gguowang Goto Github PK

0day

各种CMS、各种平台、各种系统、各种软件漏洞的EXP、POC 该项目将不断更新

3pdroid-public

3PDroid is a Python tool for verifying if an Android app complies with the Google Play privacy guidelines.

allthingsandroid

A Collection of Android Pentest Learning Materials

androguard

Reverse engineering, Malware and goodware analysis of Android applications ... and more (ninja !)

android-

文档

android-reports-and-resources

A big list of Android Hackerone disclosed reports and other resources.

android-webviews-fileaccess

Samples apps for the scenarios described in the article.

androidmalwarewithn-gram

提取安卓软件的n-gram特征

andseccxql

Android Security Bug Queries for CheckMarx

apkleaks

Scanning APK file for URIs, endpoints & secrets.

apkshelling

脱Apk使用360加固、梆梆加固、腾讯乐固、百度加固免费版加的壳

awesome-bugbounty-tools

A curated list of various bug bounty tools

awvs14-scan

针对 Acunetix AWVS扫描器开发的批量扫描脚本，支持log4j漏洞专项，支持联动xray、burp、w13scan等被动批量

bane

this is a python module that contains functions and classes which are used to test the security of web/network applications. it's coded on pure python and it's very intelligent tool ! It can easily detect: XSS (relected/stored), RCE (Remote Code/Command Execution), SSTI, SSRF, CORS Misconfigurations, File Upload, CSRF, Path Traversal,.... Also, it have DDoS capabilities, and variety of information gathering tools packed inside ! Aside of many other useful functionalities.

bazaar

Android security & privacy analysis for the masses

bug-bounty-101

Happy Hunting

bug-bounty-methodology

These are my checklists which I use during my hunting.

cf

Cloud Exploitation Framework 云环境利用框架，方便安全人员在获得 AK 的后续工作

codeanalysis

Static Code Analysis

ctf-all-in-one

CTF竞赛权威指南(Pwn篇)

ctf-mobile

我在学习安卓逆向过程中做的一些安卓逆向相关的CTF题目以及写的题解

cve-2021-44228-apache-log4j-rce

Apache Log4j 远程代码执行

datacon2020

DataCon2020大数据安全分析大赛，🏆【方向五】恶意代码分析冠军源码。

dictionary-of-pentesting

Dictionary collection project such as Pentesing, Fuzzing, Bruteforce and BugBounty. 渗透测试、SRC漏洞挖掘、爆破、Fuzzing等字典收集项目。

evilarc

Create tar/zip archives that can exploit directory traversal vulnerabilities

exphub

Exphub[漏洞利用脚本库] 包括Webloigc、Struts2、Tomcat、Nexus、Solr、Jboss、Drupal的漏洞利用脚本，最新添加CVE-2020-14882、CVE-2020-11444、CVE-2020-10204、CVE-2020-10199、CVE-2020-1938、CVE-2020-2551、CVE-2020-2555、CVE-2020-2883、CVE-2019-17558、CVE-2019-6340

fakerandroid

A tool translate a apk file to stantard android project include so hook api and il2cpp c++ scaffolding when apk is a unity il2cpp game. Write code on a apk file elegantly.

frida-all-in-one

《FRIDA操作手册》by @hluwa @r0ysue

frida-protobuf

frida-snippets

Hand-crafted Frida examples