
graphql-cop
Lightweight Python utility for automated security auditing of GraphQL APIs. Detects misconfigurations, information leaks, and denial-of-service…

Lightweight Python utility for automated security auditing of GraphQL APIs. Detects misconfigurations, information leaks, and denial-of-service…

Record and replay framework for deterministic debugging of multi-threaded applications, enabling reverse execution, hardware watchpoints, and…

The Mobile App Pentest cheat sheet was created to provide concise collection of high value information on specific mobile application penetration…

A collection of my Frida instrumentation scripts to reverse engineer mobile apps and more.

The repo contains a series of challenges for learning Frida for Android Exploitation.

Code written as part of our various malware investigations

Lightweight fuzzing of a memory snapshot using KVM

Documentation and reverse engineering of reCAPTCHA

CMake build of Ghidra's SLEIGH processor specification library, providing standalone disassembly and p-code lifting engines for reverse engineering…

TInjA is a CLI tool for testing web pages for template injection vulnerabilities and supports 44 of the most relevant template engines for eight…

Elite is the client-side component of the Covenant project. Covenant is a .NET command and control framework that aims to highlight the attack…

GUI Burp Plugin to ease discovering of security holes in web applications

A tool for effective testing the binding layer of scripting languages

A collection of useful resources for hacking WordPress and it's plugins and themes

Winstrument is a framework of modular scripts to aid in instrumenting Windows software using Frida for reverse engineering and attack surface…

Distributed coverage-guided fuzzing engine compatible with libFuzzer targets; scales to thousands of concurrent jobs, uses sanitizers and corpus…

NebulaPulsar is a proof-of-concept in-memory implant framework for Java (JSP) and ASP.NET (ASPX/ASHX/ASMX) webshells, originally developed as part of…

Extract the managed (.NET) assemblies out of a MAUI Android assembly store.