Starred repositories
📱 objection - runtime mobile exploration
A tool for testing for certificate validation vulnerabilities of TLS connections made by a client device or an application.
This is the summary of famous book series, You Don't Know JS, by Kyle Simpson.
Woop is a scriptable scratchpad that allows you to run any transformations on your text using the built-in or your self-written .js scripts.
This repository contains all the examples related to a series of tutorials that demonstrate how to use the new Montoya API of Burp Suite to create extensions that will greatly simplify our penteste…
This repository contains all the XSS cheatsheet data to allow contributions from the community.
Misconfig Mapper is a fast tool to help you uncover security misconfigurations on popular third-party services used by your company and/or bug bounty targets!
Use your MacBook's notch like Dynamic Island for temporary storing files and AirDrop
A browser extension that allows you to monitor, intercept, and debug JavaScript sinks based on customizable configurations.
Porch Pirate is the most comprehensive Postman recon / OSINT client and framework that facilitates the automated discovery and exploitation of API endpoints and secrets committed to workspaces, col…
The Android Agent for the Drozer Security Assessment Framework.
Free monospaced font with programming ligatures
A general purpose text editor, small and light.
🚀 Power Your World with AI - Explore, Extend, Empower.
Prevents your Mac from going to sleep.
apk.sh makes reverse engineering Android apps easier, automating some repetitive tasks like pulling, decoding, rebuilding and patching an APK.
Ultimate Tasks Automation Framework for Hackers, DevSecOps, Pentesters, and Bug-bounty hunters!
آموزش رایگان و دائمی فعالسازی آنتن در آیفون ۱۴ و ۱۵ بدون ردگیری و بسته شدن با دو روش مختلف، به همراه سورس کد و فایل ساخت UUID یکتا
The Leading Security Assessment Framework for Android.
🍪 CookieMonster helps you detect and abuse vulnerable implementations of stateless sessions.