Ghidra is a software reverse engineering (SRE) framework

Android Package Inspector - dynamic analysis with api hooks, start unexported activities and more. (Xposed Module)

Vulnerable app with examples showing how to not use secrets

Open Attack Simulation & Security Validation Platform

A JSP backdoor that enables under Tomcat hiding arbitrary JSP files, in addition to their access logs.

A PoC Java Stager which can download, compile, and execute a Java file in memory.

CVE-2023-0669 GoAnywhere MFT suffers from a pre-authentication command injection vulnerability in the License Response Servlet due to deserializing an arbitrary attacker-controlled object.

Tomcat backdoor based on CS blog