Where the map ends, I follow the signal.
- BypassCloudflare · Burp Suite extension for testing with browser-like TLS and HTTP/2 fingerprints.
- burp-smart-proxy-filter · Rule-based request interception for Burp Suite.
- ChromeBurpSuite · Intercept, edit, and replay HTTP traffic from Chrome DevTools.
- xss-lab · A 20-level XSS practice lab.
- SiteReport · HTTP checks and reports for websites.
- iAppVM · iOS app testing on non-jailbroken devices.
- mobile-app-testing-mcp · Android app analysis with ADB, aapt, and JADX over MCP.
- CVE-2024-0044-EXP · Android privilege-escalation PoC targeting app sandbox access.
- scamAppScan · Malicious APK detection.
- AutoAuditWallet · Static and dynamic analysis for Web3 wallet apps.
- Fofa-API-Python · Python scripts for FOFA-based reconnaissance.
- Veronica-framework · Early pentest automation project focused on MS17-010.
May there always be light in your eyes :)