Free and Open Source, Distributed, RESTful Search Engine

Dex to Java decompiler

A simple app to use Xposed without root, unlock the bootloader or modify system image, etc.

The ZAP by Checkmarx Core project

Tools to work with android .dex and java .class files

A proof-of-concept tool for generating payloads that exploit unsafe Java object deserialization.

Tsunami is a general purpose network security scanner with an extensible plugin system for detecting high severity vulnerabilities with high confidence.

JPEXS Free Flash Decompiler

An xposed module that disables SSL certificate checking for the purposes of auditing an app with cert pinning

Android Package Inspector - dynamic analysis with api hooks, start unexported activities and more. (Xposed Module)

The new bridge between Burp Suite and Frida!

Burp Bounty (Scan Check Builder in BApp Store) is a extension of Burp Suite that allows you, in a quick and simple way, to improve the active and passive scanner by means of personalized rules thro…

latest version of scanners for IIS short filename (8.3) disclosure vulnerability

TCP/UDP Non-HTTP Proxy Extension (NoPE) for Burp Suite.

Vulnerable Android application for developers and security enthusiasts to learn about Android insecurities

Nuclei plugin for BurpSuite

log4j-scanner is a project derived from other members of the open-source community by CISA to help organizations identify potentially vulnerable web services affected by the log4j vulnerabilities.

Burp plugin able to find reflected XSS on page in real-time while browsing on site

DIVA Android - Damn Insecure and vulnerable App for Android

This project aims to provide a central repository for many useful Tsunami Security Scanner plugins.

Android Xposed Module to bypass SSL certificate validation (Certificate Pinning).

Vulnerability scanner based on vulners.com search API

Automated HTTP Request Repeating With Burp Suite

APKinspector is a powerful GUI tool for analysts to analyze the Android applications.

All-in-one plugin for Burp Suite for the detection and the exploitation of Java deserialization vulnerabilities

Damn Vulnerable Bank is designed to be an intentionally vulnerable android application. This provides an interface to assess your android application security hacking skills.

👁️ (s)AINT is a Spyware Generator for Windows systems written in Java. [Discontinued]

Java RMI enumeration and attack tool.