dvwassl

SSL-enabled Damn Vulnerable Web App Run an SSL-enabled Damn Vulnerable Web App. Why? You might want to test web attack detections over SSL. Build the image root@kitploit: docker build -t dvwassl:latest . Run the container root@kitploit: docker run -d -p 443:443 dvwassl:latest Custom SSL certifica...

Hermes-Proxy

Hermes Proxy Hermes Proxy is a desktop HTTP/HTTPS interception app built with Electron and Vite. It captures requests/responses, lets you replay requests, and export/import HAR files. Features Live traffic table with request/response details Replay requests with editable URL/headers Export all...

RedTeam_toolkit

RedTeam Toolkit Note: Only legal activities should be conducted with this project. Red Team Toolkit is an Open-Source Django Offensive Web-App containing useful offensive tools used in the red-teaming together for the security specialist to identify vulnerabilities. The cybersecurity open-source...

OSweep

OSweep™ Don't Just Search OSINT. Sweep It. Description If you work in IT security, then you most likely use OSINT to help you understand what it is that your SIEM alerted you on and what everyone else in the world understands about it. More than likely you are using more than one OSINT service...

meta-lobbying-and-other-findings

Website: https://tboteproject.com Most Recent Repository: https://tboteproject.com/git/hekate/attestation-findings Help keep the server running! Monero: 451CjP6mgu12yvmDLxLduYYw5Py3Nnb91RwoRYCnhMwhGKM5hxYSaAWapq7CdRQz3qRJbUqqrnYBzW7L4aUt7nhbAYGmLSX Thank you for your support. Meta Platforms:...

django-defender

django-defender .. image:: https://jazzband.co/static/img/badge.svg :target: https://jazzband.co/ :alt: Jazzband .. image:: https://img.shields.io/pypi/pyversions/django-defender.svg :alt: Supported Python versions :target: https://pypi.org/project/django-defender/ .. image::...

Android-Disassembler

Android-Disassembler CodeFactor Analyze malicious app on your phone Maintenance status Maintenance has resumed, but the project is still in a recovery and modernization phase. The baseline now expects initialized git submodules before building. Default open/import/export flows now use SAF-first...

gv_decryptor

Gallery Vault Decryptor Recovery tool for assets encrypted by the Gallery Vault ThinkYeah Android application. It supports the V2 container layout documented below and does not require the Gallery Vault PIN. Only recover data that you own or are authorized to examine. Requirements Python 3.10 or...

mobileAudit

Mobile Audit MobileAudit - SAST and Malware Analysis for Android Mobile APKs A Django web application to perform static analysis and detect malicious content inside Android APKs. The project extracts app metadata, scans source code for weaknesses, and aggregates results SAST findings, best...

DumpBrowserSecrets

DumpBrowserSecrets Extracts browser-stored data such as refresh tokens, cookies, saved credentials, credit cards, autofill entries, browsing history, and bookmarks from modern Chromium-based and Gecko-based browsers Chrome, Microsoft Edge, Firefox, Opera, Opera GX, and Vivaldi. Quick Links Maldev...

LiveContainer

LiveContainer An app launcher that runs iOS apps without actually installing them! Crowdin Project: | Documentation:liveconainer.github.io LiveContainer LiveContainer is an app launcher not emulator or hypervisor that allows you to run iOS apps inside it. Allows you to install unlimited apps 3...

mastg

OWASP Mobile Application Security Testing Guide MASTG The OWASP Mobile Application Security Testing Guide MASTG is a comprehensive manual for mobile app security testing and reverse engineering. It describes technical processes for verifying the OWASP Mobile Security Weakness Enumeration MASWE...

BridgeBlock

BridgeBlock BridgeBlock is a menu bar app that prevents wireless bridging attacks by detecting bridging conditions and taking action. It also has a commandline version for system administrators. Sponsors: Installing GitLab Releases Zips of the both the GUI and CLI versions are provided in the...

React2Shell-CVE-2025-55182-Testing-Environment

Entorno de Pruebas React2Shell CVE-2025-55182 Un entorno de pruebas contenerizado para CVE-2025-55182, una vulnerabilidad crítica 10.0 CVSS de Ejecución Remota de Código en React Server Components. ⚠️ ADVERTENCIA Este entorno es intencionalmente vulnerable y solo debe usarse para: Investigación y...

VulnNodeApp

VulnNodeApp A vulnerable application made using node.js, express server and ejs template engine. This application is meant for educational purposes only. Setup Clone this repository root@kitploit: git clone https://github.com/4auvar/VulnNodeApp.git Application setup: Install the latest node.js...

TwitterSearch2Gephi

TwitterSearch2Gephi TwitterSearch2Gephi is a windows CLI app that lets you collect data from social media and convert it into a CSV data set that can be used with Gephi. Currently it supports Twitter Reddit Youtube WWW domains / URLs More social media platforms and more features for the platforms...

objection

📱objection - Runtime Mobile Exploration objection is a runtime mobile exploration toolkit, powered by Frida, built to help you assess the security posture of your mobile applications, without needing a jailbreak. Supports both iOS and Android. Inspect and interact with container file systems...

ChromeKatz

ChromeKatz ChromeKatz is a solution for dumping sensitive information from memory of Chromium based browsers. As for now, ChromeKatz consists of three projects: 1. CookieKatz - The cookie dumper 2. CredentialKatz - Deprecated.. for now 3. ElevationKatz - Get the decryption key from the elevation...

vuln-bank-mobile

💳 Vulnerable Bank Mobile App Vulnerable Bank is an intentionally insecure mobile application built for security engineers, penetration testers, and mobile app security learners to practice and demonstrate real-world exploitation of insecure coding practices. This mobile app acts as a frontend for...

kanha

Kanha - A web-app pentesting suite written in rust 🦀 Installation ⦾ Subcommands ⦾ Contribute Kanha is a tool that can help you perform, a variety of attacks based on the target domain . With just kanha you can do, Fuzzing, Reverse dns lookup, common http response, subdomain takeover detection and...