apkscope
suffixing/apkscopeAndroid reverse engineering for humans and AI agents: typed Java in milliseconds, xrefs, API and secret recon, APK diff, re-signing, a native viewer…
ai-assisted-reversingandroid-securitybinary-analysis+8
2
suffixing/apkscopeAndroid reverse engineering for humans and AI agents: typed Java in milliseconds, xrefs, API and secret recon, APK diff, re-signing, a native viewer…
lauriewired/jadxecuteJADX-gui scripting plugin for dynamic decompiler manipulation
rvsh3ll/nxc-vulnscanNetExec module: run every stock Windows vuln-check in one pass (check-only, no exploit)
jankammerath/bogusmipsForensic analytics for disassembly, reassembly, reverse engineering and auditing of Android apps
anasfik/flutterguardOffline security audits for Flutter APKs on Android. Inspect permissions, SDKs, endpoints and potential secrets. No root, account, ads or analytics.
7iosecurity/xss-payloadsCollection of cross-site scripting (XSS) payloads for web application security testing, filter bypass research, and penetration testing engagements.
cujanovic/open-redirect-payloadsCurated collection of open redirect payloads sourced from bug bounty reports, with a shell script to substitute a target whitelisted domain for…
cujanovic/subdomain-bruteforce-listLarge wordlist (34M+ entries) for subdomain bruteforcing and DNS reconnaissance during penetration testing and attack surface discovery.
xsuperbug/payloadsCollection of PHP-based attack payloads for web exploitation and penetration testing scenarios.
k4n3co/lab-rats-v1.6Lab-RATS is a powerful and lightweight Android Remote Administration Tool full of features that enables remote monitoring, management and interaction…
ryanpohlner/arcgis-web-shellArcGIS Enterprise geoprocessing service that publishes a Python toolbox for command execution.
interplains/zero-breach-toolkitFree, open-source, offline checks for traces of known mercenary spyware. Works on Windows, macOS and Linux, Android phones and iPhone backups.
gmh5225/plex2shellCVE-2026-96652 CVE-2026-96654 CVE-2026-96655 CVE-2026-96656
gmh5225/powermayhemBash-based generator that produces PowerShell payloads for red team and penetration testing engagements.
baarai/artexLLM multi-agent autonomous penetration testing platform with planner/worker agents, asset and exploration graphs, MITM traffic recording, and…
0xredash/cve-2026-0257Python exploit for CVE-2026-0257 that forges GlobalProtect authentication override cookies to bypass PAN-OS portal and gateway authentication and…
0xredash/cve-2026-0073C++ proof-of-concept checker and exploit for CVE-2026-0073, an Android Wireless ADB authentication bypass allowing unauthenticated remote shell…
faicalom/zte-mf904q-reverse-engineeringOpen research documentation and source review for ZTE MF904Q bootloader, firmware extraction, and reverse engineering.