agent-opfor

Open-source adversary emulation for AI agents, LLM apps, and MCP servers. Test your AI like a real attacker would — from your CLI, your IDE, or a browser extension that anyone on your team can use. Website · Docs · GitHub · ·...

mas-crackmes

OWASP MAS Crackmes 이 저장소에는 OWASP MAS Crackmes의 소스 코드가 포함되어 있습니다. MAS Crackmes일명 UnCrackable Apps에 오신 것을 환영합니다. 모바일 리버스 엔지니어링 챌린지 모음입니다. 이 챌린지들은 OWASP MASTG 전반에 걸쳐 예제로 사용됩니다. 물론 재미로 풀어보셔도 됩니다. ⚠️ 스포일러 주의: 이 저장소를 책임감 있게 사용하세요. 소스 코드를 읽으면 실제 crackmes를 크래킹하는 재미를 망칠 수 있습니다 ;-...

MasterHttpRelayVPN-RUST

mhrv-rs — bypass censorship for free, with your own Google account A small program that runs on your computer and lets you visit blocked websites for free, using a Google Apps Script you deploy in your own free Google account. Your ISP only sees encrypted traffic to — it can't tell what you're...

masvs

OWASP 모바일 애플리케이션 보안 검증 표준 MASVS OWASP 모바일 애플리케이션 보안 검증 표준MASVS은 모바일 앱을 위한 기본 보안 및 개인정보 보호 요구사항을 수립하며, 이 요구사항은 OWASP 모바일 보안 약점 목록MASWE에 세분화되어 있고 OWASP 모바일 애플리케이션 보안 테스트 가이드에서 테스트됩니다. 다음과 같은 용도로 사용할 수 있습니다: 지표로서 — 개발자와 애플리케이션 소유자가 기존 모바일 앱을 비교할 수 있는 보안 표준을 제공합니다. 지침으로서 — 모바일 앱 개발 및 테스트의 모든 단계에서 지침을...

droidlysis

DroidLysis DroidLysis is a pre-analysis tool for Android apps : it performs repetitive and boring tasks we'd typically do at the beginning of any reverse engineering. It disassembles the Android sample, organizes output in directories, and searches for suspicious spots in the code to look at. The...

mcp-attack-detection-sentinel

MCP攻撃検出 — Sentinel Research Lab MCP（Model Context Protocol）攻撃パターン に関するSentinel検出リサーチ：MCP関連イベント後の異常なIDアクセス、ツール定義の改ざん、リソースをまたぐアクセス、および侵害後の可能性のある動作。ルールはエージェント型アプリケーション向けOWASP Top 10（2026年版）に対応付けられています。 公開ステータス： このリポジトリには現在、公開されたNine...

OWASP-VWAD

OWASP-VWAD 2024-10-26 ⚠️ このリポジトリは終了に向けて縮小中です。今後の作業は www-project-vulnerable-web-applications-directory を介して行ってください。 OWASP Vulnerable Web Applications Directory Project（VWAD、https://owasp.org/www-project-vulnerable-web-applications-directory/）は、現在利用可能な既知の脆弱性を持つWebアプリケーションの包括的かつ適切にメンテナンスされたレジストリです。...

flatpak

Flatpak is a system for building, distributing, and running sandboxed desktop applications on Linux. See https://flatpak.org/ for more information. Flatpak is available in the package repositories of most Linux distributions and can be installed from there. See https://flatpak.org/setup/ for quic...

cloudquery

CloudOps, without the chaos CloudQuery is a cloud asset inventory built for platform teams. Sync your cloud infrastructure metadata into your data warehouse, powering insights and automation. Unify data and provide context across AWS, Azure, GCP, and 70+ cloud and SaaS sources such as Wiz, Finout...

pomerium

Pomerium は、アイデンティティとコンテキストを認識するリバースプロキシです。Pomerium は、企業 VPN なしで、内部 Web アプリやその他のサービスへの安全なクライアントレス接続を構築します。 Pomerium は次のとおりです。 より簡単 : クライアントレスアクセス により。 より高速 : トンネル不要で、アプリやサービスが配置されている場所にデプロイ されるため。 より安全 : 実行が許可される前に すべてのアクションが検証される ため。 業務に最適 : コンテキストを認識したアクセス のためにすべてのデータを統合することで、組織のニーズに合わせて調整されます。...

wig

wig - WebApp Information Gatherer wig is a web application information gathering tool, which can identify numerous Content Management Systems and other administrative applications. The application fingerprinting is based on checksums and string matching of known files for different versions of...

AppEnumFix

CVE-2025-31207 を修正する脱獄用ツイーク。このバグにより、サンドボックス化されたアプリケーションがユーザーのインストール済みアプリを列挙できてしまいます。 Apple が iOS 18.5 で修正 22F5053j / iOS 18.5 Beta 3 差分...

mhr-cfw

MHR-CFW MITM Domain-Fronted HTTP Relay + Cloudflare Worker Exit English| Persian ---|--- How It Works 1 - GAS + Cloudflare Worker Exit root@kitploit: Client - Local Relay - Google/CDN Front - GAS Google Apps Script Relay - Cloudflare Worker - Exit | +- Shows www.google.com to network DPI filter 2...

apk.sh

🕹️ apk.sh apk.sh is a Bash script that makes reverse engineering Android apps easier, automating some repetitive tasks like pulling, decoding, rebuilding and patching an APK. Features apk.sh basically uses apktool to disassemble, decode and rebuild resources and some bash to automate the frida...

AndroBugs_Framework

AndroBugs Framework AndroBugs Framework is an Android vulnerability analysis system that helps developers or hackers find potential security vulnerabilities in Android applications. No splendid GUI interface, but the most efficient less than 2 minutes per scan in average and more accurate. Versio...

ApkAnalyser

Copyright C 2012 Sony Mobile Communications AB This file is part of ApkAnalyser. Licensed under the Apache License, Version 2.0 the "License"; you may not use this file except in compliance with the License. You may obtain a copy of the License at root@kitploit:...

MasterHttpRelayVPN

MasterHttpRelayVPN Youtube safe search and live streaming are now Bypassed & Working by default. so you don't need youtubeviarelay or Cloudflare / VPS exitnode for it. Language: English | Persian / فارسی نسخه فارسی با AI ایجاد شده. ترجیحا از نسخه انگلیسی استفاده کنید. Telegram Channel 📣:...

Odoo Apps - Cross-Site Scripting via Prototype Pollution

jquery-bbq 1.2.1 contains a prototype pollution caused by improperly controlled modification of object prototype attributes, letting malicious users inject properties into Object.prototype, exploit requires malicious user interaction. id: CVE-2021-20086 info: name: Odoo Apps - Cross-Site Scriptin...

ZimaOS <= v1.2.4 - Sensitive Information Disclosure

ZimaOS is a fork of CasaOS, an operating system for Zima devices and x86-64 systems with UEFI. In version 1.2.4 and all prior versions, the API endpoints in ZimaOS, such as http:///v1/users/image?path=/var/lib/casaos/1/apporder.json and http:///v1/users/image?path=/var/lib/casaos/1/system.json,...

qark

Quick Android Review Kit This tool is designed to look for several security related Android application vulnerabilities, either in source code or packaged APKs. The tool is also capable of creating "Proof-of-Concept" deployable APKs and/or ADB commands, capable of exploiting many of the...