Prathan Phongthiproek

ezhz-android. Kotlin

mitmproxy. An interactive TLS-capable intercepting HTTP proxy for penetration testers and software developers.

GDA-android-reversing-Tool. the fastest and most powerful android decompiler(native tool working without Java VM) for the APK, DEX, ODEX, OAT, JAR, AAR, and CLASS file. which supports malicious behavior detection, privacy leaking detection, vulnerability detection, path solving, packer identification, variable tracking, deobfuscation, python&java scripts, device memory extraction, data decryption, and encryption, etc.

hbctool. Hermes Bytecode Reverse Engineering Tool (Assemble/Disassemble Hermes Bytecode)

SprayingToolkit. Scripts to make password spraying attacks against Lync/S4B, OWA & O365 a lot quicker, less painful and more efficient

routersploit. Exploitation Framework for Embedded Devices

tomcatWarDeployer. Apache Tomcat auto WAR deployment & pwning penetration testing tool.

WinPwn. Automation for internal Windows Penetrationtest / AD-Security

PrivescCheck. Privilege Escalation Enumeration Script for Windows

AvaloniaILSpy. Avalonia-based .NET Decompiler (port of ILSpy)

Gopherus. This tool generates gopher link for exploiting SSRF and gaining RCE in various servers

pspy. Monitor linux processes without root permissions

PENTESTING-BIBLE. articles

Magisk. The Magic Mask for Android

bagbak. [deprecated] Yet another frida based iOS dumpdecrypted. Also decrypts app extensions

RMS-Runtime-Mobile-Security. Runtime Mobile Security (RMS) 📱🔥 - is a powerful web interface that helps you to manipulate Android and iOS Apps at Runtime

codeql-intro. CodeQL

ghidra_scripts. Scripts for the Ghidra software reverse engineering suite.

dsdump. An improved nm + Objective-C & Swift class-dump

hakrawler. Simple, fast web crawler designed for easy, quick discovery of endpoints and assets within a web application

swiftshield. 🔒 Swift Obfuscator that protects iOS apps against reverse engineering attacks.

gitrob. Reconnaissance tool for GitHub organizations

Fast-Google-Dorks-Scan. The OSINT project, the main idea of which is to collect all the possible Google dorks search combinations and to find the information about the specific web-site: common admin panels, the widespread file types and path traversal. The 100% automated.

relative-url-extractor. A small tool that extracts relative URLs from a file.

PEASS-ng. PEASS - Privilege Escalation Awesome Scripts SUITE (with colors)

CryptoSwift. CryptoSwift is a growing collection of standard and secure cryptographic algorithms implemented in Swift

CVE-2019-2729-Exploit. CVE-2019-2729 Exploit Script

fuzzing_tutorial. Mutation Based Grey Box Fuzzing with AFL Tutorial

CVE-2019-1253. Poc for CVE-2019-1253

wastc. Secure-D Web Application Security Test Checklist summarizes well-known weaknesses, vulnerabilities and best practices into review topics with short description and recommendation. Its objective is to aid penetration tester to review the web application thoroughly.

Pentest-Tools.

DVHMA. Damn Vulnerable Hybrid Mobile App (DVHMA) is an hybrid mobile app (for Android) that intentionally contains vulnerabilities.

Empire. Empire is a post-exploitation and adversary emulation framework that is used to aid Red Teams and Penetration Testers.

masvs. The OWASP MASVS (Mobile Application Security Verification Standard) is the industry standard for mobile app security.

wstg. The Web Security Testing Guide is a comprehensive Open Source guide to testing the security of web applications and web services.

exploit-0x41-buffer-overflow. Exploit Development 0x41: Buffer Overflooooooooooow

jnitrace. A Frida based tool that traces usage of the JNI API in Android apps.

bfinject. Dylib injection for iOS 11.0 - 11.1.2 with LiberiOS and Electra jailbreaks

apkstudio. Open-source, cross platform Qt6 based IDE for reverse-engineering Android application packages. It features a friendly IDE-like layout including code editor with syntax highlighting support for *.smali code files.

fridump. A universal memory dumper using Frida

BlueCrawl. Frida (Android) Script for extracting bluetooth information

pidcat. Colored logcat script which only shows log entries for a specific application package.

ie11_vbscript_exploit. Exploit Generator for CVE-2018-8174 & CVE-2019-0768 (RCE via VBScript Execution in IE11)

apk-anal. Android APK analyzer based on radare2 and others.

h8mail. Email OSINT & Password breach hunting tool, locally or using premium services. Supports chasing down related email

CheatSheetSeries. The OWASP Cheat Sheet Series was created to provide a concise collection of high value information on specific application security topics.

RE-iOS-Apps. A completely free, open source and online course about Reverse Engineering iOS Applications.

frida-snippets. Hand-crafted Frida examples

awesome-radare2. A curated list of awesome projects, articles and the other materials powered by Radare2

Intranet_Penetration_Tips. 2018年初整理的一些内网渗透TIPS，后面更新的慢，所以整理出来希望跟小伙伴们一起更新维护~

Tokenvator. A tool to elevate privilege with Windows Tokens

Inveigh. .NET IPv4/IPv6 machine-in-the-middle tool for penetration testers

wifiphisher. The Rogue Access Point Framework

SniffAir. A framework for wireless pentesting.

guide-aws-hacking. This is an offensive guide to securing AWS infrastructures. The hope is that by knowing how to take advantage of various types of AWS weaknesses you will be verse enough to provide the correct countermeasures.

p0wnedShell. PowerShell Runspace Post Exploitation Toolkit

nano. Nano is a family of PHP web shells which are code golfed for stealth.

caldera. Automated Adversary Emulation Platform

prowler. Prowler is the world’s most widely used open-source cloud security platform that automates security and compliance across any cloud environment.

SecLists. SecLists is the security tester's companion. It's a collection of multiple types of lists used during security assessments, collected in one place. List types include usernames, passwords, URLs, sensitive data patterns, fuzzing payloads, web shells, and many more.

Cheatsheet-God. Penetration Testing Reference Bank - OSCP / PTP & PTX Cheatsheet

WAF-bypass-Cheat-Sheet. Another way to bypass WAF Cheat Sheet (draft)

MagiskFrida. Runs frida-server on boot as root with magisk.

BeRoot. Privilege Escalation Project - Windows / Linux / Mac

PayloadsAllTheThings. A list of useful payloads and bypass for Web Application Security and Pentest/CTF

DarthSidious. Building an Active Directory domain and hacking it

fuxploider. File upload vulnerability scanner and exploitation tool.

Astra. Automated Security Testing For REST API's

awesome-iot-hacks. A Collection of Hacks in IoT Space so that we can address them (hopefully).

Vibe. A framework for stealthy domain reconnaissance

Practical-Reverse-Engineering-using-Radare2. Training Materials of Practical Reverse Engineering using Radare2

windows-kernel-exploits. windows-kernel-exploits Windows平台提权漏洞集合

wssip. Application for capturing, modifying and sending custom WebSocket data from client to server and vice versa.

awesome-pentest. A collection of awesome penetration testing resources, tools and other shiny things

knockpy. Knock Subdomain Scan

house. A runtime mobile application analysis toolkit with a Web GUI, powered by Frida, written in Python.

mastg. The OWASP Mobile Application Security Testing Guide (MASTG) is a comprehensive manual for mobile app security testing and reverse engineering. It describes technical processes for verifying the OWASP Mobile Security Weakness Enumeration (MASWE) weaknesses, which are in alignment with the OWASP MASVS.

bfdecrypt. Utility to decrypt App Store apps on jailbroken iOS 11.x

WaTF-Bank. WaTF Bank - What a Terrible Failure Mobile Banking Application for Android and iOS

replicator. Burp extension to help developers replicate findings from pen tests

AutoSploit. Automated Mass Exploiter

Metasploit_termux. Ruby

Responder. Responder is a LLMNR, NBT-NS and MDNS poisoner, with built-in HTTP/SMB/MSSQL/FTP/LDAP rogue authentication server supporting NTLMv1/NTLMv2/LMv2, Extended Security NTLMSSP and Basic HTTP authentication.

bytecode-viewer. A Java 8+ Jar & Android APK Reverse Engineering Suite (Decompiler, Editor, Debugger & More)

geth-vanitygen. Ethereum address generator with specific prefix or suffix.

iProxy. Let's you connect your laptop to the iPhone to surf the web.

frida-scripts. A collection of my Frida instrumentation scripts to reverse engineer mobile apps and more.

passionfruit. [WIP] Crappy iOS app analyzer

objection. 📱 objection - runtime mobile exploration

misc. Miscellaneous programs/scripts to make your life a little less painful

appmon. Documentation:

secure-mobile-development. A Collection of Secure Mobile Development Best Practices

frida-cycript. Cycript fork powered by Frida.

hopperscripts. Collection of scripts I use in the Hopper disassembler

androguard. Reverse engineering and pentesting for Android applications

needle. The iOS Security Testing Framework

diff-gui. GUI for Frida -Scripts

MASTG-Hacking-Playground. Java

Inspeckage. Android Package Inspector - dynamic analysis with api hooks, start unexported activities and more. (Xposed Module)

android-backup-extractor. Android backup extractor

trustme. Disable certificate trust checks on iOS devices.

ssl-kill-switch2. Blackbox tool to disable SSL certificate validation - including certificate pinning - within iOS and macOS applications.

Introspy-iOS. Security profiling for blackbox iOS

weak_classdump. Cycript real-time classdump . An alternative for encrypted binaries

dumpdecrypted. Dumps decrypted mach-o files from encrypted iPhone applications from memory to disk. This tool is necessary for security researchers to be able to look under the hood of encryption.

AndroidPinning. A standalone library project for certificate pinning on Android.

JustTrustMe. An xposed module that disables SSL certificate checking for the purposes of auditing an app with cert pinning

dvws. Damn Vulnerable Web Services is an insecure web application with multiple vulnerable web service components that can be used to learn real world web service vulnerabilities. NOTE: This project is out of date, please use https://github.com/snoopysecurity/dvws-node

Android-InsecureBankv2. Vulnerable Android application for developers and security enthusiasts to learn about Android insecurities

jadx. Dex to Java decompiler

AndBug. Android Debugging Library

sign. Sign.jar automatically signs an apk with the Android test certificate.

logcat-color. A colorful and highly configurable alternative to the standard "adb logcat" command from the Android SDK

SSLUnpinning_Xposed. Android Xposed Module to bypass SSL certificate validation (Certificate Pinning).

android-ssl-bypass. Black box tool to bypass SSL verification on Android, even when pinning is used.

Android-KillPermAndSigChecks. Bypass signature and permission checks for IPCs

ios-ssl-kill-switch. Blackbox tool to disable SSL certificate validation - including certificate pinning - within iOS Apps

Android-SSL-TrustKiller. Bypass SSL certificate pinning for most applications

ClassNameDeobfuscator. Simple script to parse through the .smali files produced by apktool and extract the .source annotation lines.

AndroBugs_Framework. AndroBugs Framework is an efficient Android vulnerability scanner that helps developers or hackers find potential security vulnerabilities in Android applications. No need to install on Windows.

diva-android. DIVA Android - Damn Insecure and vulnerable App for Android

Androl4b. A Virtual Machine For Assessing Android applications, Reverse Engineering and Malware Analysis

testssl.sh. Testing TLS/SSL encryption anywhere on any port

idb. idb is a tool to simplify some common tasks for iOS pentesting and research

IIS-ShortName-Scanner. latest version of scanners for IIS short filename (8.3) disclosure vulnerability

sqlmap. Automatic SQL injection and database takeover tool

qark. Tool to look for several security related Android application vulnerabilities

Mobile-Security-Framework-MobSF. Mobile Security Framework (MobSF) is an automated, all-in-one mobile application (Android/iOS/Windows) pen-testing, malware analysis and security assessment framework capable of performing static and dynamic analysis.