Aan

Belati. The Traditional Swiss Army Knife for OSINT

spose. Squid Pivoting Open Port Scanner

SSLPinDetect. SSLPinDetect is a tool for analyzing Android APKs to detect SSL pinning implementations by scanning for known patterns in decompiled code. It helps security researchers and penetration testers identify SSL pinning mechanisms used in mobile applications.

DllProxy-rs. Rust Implementation of SharpDllProxy for DLL Proxying Technique

APK-FiD. Give me your APK, I will give you framework name

TMTG. TMTG(Twint Mention to Graph) is tools for converting twint user mentions data to network graph for use in Gephi or others network mapping tools that support GEXF file format.

android-ssl-pinning-signed-demo. A tiny demo app using SSL pinning to block HTTPS MitM interception

smali-sslpin-patterns. A collection of Smali patterns to detect SSL pinning implementations in Android apps, covering frameworks like OkHttp, TrustManager, Conscrypt, and more for security analysis and reverse engineering.

apkpuller. A tool for extracting (Splitted) APK files from installed applications on Android devices. It automates the boring stuff when performing mobile penetration testing, especially for static analysis.

polyscan. PolyScan is a high-performance security scanner designed to detect and extract embedded executables, scripts, and suspicious content hidden within image files. It's specifically built for defensive security analysis and forensic investigation of image polyglots.

yaraman. YaraMan is a standalone web application for managing YARA rules and scanning files for malware detection. It provides an intuitive web interface with dedicated pages for file scanning and YARA rule management, featuring comprehensive threat detection results and advanced rule compilation support.

easy-rust-notes. My personal notes and code for learning Rust in easy_rust tutorial https://github.com/Dhghomon/easy_rust

unquoted_checker. Scanner for finding Unquoted Service Path for Privilege Escalation

polkit-auto-exploit. Automatic Explotation PoC for Polkit CVE-2021-3560

nessus-queue-scan. A tool to automate Nessus scan scheduling, allowing pentesters to queue scans without the hassle of manually creating schedules. Simply define scan details, and the tool will automatically launch the next scan once the previous one finishes, preventing any overlap.

CheckMyUsername. Python Library for Social Media and Other Service Username Availability Checker

extract-myreact. Extracting react native app source code from apk file.

MobileApp-Pentest-Cheatsheet. The Mobile App Pentest cheat sheet was created to provide concise collection of high value information on specific mobile application penetration testing topics.

docker-101-id. This ebook about Docker from zero to hero. Just for education purpose only with Indonesian Language.. I hope i can commitment :)

Dysco. Dysco(Dynamic PHP Shell Command for RCE)

hacker101. Hacker101

AM3S. Asterisk Manager/Monitor Multiple Server With Python - Coming Soon

CVE-2022-1388-rs. CVE-2022-1388 F5 BIG-IP iControl REST Auth Bypass RCE written in Rust

aancw.

panduan-memulai-belajar-django. Buku ini merupakan Panduan untuk Memulai Belajar Django bagi pemula. Dibuku ini akan membahas dari teori dasar Django sampai praktek pembuatan aplikasi. Buku ini ditujukan untuk dokumentasi Kuliah Online SinauDev

Android-Security-Reference. A W.I.P Android Security Ref

fuzzing-101-solutions-learning. All resource backup from https://github.com/epi052/fuzzing-101-solutions/ with some adaptation for my fuzzing learning purpose. I'm not own any copyright

Spring4shell-poc-rs. Spring 4 Shell PoC script writted in Rust

SecLists. SecLists is the security tester's companion. It is a collection of multiple types of lists used during security assessments. List types include usernames, passwords, URLs, sensitive data grep strings, fuzzing payloads, and many more.

Spring4shell-poc-lab. PoC Lab for Spring4shell vulnerability

nixpkgs. My Personal Configuration with Nix ƛ

bettercap-ng. This is a WIP of the new version of bettercap, very alpha, do not use.

Exploit-Development-Tools. A bunch of my exploit development helper tools, collected in one place.

AppSecEzine. AppSec Ezine Public Repository.

datasploit. An #OSINT Framework to perform various recon techniques on Companies, People, Phone Number, Bitcoin Addresses, etc., aggregate all the raw data, and give data in multiple formats.

SSRF-Testing. SSRF (Server Side Request Forgery) testing resources

Awesome-WAF. 🔥 A curated list of awesome web-app firewall (WAF) stuff.

MLWithPytorch. Objective of the repository is to learn and build machine learning models using Pytorch. 30DaysofML Using Pytorch

API-dnsdumpster.com. (Unofficial) Python API for https://dnsdumpster.com/

lsacache2hashcat. Give me lsadump::cache output from mimikatz, I will transform it to DCC2 Hashcat compatible. Useful for so many credentials cache

awesome-iocs. A collection of sources of indicators of compromise

Useful_Websites_For_Pentester. This repository is to make life of the pentester easy as it is a collection of the websites that can be used by pentesters for day to day studies and to remain updated.

AndroidKernelExploitationPlayground. C

android_app_security_checklist. Android App Security Checklist

codeshare-helper. A browser extension that enhances Frida CodeShare by enabling easy copying and downloading of code snippets as you browse.

remote-template-injector. VBA Macro Remote Template Injection written in Rust

Awesome-Red-Teaming. List of Awesome Red Teaming Resources

awesome-research. :seedling: a curated list of tools to help you with research/life

ZamasuSearch. Zamasu Search is a Python GUI Based for Searching Exploit from exploit-db.com repository

awesome-remote-job. A curated list of awesome remote jobs and resources. Inspired by https://github.com/vinta/awesome-python

awesome-cyber-skills. A curated list of hacking environments where you can train your cyber skills legally and safely

awesome-threat-intelligence. A curated list of Awesome Threat Intelligence resources

awesome-social-engineering. A curated list of awesome social engineering resources.

awesome-pentest-cheat-sheets. Collection of the cheat sheets useful for pentesting

Awesome-Hacking. A collection of various awesome lists for hackers, pentesters and security researchers

dirList-JSON-Hash. dirList-JSON-Hash is Command line tool for directory listing with JSON output format, hash(MD5,CRC32,SHA1,SHA256,SHA512) file support and file information. Usefull for generate list of update file for application updater.

RVIServerMasterOS. This repository is for RumahVoIP Server Master Operating System/RumahVoIP Node Server