🕵️‍♂️ Offensive Google framework.

The OWASP Mobile Application Security Testing Guide (MASTG) is a comprehensive manual for mobile app security testing and reverse engineering. It describes technical processes for verifying the OWA…

Scanning APK file for URIs, endpoints & secrets.

A curated list of bugbounty writeups (Bug type wise) , inspired from https://github.com/ngalongc/bug-bounty-reference

A Windows reverse shell payload generator and handler that abuses the http(s) protocol to establish a beacon-like reverse shell.

A python script to automatically coerce a Windows server to authenticate on an arbitrary machine through 12 methods.

declutters url lists for crawling/pentesting

Vulnerable REST API with OWASP top 10 vulnerabilities for security testing

a security scanner for custom LLM applications

Just another Powerview alternative but on steroids

Streamline vulnerability patching with CVSS, EPSS, and CISA's Known Exploited Vulnerabilities. Prioritize actions based on real-time threat information, gain a competitive advantage, and stay infor…

Massive Mobile Security Framework

Research on the enumeration of IAM permissions without logging to CloudTrail

Creates Kubernetes Golden Tickets through ServiceAccount token forging and user certificate forging.