SpringBoot 相关漏洞学习资料，利用方法和技巧合集，黑盒安全评估 check list
- springboot
- springboot-actuator-rce
- rce
- spring-boot-vulnerability
Repository Index
54,641 visible repositories in the index
73–96 of 305 · Most stars
The SMS Gateway for Android™ app enables sending and receiving SMS messages through an API that can be accessed directly on the device or via a cloud server when direct device access is not possible.
Automated Αll-in-One OS command injection exploitation tool.
- python
- command-injection
- detection
- exploitation
Github.com/CryptoSignal - Trading & Technical Analysis Bot - 4,100+ stars, 1,100+ forks
LIEF - Library to Instrument Executable Formats (C++, Python, Rust)
- reverse-engineering
- malware-analysis
- binary-analysis
- parser
The ultimate Python library in building OAuth, OpenID Connect clients and servers. JWS, JWE, JWK, JWA, JWT included.
🤖 A CLI application that automatically prepares Android APK files for HTTPS inspection
Automatically builds GenP executables from source
- adobe
- adobe-creative-cloud
- genp
- patcher
Android virtual machine and deobfuscator
- deobfuscation
- java
- optimization
- android
Free, open-source check for traces of mercenary spyware (Pegasus, Predator, Graphite, Candiru and more) on computers, Android phones and iPhone backups. Double-click apps for Windows, Mac and Linux, in 27 languages.
The Leading Security Assessment Framework for Android.
- drozer
- android
- security
- pentesting
This tool lets you search your gadgets on your binaries to facilitate your ROP exploitation. ROPgadget supports ELF, PE and Mach-O format on x86, x64, ARM, ARM64, PowerPC, SPARC, MIPS, RISC-V 64, and RISC-V Compressed architectures.
- reverse-engineering
- rop
- rop-exploitation
- rop-gadgets
A python script that finds endpoints in JavaScript files
- infosec
- endpoints
Digging Deeper....
- incident-response
- forensics-investigations
- inventory-management
- endpoint-security
Server-Side Template Injection and Code Injection Detection and Exploitation Tool
Decrypted content of eqgrp-auction-file.tar.xz
- exploits
- shadowbrokers
- equationgroup
- hacking
Network recon framework. Build your own, self-hosted and fully-controlled alternatives to Shodan / ZoomEye / Censys and GreyNoise, run your Passive DNS service, build your taylor-made EASM tool, collect and analyse network intelligence from your sensors, and much more! Uses Nmap, Masscan, Zeek, p0f, ProjectDiscovery tools, etc.
- bro
- scans
- nmap
- network
UNIX-like reverse engineering framework and command-line toolset.
- reverse-engineering
- program-analysis
- security
- exploitation
Android Reverse-Engineering Workbench for VS Code
- apktool
- apk-decompiler
- apk-editor
- smali
OpenID Certified™ OAuth 2.0 Authorization Server implementation for Node.js
- openid
- oidc
- openid-provider
- openid-connect
Cloud Security Posture Management (CSPM)
Tool to look for several security related Android application vulnerabilities
Automated NoSQL database enumeration and web application exploitation tool.
- nosql
- nosql-databases
- penetration-testing
- scanner
Chrome extension and Express server that exploits keylogging abilities of CSS.