Android Application Identifier for Packers, Protectors, Obfuscators and Oddities - PEiD for Android

Android virtual machine and deobfuscator

InlineExecute-Assembly is a proof of concept Beacon Object File (BOF) that allows security professionals to perform in process .NET assembly execution as an alternative to Cobalt Strikes traditiona…

Defeat Java packers via Frida instrumentation

Obfu[DE]scate is a de-obfuscation tool for Android APKs that uses fuzzy comparison logic to identify similarities between functions, even if they have been renamed as part of obfuscation. It compar…

Fix Play Integrity verdicts.

An easy-to-learn/use static analysis framework for Java

Cert-Fixer is a Magisk module that copies all the user certificates to system certificate store.

🔐 Run frida-server on boot with Magisk, always up-to-date

PHPGGC is a library of PHP unserialize() payloads along with a tool to generate them, from command line or programmatically.

Flipper Zero Unleashed Firmware

AWS API Gateway management tool for creating on the fly HTTP pass-through proxies for unique IP rotation

Refactored & improved CredKing password spraying tool, uses FireProx APIs to rotate IP addresses, stay anonymous, and beat throttling

Utility for creating ZipSlip archives

Tool to find code cave in PE image (x86 / x64) - Find empty space to place code in PE files

Dumping DPAPI credz remotely

NTFS parsing library in C#. Allows one to parse and read NTFS structures on disk.

Django MCP Server is a Django extensions to easily enable AI Agents to interact with Django Apps through the Model Context Protocol it works equally well on WSGI and ASGI

bespoke tooling for offensive security's Windows Usermode Exploit Dev course (OSED)

Finding and classifying ROP gadgets from rp++ output file with some regex and a CLI.

OSED helper, organize data generated by RP++

This tool lets you search your gadgets on your binaries to facilitate your ROP exploitation. ROPgadget supports ELF, PE and Mach-O format on x86, x64, ARM, ARM64, PowerPC, SPARC, MIPS, RISC-V 64, a…

Corelan Repository for mona.py

BloodyAD is an Active Directory Privilege Escalation Framework

Ask a TGS on behalf of another user without password

Exploitation paths allowing you to (mis)use the Windows Privileges to elevate your rights within the OS.

KrbRelayUp - a universal no-fix local privilege escalation in windows domain environments where LDAP signing is not enforced (the default settings).

Docker Enumeration, Escalation of Privileges and Container Escapes (DEEPCE)