📱 objection - runtime mobile exploration

Find credentials all over the place

Write any JavaScript with 6 Characters: []()!+

Vulnerability information query tool on the terminal.

BBT - Bug Bounty Tools (examples💡)

GF Paterns For (ssrf,RCE,Lfi,sqli,ssti,idor,url redirection,debug_logic, interesting Subs) parameters grep

Mass scan IPs for vulnerable services

⚔️ Web Hacker's Weapons / A collection of cool tools used by Web hackers. Happy hacking , Happy bug-hunting

PyIntruder: A Python fuzzer boasting multithreading for accelerated performance, a user-friendly tkinter GUI interface, and a wide array of encoding options to facilitate thorough security testing …

A living document for penetration testing and offensive security.

Automation Recon tool which works with Large & Medium scopes. It performs a lot of tasks and gets back all the results in separated files.

Because just a dark theme wasn't enough!

🦄 Record your terminal and generate animated gif images or share a web player

🔩 jwt-hack is tool for hacking / security testing to JWT. Supported for En/decoding JWT, Generate payload for JWT attack and very fast cracking(dict/brutefoce)

pwncat - netcat on steroids with Firewall, IDS/IPS evasion, bind and reverse shell, self-injecting shell and port forwarding magic - and its fully scriptable with Python (PSE)

CTF Style Vulnerable Android App

EagleShell is a high-quality tool that aims to improve your pentest.

A cheat sheet that contains common enumeration and attack methods for Windows Active Directory.

Spring Boot Actuator (jolokia) XXE/RCE

Find files that don't need a password to be executed by sudo.

PEASS - Privilege Escalation Awesome Scripts SUITE (with colors)

A collection of handy Bash One-Liners and terminal tricks for data processing and Linux system maintenance.

Runtime Mobile Security (RMS) 📱🔥 - is a powerful web interface that helps you to manipulate Android and iOS Apps at Runtime

OneForAll是一款功能强大的子域收集工具

Ghost Framework is an Android post-exploitation framework that exploits the Android Debug Bridge to remotely access an Android device. Ghost Framework gives you the power and convenience of remote …

Ghost Framework is an Android post-exploitation framework that exploits the Android Debug Bridge to remotely access an Android device.