Ghidra is a software reverse engineering (SRE) framework

Dex to Java decompiler

Modular and customizable Material Design UI components for Android

Modern Xposed Framework

Android virtual machine and deobfuscator

Modern Java decompiler aiming to be as accurate as possible, with an emphasis on output quality. Fork of the Fernflower decompiler.

Burp Bounty (Scan Check Builder in BApp Store) is a extension of Burp Suite that allows you, in a quick and simple way, to improve the active and passive scanner by means of personalized rules thro…

latest version of scanners for IIS short filename (8.3) disclosure vulnerability

completely ridiculous API (crAPI)

A tool to dump Java serialization streams in a more human readable form.

An Instagram Xposed module with features like Developer Options, Ghost Mode, Ad-Free browsing, and Distraction-Free Mode.

HopLa Burp Suite Extender plugin - Brings AI capabilities, autocompletion support, and a set of useful payloads to Burp Suite

JDownloader mirror

A simple app to boost performance by stopping background apps, relying on Root/Shizuku permissions.

A malicious LDAP server for JNDI injection attacks

CSTC is a Burp Suite extension that allows request/response modification using a GUI analogous to CyberChef

Android reverse-engineering tool / smali editor

Burpsuite plugin for Interact.sh

Magisk Unix Domain Socket(UDS) and File Stat Check Added, Simple to use root checking Android library and sample app

This exention enables autocompletion within BurpSuite Repeater/Intruder tabs.

An Xposed module for adding beautiful lyrics to Spotify

Burp Suite extension to passively scan for applications revealing server error messages

This tool tries to find interesting stuff inside static files; mainly JavaScript and JSON files.

A Burp extension to help pentesters copy requests / responses for reports.

Generate a dynamic PAC script that will route traffic to your Burp proxy only if it matches the scope defined in your Burp target.

Android virtual machine and deobfuscator