isjuye Goto Github PK

android

Android 加固应用Hook方式-Frida

androideagleeye

An Xposed and adbi based module which is capable of hooking both Java and Native methods targeting Android OS.

autowasp

BurpSuite Extension: A one-stop pen testing checklist and logger tool

burp-piper-custom-scripts

Custom scripts for the PIPER Burp extensions.

burpcrypto-jslibrary

BurpCrypto officially confirms the supported JS library (BurpCrypto官方确认支持的JS库).

burpsuite-copy-as-xmlhttprequest

Copy as XMLHttpRequest BurpSuite extension

cswsh-scanner

Scanner for Cross-Site WebSocket Hijacking

devops_tools

divideandscan

Divide full port scan results and use it for targeted Nmap runs

frida-ios-syscall-tracer

Traces syscalls on iOS via Frida, including Mach syscalls

frida_common_tools

Frida常用的工具类库

fridauitools

frida工具的缝合怪

gitgot

Semi-automated, feedback-driven tool to rapidly search through troves of public data on GitHub for sensitive secrets.

h2csmuggler

HTTP Request Smuggling over HTTP/2 Cleartext (h2c)

hacktricks

Welcome to the page where you will find each trick/technique/whatever I have learnt in CTFs, real life apps, and reading researches and news.

http-methods-discloser

httpdoom

HttpDoom is a tool for response-based inspection of websites across a large amount of hosts for quickly gaining an overview of HTTP-based attack surface.

infraproject

노가다 시간 줄이기 위한 자동화 스크립트

interactsh

An OOB interaction gathering server and client library

interactsh-collaborator

Burpsuite plugin for Interact.sh

jni-frida-hook

Script to quickly hook natives call to JNI in Android

justtrustme

An xposed module that disables SSL certificate checking for the purposes of auditing an app with cert pinning

kiterunner

Contextual Content Discovery Tool

kubetail

Bash script to tail Kubernetes logs from multiple pods at the same time

kubiscan

A tool to scan Kubernetes cluster for risky permissions

massvulscan

Bash script which (very) quickly identifies open network ports and any associated vulnerabilities / Script Bash qui permet d'identifier (très) rapidement les ports réseaux ouverts et les éventuelles vulnérabilités associées.

nginxpwner

papimonitor

Python API Monitor for Android apps

paragon

Red Team engagement platform with the goal of unifying offensive tools behind a simple UI

profil3r

OSINT tool that allows you to find a person's accounts and emails + breached emails 🕵️