+Ch0pin

medusa. Mobile Edge-Dynamic Unified Security Analysis

AVIator. Antivirus evasion project

uncrackable. A list of bizarre crackmes

log4JFrida. JavaScript

related_work. Slides and videos from my public speeches / conferences

stheno. A burp for intents wannabe

iris. Intent Runtime Inspection System

JNIInvocation. C

Android-RAT---Hawkshaw. This is a android spy app, android remote administration tool, android RAT which uploads user data such as contacts, messages, call log, send message(s), photos, videos, open a browser link etc.

EternalBlue. Handy script to automate the attack

TapJacking-Attacks. TapJacking Attacks Demo

AndroidWebDoor. A minimalistic android backdoor

ToolBox. pen testing scripts

Reverse-Engineering-Tutorial. A FREE comprehensive reverse engineering course covering x86, x64, 32-bit ARM & 64-bit ARM architectures.

zipslip. Python

vulnerability-review. 寻找公开漏洞进行复盘学习。

RunAsInteractive. a simple program that executes a file under a given username and password

CVE20210485. CVE-20210-485

Android-Undetectable-Spy-App. This repository contains android application source code which can be imported in Android Studio. Currently it fetches all notifications, whatsapp chats, instagram chats in real time.

android-fuzzing. C

security-advisories.

ubi_reader. Collection of Python scripts for reading information about and extracting data from UBI and UBIFS images.

theZoo. A repository of LIVE malwares for your own joy and pleasure. theZoo is a project created to make the possibility of malware analysis open and available to the public.

jnitrace. A Frida based tool that traces usage of the JNI API in Android apps.

PayloadsAllTheThings. A list of useful payloads and bypass for Web Application Security and Pentest/CTF

Android-Reports-and-Resources. A big list of Android Hackerone disclosed reports and other resources.

secret-regex-list. List of regex for scraping secret API keys and juicy information.

APKEnum. Python

AndroidSecurityStudy. 安卓应用安全学习

CSRF-PoC-Genorator. This is a simple CSRF Proof of Concept generator that supports multiple form encodings and methods

androguard. Reverse engineering and pentesting for Android applications

playstore_request. JavaScript

qu1ckr00t. A PoC application demonstrating the power of an Android kernel arbitrary R/W.

windows-kernel-exploits. windows-kernel-exploits Windows平台提权漏洞集合

WebViews. Java