allthingsandroid

A Collection of Android Pentest Learning Materials

android-land1

android-restriction-bypass

PoC to bypass Android restrictions

androidembedit

A quick and dirty python script to embed a Metasploit generated APK file into another APK for fun.

androidmobilepentest101

Pentesting Android Application Course For Kids+ (English and Vietnamese edition)

antsword

**蚁剑是一款跨平台的开源网站管理工具。AntSword is a cross-platform website management toolkit.

anything-llm

A multi-user ChatGPT for any LLMs and vector database. Unlimited documents, messages, and storage in one privacy-focused app. Now available as a desktop application with a built-in LLM!

api-security-checklist

Checklist of the most important security countermeasures when designing, testing, and releasing your API

autorecon

AutoRecon is a multi-threaded network reconnaissance tool which performs automated enumeration of services.

awesome-bugbounty-writeups

A curated list of bugbounty writeups (Bug type wise) , inspired from https://github.com/ngalongc/bug-bounty-reference

awesome-list-of-secrets-in-environment-variables

🦄🔒 Awesome list of secrets in environment variables 🖥️

awesome-oneliner-bugbounty

A collection of awesome one-liner scripts especially for bug bounty tips.

awesome-symbolic-execution

A curated list of awesome symbolic execution resources including essential research papers, lectures, videos, and tools.

awesome-waf

🔥 Everything awesome about web-application firewalls (WAF).

bcm-android

BCM App for Android

bounty-targets-data

This repo contains hourly-updated data dumps of bug bounty platform scopes (like Hackerone/Bugcrowd/Intigriti/etc) that are eligible for reports

bug-bounty-toolz

BBT - Bug Bounty Tools

burpcustomizer

Because just a dark theme wasn't enough!

bypass-anti-fridahooking

Using frida bypass anti hooking by native lib

chisel

A fast TCP/UDP tunnel over HTTP

clearml-server

ClearML - Auto-Magical Suite of tools to streamline your ML workflow. Experiment Manager, ML-Ops and Data-Management

cloud_enum

Multi-cloud OSINT tool. Enumerate public resources in AWS, Azure, and Google Cloud.

cloudfox

Automating situational awareness for cloud penetration tests.

cloudgoat

CloudGoat is Rhino Security Labs' "Vulnerable by Design" AWS deployment tool

collisions

Hash collisions and their exploitations

csrf

learning about CSRF tsai

cve-2019-3396

Confluence 未授权 RCE (CVE-2019-3396) 漏洞

cve-2020-10977

GitLab 12.9.0 Arbitrary File Read

cve-2020-11651-poc

PoC exploit of CVE-2020-11651 and CVE-2020-11652

cve-2020-1350

PoC Checking script