
SafeLine
Self-hosted WAF and reverse proxy that filters malicious HTTP traffic, blocks SQL injection, XSS, and bot attacks, with rate limiting and dynamic…

Self-hosted WAF and reverse proxy that filters malicious HTTP traffic, blocks SQL injection, XSS, and bot attacks, with rate limiting and dynamic…

A powerful decompiler that lets you reverse-engineer React Native mobile apps by converting their compiled Hermes bytecode (.hbc) files back into…


An strace-like program for the Windows 'native' API

A Magisk module that simplifies running the Frida server on Android, with easy management commands to download specific versions, enable or disable…

VSCode extension for Frida-based mobile reverse engineering: runtime class/module inspection, Java/ObjC/native hook generation, autocomplete, and…

An API hooking framework for intercepting and monitoring Windows applications

Automatic SSTI detection tool with interactive interface

The repo contains a series of challenges for learning Frida for Android Exploitation.

This is an Exploit App I made when solving the DocumentViewer challenge (CVE-2021-40724) from MobileHackingLab. It will download a libdocviewe_pro.so…

Fermion, an electron wrapper for Frida & Monaco.

The ARTful library for dynamically modifying the Android Runtime

ADT is a toolset designed to help model application behavior, research and test security vulnerabilities, and facilitate reversing hostile code.

The Mobile App Pentest cheat sheet was created to provide concise collection of high value information on specific mobile application penetration…


Scriptable debugger for Android Dalvik VM using JDWP/DDM interfaces to hook methods, inspect process state, and modify runtime behavior without…