rfidresearchgroup/chameleonminiPortable NFC/RFID security tool for emulating and cloning contactless smartcards, reading tags, sniffing RF traffic, and recovering Mifare access…
justakazh/log4j-cve-2021-44228Mass scanner for Log4j CVE-2021-44228 vulnerability with Python-based detection and exploit capabilities for automated security testing.
theresafewconors/cve-2025-29927-testingPowerShell script to test if a web app is vulnerable to CVE-2025-29927
mobiusbinary/cve-2021-41647Proof-of-concept exploit for unauthenticated SQL injection in Online-Food-Ordering-Web-App, demonstrating login bypass and error/time-based blind…
vyvivekyadav04/rsc-infra-scannerThis is a fast, asynchronous Python tool that fingerprints domains for likely Next.js App Router / React Server Components (RSC) infrastructure. (I…
markoarmitage/metasploit-frameworkapp turn nil publics and privates into blanks 3 months ago config Use bundler/setup for more graceful bundler related failures 11 days ago data…
nahamsec/hostilesubbruteforcerSubdomain brute-forcing tool that enumerates existing subdomains and detects misconfigured cloud-hosted subdomains vulnerable to takeover across AWS,…
impact-i/x8-burpHidden parameters discovery suite
0x1ca3/adbnetA tool that allows you to search for vulnerable android devices across the world and exploit them.
julio-cfa/poc-es-file-explorer-cve-2019-6447Bash PoC script exploiting CVE-2019-6447 in ES File Explorer to list files, photos, videos, apps, and download files from vulnerable Android devices.
kaitokidc500/cve-2024-23700-c2-serverSource code minh họa máy chủ c2 demo kịch bản thực thi của CVE-2024-23700
gyulyvgc/sniffnetComfortably monitor your network traffic 🕵️♂️
0xdsm/apepeExtracts app settings, permissions, deeplinks, and SSL pinning bypass suggestions from Android APK files via static analysis of AndroidManifest.xml,…
mobilehackinglab/cve-2026-0047-pocCVE-2026-0047: Missing permission check in ActivityManagerService.dumpBitmapsProto() — steal UI bitmaps from every running app with zero permissions…
chirantar7004/android-passive-location-trackerLocation tracking app without location permissions! Makes use of CVE-2018-15835 which makes use of Android OS information leakage.
honestcorrupt/phonepe-sensitive-data-exposure-cve-2025-5154CVE-2025-5154: Proof-of-concept for unencrypted local storage of authentication tokens, PII, and KYC data in the PhonePe Android app, enabling…
qeeqbox/social-analyzerAPI, CLI, and Web App for analyzing and finding a person's profile in 1000 social media \ websites
majd/ipatoolCommand-line tool that allows searching and downloading app packages (known as ipa files) for iOS, iPadOS, tvOS, and visionOS from the App Store.
