MiUnlockTool developed to retrieve encryptData(token) for Xiaomi devices for unlocking bootloader, It is compatible with all platforms.

A collection of awesome one-liner scripts especially for bug bounty tips.

A MCP for Claude Desktop / Claude Code / Windsurf / Cursor to build n8n workflows for you

Android kernel sources for Xiaomi SM8150 devices https://github.com/LineageOS/android_kernel_qcom_sm8150

|| Android Application Security ||

Fix Play Integrity verdicts.

An addon root hiding service for KernelSU

WiFisploit is a tool designed to scan and attack Wi-Fi networks using variety of powerful and effective attacks. It contains numerous commands and modules designed to work against all types of netw…

Discover best root apps, Magisk & LSPosed(xposed) modules with step-by-step rooting guides

BEERUS Framework for Android

Fix Play Integrity <A13 verdicts, allowing custom fields and props

Free BugBounty KrazePlanetTraining

LKM rootkit for Linux Kernels 2.6.x/3.x/4.x/5.x/6.x (x86/x86_64 and ARM64)

Kernel Flasher is an Android app to flash, backup, and restore kernels.

A Kernel based root solution for Android

Documentation and Samples for the Official HN API

Standalone implementation of Zygisk

Unofficial Bitwarden compatible server written in Rust, formerly known as bitwarden_rs

A collection of various awesome lists for hackers, pentesters and security researchers

Bruteforcing from various scanner output - Automatically attempts default creds on found services.

The Arcanum Prompt Injection Taxonomy

Analysis of Bot Protection systems with available countermeasures 🚿. How to defeat anti-bot system 👻 and get around browser fingerprinting scripts 🕵️‍♂️ when scraping the web?

🕵️‍♂️ All-in-one OSINT tool for analysing any website

A ready to use JSONP endpoints/payloads to help bypass content security policy (CSP) of different websites.

Simple Windows and Linux keystroke injection tool that exfiltrates stored WiFi data (SSID and password).

Keyhacks is a repository which shows quick ways in which API keys leaked by a bug bounty program can be checked to see if they're valid.