Repository Index

A PoC that exploits a vulnerability to bypass the Xiaomi HyperOS community restrictions of BootLoader unlocked account bindings.

• android
• android-development
• bootloader
• bootloader-unlock

AI powered OSINT engine to discover and map 7,700+ social media identities across the web

• osint
• python
• linux
• python3

IntelOwl: manage your Threat Intelligence at scale

• security-tools
• python
• threat-intelligence
• ioc

Seatbelt is a C# project that performs a number of security oriented host-survey "safety checks" relevant from both offensive and defensive security perspectives.

• csharp
• situational-awareness

Generates x86, x64, or AMD64+x86 position-independent shellcode that loads .NET Assemblies, PE files, and other Windows payloads from memory and runs them with parameters

Open-source, cross platform Qt6 based IDE for reverse-engineering Android application packages. It features a friendly IDE-like layout including code editor with syntax highlighting support for *.smali code files.

• android
• reverse-engineering
• smali
• apk-studio

This project hosts security advisories and their accompanying proof-of-concepts related to research conducted at Google which impact non-Google owned code.

A community-driven, open-source project to share detection logic, adversary tradecraft and resources to make detection development more efficient.

• threat-hunting
• sysmon
• hunting-campaigns
• hypothesis

Enterprise-grade Shopify Admin API authentication adapter — OAuth 2.0 Client Credentials Grant with automatic token refresh.

• authentication
• client-credentials
• httpx
• oauth2

Android virtual machine and deobfuscator

• deobfuscation
• java
• optimization
• android

An enterprise friendly way of detecting and preventing secrets in code.

C++ python bytecode disassembler and decompiler

• python
• decompiler
• disassembler
• cxx

SocialBox is a Bruteforce Attack Framework [ Facebook , Gmail , Instagram ,Twitter ] , Coded By Belahsan Ouerghi Edit By samsesh for termux on android

• hacking
• hack
• bruteforce
• brute-force

security tips for startups

• security-considerations
• startup
• security
• chinese

Cerbos is an open-core authorization management platform for authorizing every identity and governing every action across applications, gateways, workloads, and AI agents.

• go
• golang
• security
• policy

Orchestrate end-to-end encryption, cryptographic identities, mutual authentication, and authorization policies between distributed applications – at massive scale.

• messaging
• authentication
• key-management
• identity

Volatility 3.0 development

• digital-investigation
• forensics
• incident-response
• malware

The Deepfake Offensive Toolkit

Commonly used data structures for Swift

• collection
• container
• deque
• dequeue

PyInstaller Extractor

• python
• pyinstaller
• decompile
• reverse-engineering

💀 Generate malicious PDF test files for testing phone-home callbacks, SSRF, XSS, NTLM credential theft, and data exfiltration in PDF viewers, converters, and web applications. Can be used with Burp Collaborator or Interact.sh

• penetrationtesting
• pentesting
• pentesting-tools
• penetration-testing

Analyze ELF binaries like a boss 😼🕵️‍♂️

• analysis
• binary
• binary-data
• dynamic-analysis

TranslatedA comprehensive network security detection and operations tool, designed for fast asset discovery, identification, and detection, building a basic asset information library, and helping the client-side (Party A) security team or security operations personnel effectively reconnoiter and search assets and find existing weak points and attack surfaces.

A python script that finds endpoints in JavaScript files

• infosec
• endpoints