detaped
nccgroup/detapedDetaped is a Python disassembler and decompiler for Duktape. The intended use is for source code review and analysis in situations where you only…
binary-analysiscode-analysispenetration-testing+2
3
nccgroup/detapedDetaped is a Python disassembler and decompiler for Duktape. The intended use is for source code review and analysis in situations where you only…
galaxy-sc/cve-2026-47423-dompurify-xss-detectorGo-based scanner that detects DOMPurify sanitizer bypass (CVE-2026-47423) via logic fingerprinting on minified production JavaScript bundles,…
mbadanoiu/cve-2021-46364CVE-2021-46364: YAML Deserialization in Magnolia CMS
bahe-msft/govuln-cve-2023-47108Analyzes and addresses CVE-2023-47108, providing vulnerability assessment and remediation guidance for affected systems.
tigr78/cve-2025-53964Proof-of-concept exploit for CVE-2025-53964: remote file read/write via malicious XDXF dictionary in GoldenDict 1.5.0/1.5.1, leveraging unsanitized…
sirredbeard/cve-2025-60876Behavior-preserving fix for CVE-2025-60876 HTTP header injection in BusyBox wget, with proof-of-concept, percent-encoding patch, and upstream…
simoneavogadro/android-reverse-engineering-skillDecompiles Android APK/XAPK/JAR/AAR files and extracts HTTP APIs, authentication patterns, and call flows using jadx, with R8-resistant Kotlin name…
tanprathan/mobileapp-pentest-cheatsheetThe Mobile App Pentest cheat sheet was created to provide concise collection of high value information on specific mobile application penetration…
ernw/androticklerPenetration testing and auditing toolkit for Android apps.
xcodeon1/ipa-scopeStatic analysis tool for iOS applications that extracts links, API keys, subdomains, binary info, linked libraries, and strings to aid mobile…
traceforce/mcp-xrayUnified security scanner for MCP servers with config, pentest, and repo-scan modes. Generates SARIF reports for CI/CD integration, detects secrets,…
shinthink/blitzstrikeMCP server packaging a three-tier penetration-testing methodology: attack-surface reconnaissance, source-to-sink static analysis, and live finding…
horkimhab/cve-2026-442_CVE-2026-44289, CVE-2026-44290, CVE-2026-44291, CVE-2026-44292, CVE-2026-44294, CVE-2026-44295 - protobuf.js
mobsf/mobile-security-framework-mobsfAutomated mobile application security testing framework for Android, iOS, and Windows. Performs static and dynamic analysis, malware detection, and…
owasp/mastgComprehensive OWASP guide for mobile app security testing, reverse engineering, and verifying MASVS/MASWE weaknesses through static, dynamic, and…
xtiankisutsa/mara_frameworkMARA is a Mobile Application Reverse engineering and Analysis Framework. It is a toolkit that puts together commonly used mobile application reverse…
aancw/sslpindetectSSLPinDetect is a tool for analyzing Android APKs to detect SSL pinning implementations by scanning for known patterns in decompiled code. It helps…
stuxctf/slythestxMobile app security auditing tool focused on automating SAST analysis, identifying underlying technologies (React Native, Flutter, Xamarin, native),…