A new AMSI Bypass technique using .NET ALI Call Hooking.

Hookers are cooler than patches.

The Hunt for Malicious Strings

Get related domains / subdomains by looking at Google Analytics IDs

A tools for JavaScript Recon

Work in progress...

Android penetration testing tool for Kali linux

A big list of Android Hackerone disclosed reports and other resources.

Android security guides, roadmap, docs, courses, write-ups, and teryaagh.

The script allows to bypass SSL pinning on Android >= 7 and makes APK file ready for HTTPS traffic inspection 📝🟢🔒🤖7️⃣🔝🏁🗳🛃

Bypassing android application SSL-pinning by unpacking/repacking

Android App Security Checklist

This repository is a suplimentary material for Android Training's done by Anant Shrivastava

A Virtual Machine For Assessing Android applications, Reverse Engineering and Malware Analysis

A framework for automated extraction of static and dynamic features from Android applications

Bloodhound Attack Path Automation in CobaltStrike

Automated client-side template injection (sandbox escape/bypass) detection for AngularJS.

Some playbooks to manage some tasks

Anti-virus artifacts. Listing APIs hooked by: Avira, BitDefender, F-Secure, MalwareBytes, Norton, TrendMicro, and WebRoot.

Subdomain enumeration and information gathering tool

Apache Log4j 远程代码执行

A python script to scan for Apache Tomcat server vulnerabilities.

A collaborative, multi-platform, red teaming framework

List of API's for gathering information about phone numbers, addresses, domains etc

Checklist of the most important security countermeasures when designing, testing, and releasing your API

API Security Projecto aims to present unique attack & defense methods in API Security field

APIDetector: Efficiently scan for exposed Swagger endpoints across web domains and subdomains. Supports HTTP/HTTPS, multi-threading, and flexible input/output options. Ideal for API security testing.

APIKit：Discovery, Scan and Audit APIs Toolkit All In One.