pilaf-hw Goto Github PK

advdroid

statically vetting android apps based soot

analysisapp

一个快速分析某个app使用哪些sdk的小工具

android-vuln

安卓内核提权漏洞分析

androidslicer

AndroidSlicer is a dynamic slicing tool, useful for a variety of tasks, from testing to debugging to security.

api-security-checklist

Checklist of the most important security countermeasures when designing, testing, and releasing your API

awesome-blockchain-cn

收集所有区块链(BlockChain)技术开发相关资料，包括Fabric和Ethereum开发资料

awesome-bug-bounty

A comprehensive curated list of available Bug Bounty & Disclosure Programs and Write-ups.

awesome-bugbounty-writeups

A curated list of bugbounty writeups (Bug type wise) , inspired from https://github.com/ngalongc/bug-bounty-reference

awesome-frida

Awesome Frida - A curated list of Frida resources http://www.frida.re/ (https://github.com/frida/frida)

blockchain-security-awesome

A curated list of awesome things related to blockchain security

brida

The new bridge between Burp Suite and Frida!

bug-bounty-toolz

BBT - Bug Bounty Tools

bugbounty-cheatsheet

A list of interesting payloads, tips and tricks for bug bounty hunters.

crackso

cryptanalyzer

A Static Analysis tool, based on Soot

cryptdb

A database system that can process SQL queries over encrypted data.

cryptofucker

A xposed plugin for intercepting crypto parameters from apk files.

dexhunter

General Automatic Unpacking Tool for Android Dex Files

droidsslunpinning

Android certificate pinning disable tools

facebook-bug-bounty-write-ups

Hunting Bugs for Fun and Profit

fixelfsection

frida-all-in-one

《FRIDA操作手册》by @hluwa @r0ysue

fupk3

演示视频https://pan.baidu.com/s/1HH_-TQGca1NLoSqzvOPB3Q 密码：izm3

fuzzing-stuff

Resources About Fuzzing, For Multiple Platforms And All Popular Fuzzers. 500+ Open Source Tools Sorted By Star Count, 800+ Blog Posts Sorted By Publish Time.

gadgetinspector

一个通过分析字节码进行污点分析的静态代码审计应用（添加了大量代码注释，适合大家进行源码学习）。加入了挖掘Fastjson反序列化gadget chains（曾使用它挖掘到了Fastjson、Jackson通用的gadget chain）和SQLInject（JdbcTemplate、MyBatis、JPA、Hibernate、原生jdbc等）静态检测功能。

gmp

A prebuilt GMP module for Android

gossip-summer-school-2018

Source code repo for Let's GOSSIP summer school 2018

hackerone-reports

Top disclosed reports from HackerOne

https_packets_decrypt

用私钥手动解HTTPS数据包的实验素材

ida_haru

scripts for IDA Pro