Stars
(⌐■_■) - Raspberry Pi instrumenting Bettercap for Wi-Fi pwning.
A comprehensive curated list of available Bug Bounty & Disclosure Programs and Write-ups.
A collection of various awesome lists for hackers, pentesters and security researchers
A Burp Extender plugin, that will deserialized java objects and encode them in XML using the Xtream library.
A proof-of-concept tool for generating payloads that exploit unsafe Java object deserialization.
Tool to look for several security related Android application vulnerabilities
PwnableWeb is a suite of web applications for use in information security training.
Git All the Payloads! A collection of web attack payloads.
tinder cli built at stupid hackathon san francisco 2015
Turn GNU command line tools into SaaS (Stupid Hackathon Project)
Quickjack is a point-and-click tool for intuitively producing advanced clickjacking and frame slicing attacks.
Black box tool to bypass SSL verification on Android, even when pinning is used.
A curated list of CTF frameworks, libraries, resources and softwares
Android Unpacker presented at Defcon 22: Android Hacker Protection Level 0
Official home of the DB Browser for SQLite (DB4S) project. Previously known as "SQLite Database Browser" and "Database Browser for SQLite". Website at:
Next-gen BurpSuite penetration testing tool
Android Shared preference wrapper than encrypts the values of Shared Preferences. It's not bullet proof security but rather a quick win for incrementally making your android app more secure.
Offensive Web Testing Framework (OWTF), is a framework which tries to unite great tools and make pen testing more efficient http://owtf.org https://twitter.com/owtfp
Example of certificate pinning on Android