nhattm3006 Goto Github PK

evabs

An open source Android application that is intentionally vulnerable so as to act as a learning platform for Android application security beginners.

evil-droid

exploit-challenges

A collection of vulnerable ARM binaries for practicing exploit development

firebase-scan

FirebaseScan is a pen-testing tool to automatically scanning and exploiting Firebase DB vulnerability in the android application.

grapefruit

(WIP) Runtime Application Instruments for iOS. Previously Passionfruit

grpc-http-proxy

A reverse proxy server which translate JSON HTTP requests to gRPC calls based on protoreflect

hackdroid

Penetration Testing Apps for Android

hackthebox-ctf-writeups

This cheasheet is aimed at the CTF Players and Beginners to help them sort Hack The Box Labs on the basis of Operating System and Difficulty.

injuredandroid

A vulnerable Android application that shows simple examples of vulnerabilities in a ctf style.

interactsh

An OOB interaction gathering server and client library

java-deserialization-cheat-sheet

The cheat sheet about Java Deserialization vulnerabilities

java-socket-programming-example

jwt_tool

:snake: A toolkit for testing, tweaking and cracking JSON Web Tokens

keyhacks

Keyhacks is a repository which shows quick ways in which API keys leaked by a bug bounty program can be checked to see if they're valid.

kithack

Hacking tools pack & backdoors generator.

magisk

The Magic Mask for Android

malware-gems

A not so awesome list of malware gems for aspiring malware analysts

marshalsec

microsoft-office-2021

Download and Activate Microsoft Office 2021 (Latest) for free. (Legal)

mobile-security-framework-mobsf

Mobile Security Framework (MobSF) is an automated, all-in-one mobile application (Android/iOS/Windows) pen-testing, malware analysis and security assessment framework capable of performing static and dynamic analysis.

mstg-hacking-playground

nhattm3006.github.io

nightmare

nuclei

Nuclei is a fast tool for configurable targeted vulnerability scanning based on templates offering massive extensibility and ease of use.

osmedeus

Fully automated offensive security framework for reconnaissance and vulnerability scanning

ovaa

Oversecured Vulnerable Android App

payloadsallthethings

A list of useful payloads and bypass for Web Application Security and Pentest/CTF

pbtk

A toolset for reverse engineering and fuzzing Protobuf-based apps

pentest-wiki

PENTEST-WIKI is a free online security knowledge library for pentesters / researchers. If you have a good idea, please share it with others.

php-reverse-shell