affilares Goto Github PK

andro_firebase

The script checks for misconfigured/open firebase database used in development of Android apk's.

androidre

Reverse engineering Android

androidsecnotes

An actively maintained, Self curated notes related to android application security for security professionals, bugbounty hunters, pentesters, reverse engineer, and redteamers.

angularjs-csti-scanner

Automated client-side template injection (sandbox escape/bypass) detection for AngularJS.

apache-struts-v3

apachetomcatscanner

A python script to scan for Apache Tomcat server vulnerabilities.

api-security-checklist

Checklist of the most important security countermeasures when designing, testing, and releasing your API

api-securityempire

API Security Projecto aims to present unique attack & defense methods in API Security field

api_paths

A list of REST API URL paths for use in blackbox API end-point discovery

api_wordlist

A wordlist of API names for web application assessments

apikit

APIKit：Discovery, Scan and Audit APIs Toolkit All In One.

apk.sh

apk.sh makes reverse engineering Android apps easier, automating some repetitive tasks like pulling, decoding, rebuilding and patching an APK.

apk_api_key_extractor

Automatically extracts API Keys from APK files

apkhunt

APKHunt is a comprehensive static code analysis tool for Android apps that is based on the OWASP MASVS framework. Although APKHunt is intended primarily for mobile app developers and security testers, it can be used by anyone to identify and address potential security vulnerabilities in their code.

apkleaks

Scanning APK file for URIs, endpoints & secrets.

apkurlgrep

Extract endpoints from APK files

appsync

Unified AppSync dynamic library for iOS 5 and above.

aquatone

A Tool for Domain Flyovers

archivefuzz

Hunt down the secrets from the WebArchives for Fun and Profit

arjun

HTTP parameter discovery suite.

asnlookup

Leverage ASN to look up IP addresses (IPv4 & IPv6) owned by a specific organization for reconnaissance purposes, then run port scanning on it.

asvs

Application Security Verification Standard

asvs-1

atlas

Quick SQLMap Tamper Suggester

ato-checklist

A checklist of practices for organizations dealing with account takeover (ATO)

auditorsroadmap

auth-boss

🔒 Become an Auth Boss. Learn about different authentication methodologies on the web.

auto.sh

This script is (Mainly) for Beginner's

autoblue-ms17-010

This is just an semi-automated fully working, no-bs, non-metasploit version of the public exploit code for MS17-010

autonmap

Automated daily scan using Nmap and report on the differences