gguowang Goto Github PK

fridascripts

一群聪明的frida用户所编写的脚本

fuzzdicts

Web Pentesting Fuzz 字典,一个就够了。

gguowang.github.io

godzilla

哥斯拉

goofuzz

GooFuzz is a tool to perform fuzzing with an OSINT approach, managing to enumerate directories, files, subdomains or parameters without leaving evidence on the target's server and by means of advanced Google searches (Google Dorking).

inspeckage

Android Package Inspector - dynamic analysis with api hooks, start unexported activities and more. (Xposed Module)

jndi-injection-exploit

JNDI注入测试工具（A tool which generates JNDI links can start several servers to exploit JNDI Injection vulnerability,like Jackson,Fastjson,etc）

log4jfrida

medusa

Binary instrumentation framework based on FRIDA

mobile-security-framework-mobsf

Mobile Security Framework (MobSF) is an automated, all-in-one mobile application (Android/iOS/Windows) pen-testing, malware analysis and security assessment framework capable of performing static and dynamic analysis.

msdt-follina

Codebase to generate an msdt-follina payload

owasp-mstg

The Mobile Security Testing Guide (MSTG) is a comprehensive manual for mobile app security development, testing and reverse engineering.

pinduoduo_backdoor

拼多多apk内嵌提权代码，及动态下发dex分析

pinduoduo_backdoor_x

对拼多多app利用0day漏洞控制用户手机及窃取数据的分析，含分析指引

pythonhackingbook1

Python黑客编程之极速入门

qq

8亿QQ绑定数据泄露查询源码，附送数据。不定期更新下载地址 关注越多送的越多

resources-for-beginner-bug-bounty-hunters

A list of resources for those interested in getting started in bug bounties

reverse-engineering

List of awesome reverse engineering resources

reverse-engineering-tutorial

A FREE comprehensive reverse engineering course covering x86, x64, 32-bit ARM & 64-bit ARM architectures.

rms-runtime-mobile-security

Runtime Mobile Security (RMS) 📱🔥 - is a powerful web interface that helps you to manipulate Android and iOS Apps at Runtime

scanners-box

A powerful hacker toolkit collected more than 10 categories of open source scanners from Github - 安全行业从业者自研开源扫描器合辑

sekiro

基于长链接和代码注入的Android private API暴露框架

slicer

A tool to automate the boring process of APK recon

spy-debugger

微信调试，各种WebView样式调试、手机浏览器的页面真机调试。便捷的远程调试手机页面、抓包工具，支持：HTTP/HTTPS，无需USB连接设备。

strong-frida

make frida strong, bypass frida detection.

viper

Viper (炫彩蛇) 开源图形化内网渗透工具

vulnerability-review

寻找公开漏洞进行复盘学习。

web-attack-cheat-sheet

Web Attack Cheat Sheet