Ghidra is a software reverse engineering (SRE) framework

A libre lightweight streaming front-end for Android.

a fast, scalable, multi-language and extensible build system

A Java 8+ Jar & Android APK Reverse Engineering Suite (Decompiler, Editor, Debugger & More)

A full-featured package manager and viewer for Android

iOS and macOS Decompiler

一款支持自定义的 Java 内存马生成工具｜A customizable Java in-memory webshell generation tool.

对Auth/Waf 自动化bypass的burpsuite插件

Shiro RememberMe 1.2.4 反序列化漏洞图形化检测工具(Shiro-550)

Android Anti-Emulator

解决FastJson、Jackson、Log4j2、原生JNDI注入漏洞的高版本JDKBypass利用，探测本地可用反序列化gadget达到命令执行、回显命令执行、内存马注入

给woodpecker框架量身定制的ysoserial

Ghidra analysis plugin to locate cryptographic constants

WSDL Parser extension for Burp

Tool for finding URLs, paths, secrets and generating raw HTTP requests and OpenApi specifications from config files and annotations used in JAR / WAR / APK applications.

NacosExploit 命令执行 内存马等利用

Apache ActiveMQ远程代码执行(RCE)利用工具

ICSE'24 GPTScan: Detecting Logic Vulnerabilities in Smart Contracts by Combining GPT with Program Analysis

Android app that listens for incoming SMS text/data messages and conditionally sends an automatic reply containing GPS location data.

A command-line client for the Crowdin API