hehacks Goto Github PK

mobileappvm

VM build script for mobile app pentesting/reversing.

mobilehackingcheatsheet

Basics on commands/tools/info on how to assess the security of mobile applications

mobsecco

Cloning apk for bypassing code tampering detection, Google Safety Net and scanning vulnerable plugins

mobsfscan

mobsfscan is a static analysis tool that can find insecure code patterns in your Android and iOS source code. Supports Java, Kotlin, Swift, and Objective C Code. mobsfscan uses MobSF static analysis rules and is powered by semgrep and libsast pattern matcher.

mqtt-explorer

An all-round MQTT client that provides a structured topic overview

msmailprobe

Office 365 and Exchange Enumeration

mstg-hacking-playground

my-arsenal-of-aws-security-tools

List of open source tools for AWS security: defensive, offensive, auditing, DFIR, etc.

my-shodan-scripts

Collection of Scripts for shodan searching stuff.

mypayloads

MyPayloads

myriam

A vulnerable iOS App with Security Challenges for the Security Researcher inside you.

noia

Simple Android application sandbox file browser tool. Powered by [frida.re](https://www.frida.re).

nuclei

Nuclei is a fast tool for configurable targeted scanning based on templates offering massive extensibility and ease of use.

nuclei-templates

Community curated list of template files for the nuclei engine

nullcommunity

Hands-on content for Humla/Puliya sessions at null community

offensive-docker

Offensive Docker is an image with the more used offensive tools to create an environment easily and quickly to launch assessment to the targets.

offensivecloud

Offensive security and Penetration Testing TTP for Cloud based environment (AWS / Azure / GCP)

oneforall

OneForAll是一款功能强大的子域收集工具

open-redirect-payloads

Open Redirect Payloads

openredirex

A Fuzzer for OpenRedirect issues

otg-lab

CTF Lab follow OWASP Testing Guide v4

owasp-mstg

The Mobile Security Testing Guide (MSTG) is a comprehensive manual for mobile app security testing and reverse engineering.

owasp-testing-checklist

OWASP based Web Application Security Testing Checklist is an Excel based checklist which helps you to track the status of completed and pending test cases.

oxml_xxe

A tool for embedding XXE/XML exploits into different filetypes

patch-apk

Wrapper to inject an Objection/Frida gadget into an APK, with support for app bundles/split APKs.

payloadsallthethings

A list of useful payloads and bypass for Web Application Security and Pentest/CTF

pen-andro

Script to Automate installtion of Apps ,frida server and moving Burpsuite certificate to root folder

penetrationtesting-notes

Penetration Testing Notes and Playbook (PTP)

pentest

Personal Pentesting Project

pentest-book