pinning. Persistent, no Frida session. Installable via MMRL.
LoRaWAN offensive security testing framework: protocol attacks, RF-layer testing, and target fingerprinting
Flutter SSL Pinning Bypass Tool for Android & iOS — works on any Flutter version without pattern databases
Delve into a comprehensive checklist, your ultimate companion for Android app penetration testing. Identify vulnerabilities in network, data, storage, and permissions effortlessly. Boost security s…
A web honeypot library to create vulnerable-looking endpoints to detect and mislead attackers
Automating situational awareness for cloud penetration tests.
HTTP Request Smuggling Detection Tool
🔒 A compiled checklist of 300+ tips for protecting digital security and privacy in 2026
Makes reverse engineering Android apps easier, automating repetitive tasks like pulling, decoding, rebuilding and patching an APK.
Searches through git repositories for high entropy strings and secrets, digging deep into commit history
🐬 A collection of awesome resources for the Flipper Zero device.
a security scanner for custom LLM applications
Tools and Techniques for Red Team / Penetration Testing
Simple tool to perform HTML Smuggling.
A curated list of awesome search engines useful during Penetration testing, Vulnerability assessments, Red/Blue Team operations, Bug Bounty and more
A Proof-of-Concept tool utilizing open DNS resolvers to produce an amplification attack against web servers. Using Shodan APIs and native Linux commands, this tool is in development to cripple web …
A sync.WaitGroup with error handling and concurrency control
A curated list of awesome blogs and tools about HTTP request smuggling attacks. Feel free to contribute! 🍻
SQLI labs to test error based, Blind boolean based, Time based.