hehacks Goto Github PK

juice-shop

OWASP Juice Shop: Probably the most modern and sophisticated insecure web application

jwt-hacking-challenges

APIs to practise diverse techniques to hack JWT Signatures

jwt_tool

:snake: A toolkit for testing, tweaking and cracking JSON Web Tokens

jwtcrack

Crack the shared secret of a HS256-signed JWT

jwtdemo

Practice hacking JWT tokens

kernbypass-public

chroot based kernel level jailbreak detection bypass.

keyhacks

Keyhacks is a repository which shows quick ways in which API keys leaked by a bug bounty program can be checked to see if they're valid.

keywords

leaky-repo

Benchmarking repo for secrets scanning

lkwa

Lesser Known Web Attack Lab

lmo-oob

LetMeOutOfYour.net OOB

mac-setup

Installing Development environment on macOS

magisk-frida

🔐 Run frida-server on boot with Magisk, always up-to-date

magisktrustusercerts

A Magisk module that automatically adds user certificates to the system root CA store

malicious-pdf

Generate a bunch of malicious pdf files with phone-home functionality. Can be used with Burp Collaborator

matchandreplace

Match and Replace script used to automatically generate JSON option file to BurpSuite

messpostage

PostMessage extension

mfva

the gangsta vulnerable android app

mind-maps

Mind-Maps of Several Things

mindapi

Organize your API security assessment by using MindAPI. It's free and open for community collaboration.

mitre-attack-mapping

Mapping your datasources and detections to the MITRE ATT&CK Navigator framework.

mobdevim

Command line utility that interacts with plugged in iOS devices. Uses Apple's MobileDevice framework

mobile-app-pentest

mobile-nuclei-templates

mobileappvm

VM build script for mobile app pentesting/reversing.

mobilehackingcheatsheet

Basics on commands/tools/info on how to assess the security of mobile applications

mobsfscan

mobsfscan is a static analysis tool that can find insecure code patterns in your Android and iOS source code. Supports Java, Kotlin, Swift, and Objective C Code. mobsfscan uses MobSF static analysis rules and is powered by semgrep and libsast pattern matcher.

mqtt-explorer

An all-round MQTT client that provides a structured topic overview

msmailprobe

Office 365 and Exchange Enumeration

mstg-hacking-playground