thisistfs Goto Github PK

alterx

Fast and customizable subdomain wordlist generator using DSL

android-reports-and-resources

A big list of Android Hackerone disclosed reports and other resources.

awesome-mobile-ctf

This is a curated list of mobile based CTFs, write-ups and vulnerable apps. Most of them are android based due to the popularity of the platform.

awesome-vulnerable-apps

Awesome Vulnerable Applications

awspx

A graph-based tool for visualizing effective access and resource relationships in AWS environments.

book-content

Real Android malware apps discussed in the book

bug-bounty-wordlists

A repository that includes all the important wordlists used while bug hunting.

crapi

completely ridiculous API (crAPI)

damn-vulnerable-graphql-application

Damn Vulnerable GraphQL Application is an intentionally vulnerable implementation of Facebook's GraphQL technology, to learn and practice GraphQL Security.

dex-oracle

A pattern based Dalvik deobfuscator which uses limited execution to improve semantic analysis

dnspy

.NET debugger and assembly editor

domxssscanner

DOMXSS Scanner is an online tool to scan source code for DOM based XSS vulnerabilities

ghauri

An advanced cross-platform tool that automates the process of detecting and exploiting SQL injection security flaws

hacking-apis

handouts

materials we hand out

iosappreverseengineering

The world’s 1st book of very detailed iOS App reverse engineering skills :)

jwt_tool

:snake: A toolkit for testing, tweaking and cracking JSON Web Tokens

mastg-hacking-playground

mobile-security-framework-mobsf

Mobile Security Framework (MobSF) is an automated, all-in-one mobile application (Android/iOS/Windows) pen-testing, malware analysis and security assessment framework capable of performing static and dynamic analysis.

nuclei

Fast and customizable vulnerability scanner based on simple YAML based DSL.

owasp-mastg

The Mobile Application Security Testing Guide (MASTG) is a comprehensive manual for mobile app security testing and reverse engineering. It describes the technical processes for verifying the controls listed in the OWASP Mobile Application Security Verification Standard (MASVS).

owasp-masvs

The OWASP MASVS (Mobile Application Security Verification Standard) is the industry standard for mobile app security.

padding-oracle-attack-explained

Padding Oracle Attack fully explained and coded from scratch in Python3

payloadsallthethings

A list of useful payloads and bypass for Web Application Security and Pentest/CTF

poetanddidntknowit

My exploratory code to test padding oracle attacks

python-adb

Python ADB + Fastboot implementation

redroid-doc

redroid (Remote-Android) is a multi-arch, GPU enabled, Android in Cloud solution. Track issues / docs here

restler-fuzzer

RESTler is the first stateful REST API fuzzing tool for automatically testing cloud services through their REST APIs and finding security and reliability bugs in these services.

same-site-poc

seclists

SecLists is the security tester's companion. It's a collection of multiple types of lists used during security assessments, collected in one place. List types include usernames, passwords, URLs, sensitive data patterns, fuzzing payloads, web shells, and many more.