Tools

niklashigi/apk-mitm

🤖 A CLI application that automatically prepares Android APK files for HTTPS inspection

d78ui98/apkdeeplens

Android security insights in full spectrum.

alw1ez/arkhota

Arkhota, a web brute forcer for Android.

xckevin/androidwebviewinjectdemo

An app demo for test android webview security issue: CVE-2012-6636

marin-m/pbtk

A toolset for reverse engineering and fuzzing Protobuf-based apps

georgiev-martin/nofrak

Proof Of Concept for Android. NoFrak is designed to prevent fracking attacks, as described in "Breaking and Fixing Origin-Based Access Control in…

shacode/olyx

🔗 Lightweight security orchestrator mobile application for URI vetting, providing a unified, multi-engine interface to aggregate and validate link…

shinycolumn/cve-2025-50110

Cleartext Transmission of Sensitive Information in EagleEyes Lite Android Application

may215/awesome-termux-hacking

⚡️An awesome list of the best Termux hacking tools

kelvinben/appinfoscanner

一款适用于以HW行动/红队/渗透测试团队为场景的移动端(Android、iOS、WEB、H5、静态网站)信息收集扫描工具，可以帮助渗透测试工程师、攻击队成员、红队成员快速收集到移动端或者静态WEB站点中关键的资产信息并提供基本的信息输出,如：Title、Domain、CDN、指纹信息、状态信息等。

s0md3v/diggy

Extract endpoints from apk files.

dpnishant/raptor

Web-based Source Code Vulnerability Scanner

externalist/exploit_playground

Analysis of public exploits or my 1day exploits

mozilla/firefox-devtools-mcp

Model Context Protocol server for Firefox DevTools - enables AI assistants to inspect and control Firefox browser through the Remote Debugging…

hunt-benito/two-dots-and-a-slash-cve-2026-18907-tecno-hi-browser-download-path-traversal

Python PoC for CVE-2026-18907 path traversal in TECNO Hi Browser's download handler. Includes malicious HTTP server and naive downloader to…

kudima/exploit_playground

Analysis of public exploits or my 1day exploits

kaitokidc500/cve-2024-23700-c2-server

Source code minh họa máy chủ c2 demo kịch bản thực thi của CVE-2024-23700