evilpan

jni_helper. Find JNI function signatures in APK and apply to reverse-engineering tools.

P2P-Over-MiddleBoxes-Demo. A simple demo of P2P communication over middle boxes such as NAT

gptcli. ChatGPT in command line with OpenAI API (gpt-3.5-turbo/gpt-4/gpt-4-32k)

Airkiss. A source code implementation of Wechat(微信) Airkiss protocol

hidemyass. A little post-exploit tool that carefully clean *NIX access logs

TurnServer. Implementation of RFC5766 and RFC5389

awesome-cheatsheets. 超级速查表 - 编程语言、框架和开发工具的速查表，单个文件包含一切你需要知道的东西 :zap:

dataflow-pass. A LLVM Pass with runtime dataflow sanitization

HookAgent. A simple Java Agent template with javassist support.

audit.vim. Code audit (code review) with VIM.

fuzzboot. Simple tool to dynamically discover hidden fastboot OEM commands based on static knowledge

QTranslator. 一个QT5练手项目，实现百度和有道翻译API

vdexExtractor. Tool to decompile & extract Android Dex bytecode from Vdex files

stack-overflow-demo. stuff used in my blog post

docker-registry-mitm. PoC of docker registry-mirror MITM attack

qncli. 七牛云命令行管理小工具/QiNiu Command Line Interface

pyweixin. 可编程的轻量级微信客户端模块

fSocks. Yet another socks5 proxy to bypass firewall

pannzh.github.io. NULL

hamster. A proxy server for cookie sidejacking. Works with 'ferret'.

Office8570. CVE20178570

setools-android. Unofficial port of setools to Android with additional sepolicy-inject utility included

KernelSU. A Kernel based root solution for Android GKI

how2heap. A repository for learning various heap exploitation techniques.

xssor2. XSS'OR - Hack with JavaScript.

mooder. Mooder是一款开源、安全、简洁、强大的团队内部知识分享平台。

evilpan.

mariana-trench. Our security focused static analysis tool for Android and Java applications.

androguard. Reverse engineering, Malware and goodware analysis of Android applications ... and more (ninja !)