rwx98saf Goto Github PK

backdroid

A search-based Android static analysis tool with much better performance than Amandroid and FlowDroid

binabsinspector

BinAbsInspector: Vulnerability Scanner for Binaries

cve-2021-30860

Collection of materials relating to FORCEDENTRY, will eventually delete this repo and migrate the materials to my main exploit repo once finished

debughunter

Discover hidden debugging parameters and uncover web application secrets

findhash

一个IDA脚本，可以检测出哈希算法（无论是否魔改常数）并生成frida hook 代码。

mariana-trench

Our security focused static analysis tool for Android and Java applications.

obpo-plugin

An ida plugin for recovering control flow flattening

poc1

A public collection of POCs & Exploits for the vulnerabilities I discovered

rengine

reNgine is an automated reconnaissance framework for web applications with a focus on highly configurable streamlined recon process via Engines, recon data correlation and organization, continuous monitoring, backed by a database, and simple yet intuitive User Interface. reNgine makes it easy for penetration testers to gather reconnaissance with minimal configuration and with the help of reNgine's correlation, it just makes recon effortless.

reparcelbug2

Writeup and exploit for installed app to system privilege escalation on Android 12 Beta through CVE-2021-0928, a `writeToParcel`/`createFromParcel` serialization mismatch in `OutputConfiguration`

strongr-frida-android

An anti detection version frida-server for android.

suizuku

turbo-intruder

Turbo Intruder is a Burp Suite extension for sending large numbers of HTTP requests and analyzing the results.

vmprotect-3.5.1