Stars
Modern, fast and obfuscated VPN protocol
A collection of Semgrep rules derived from the OWASP MASTG specifically for Android applications.
The Leading Security Assessment Framework for Android.
📱 objection - runtime mobile exploration
The Cyber Swiss Army Knife - a web app for encryption, encoding, compression and data analysis
Bash script to automate setup of Linux router useful for IoT device traffic analysis and SSL mitm
CLI tool and library for generating a Software Bill of Materials from container images and filesystems
GitHub Recon — and what you can achieve with it!
Exploit Development and Reverse Engineering with GDB & LLDB Made Easy
The Ultimate Information Gathering Toolkit
Rust Weaponization for Red Team Engagements.
A syntax-highlighting pager for git, diff, grep, rg --json, and blame output
Advisory database for Python packages published on pypi.org
Community curated list of public bug bounty and responsible disclosure programs.
A collection of my Semgrep rules to facilitate vulnerability research.
Identify and extract files from container formats using unblob.
Dump cookies and credentials directly from Chrome/Edge process memory
A built-to-be-vulnerable API application based on the OWASP top 10 API vulnerabilities. Use c{api}tal to learn, train and exploit API Security vulnerabilities within your own API Security CTF.
Perform a simple scan on your OutSystems applications.
Pre-Built Vulnerable Environments Based on Docker-Compose
Top disclosed reports from HackerOne
OSINT tool that finds domains, subdomains, directories, endpoints and files for a given seed URL.
wtf is a distributed, code-coverage guided, customizable, cross-platform snapshot-based fuzzer designed for attacking user and / or kernel-mode targets running on Microsoft Windows and Linux user-m…
An interpreter for Rust's mid-level intermediate representation