Mobile Security Framework (MobSF) is an automated, all-in-one mobile application (Android/iOS/Windows) pen-testing, malware analysis and security assessment framework capable of performing static a…

Binary instrumentation framework based on FRIDA

This lab is created to test poc exploits on vulnerable, partially vulnerable and fixed version of spring boot deployment

Impacket is a collection of Python classes for working with network protocols.

A list of useful payloads and bypass for Web Application Security and Pentest/CTF

Script used in the Capture The Flag (CTF) "Phonebook" Web Challenge of the webside Hack The Box (HTB) Walkthough

WebGoat is a deliberately insecure application

Android tool to automate interaction with web pages displayed in Android WebViews. Could be especially helpful in testing UI with Espresso.

Scanning APK file for URIs, endpoints & secrets.

Simple websites vulnerable to Server Side Template Injections(SSTI)

In-depth Attack Surface Mapping and Asset Discovery

This is where I share code/material shown in my videos

Gradle Plugin - Obfuscator String Encryption (Android/Java)

🎯 Server Side Template Injection Payloads

SQLI labs to test error based, Blind boolean based, Time based.