reternal-quickstart

RE:TERNAL Note: Still under development, only use for testing and do not expose interfaces! Current compose doesn't work yet, only try when you know what you're doing RE:TERNAL is a centralised purple team orchestration service to manage third-party C2 frameworks. Agents are installed on endpoint...

frida

frida This repository contains various Frida scripts for Android application penetration testing. I created this project to demonstrate the capabilities of the Frida dynamic-analysis framework. You can read my "Introduction to Frida" blog post on Medium, where I'm explaining how to use Frida with...

USSH

USSH USSH is a shell protocol and client/server pair built on top of USTP-Secure. It is not a TCP tunnel and does not wrap SSH inside TCP. Status: Beta License: MIT AEAD cipher names chacha20 = CHACHA20POLY1305 aes-256-gcm = AES256GCM aes-128-gcm = AES128GCM Default AEAD cipher: chacha20 Default...

Apepe

📲 Apepe 📲 Enumerate information from an app based on the APK file 🕵️ What is Apepe? 🕵️ Apepe is a project developed to help to capture informations from a Android app through his APK file. It can be used to extract the content, get app settings, suggest SSL Pinning bypass based on the app detected...

hershell

Hershell NOTE: the project has been forked on this repo, check there for any other developments. Hershell is a simple TCP reverse shell written in Go. It uses TLS to secure the communications, and provide a certificate public key fingerprint pinning feature, preventing from traffic interception...

objection

📱objection - Runtime Mobile Exploration objection is a runtime mobile exploration toolkit, powered by Frida, built to help you assess the security posture of your mobile applications, without needing a jailbreak. Supports both iOS and Android. Inspect and interact with container file systems...

apk-mitm

apk-mitm A CLI application that automatically prepares Android APK files for HTTPS inspection Inspecting a mobile app's HTTPS traffic using a proxy is probably the easiest way to figure out how it works. However, with the Network Security Configuration introduced in Android 7 and app developers...

game-of-kingshot-re

got-re — Reverse Engineering: Game of Thrones: Conquest Android Educational project. The goal is to understand how a modern Unity/IL2CPP Android game communicates, how its native protection SDKs work, and how to apply static + dynamic analysis techniques to a real-world APK. What This Is This...

universal-flutter-ssl-pinning

universal-flutter-ssl-pinning Reverse-engineers libflutter.so with PyGhidra to locate the SSL certificate verification function, then emits ready-to-use bypass scripts for both Frida and Renef. How it works 1. PyGhidra loads libflutter.so headlessly and scans all defined strings for sslclient 2...

EUVD-2026-81960

In the Linux kernel, the following vulnerability has been resolved: net/sched: account classifier filter allocations to memcg Allocations in the tc classifier change paths filter objects, per-CPU counters, and per-filter aux data use plain GFPKERNEL without GFPACCOUNT, allowing unprivileged users...

hershell

Hershell Goで書かれたシンプルなTCPリバースシェルです。 TLSを使用して通信を保護し、証明書の公開鍵フィンガープリントピン留め機能を提供することで、トラフィックの傍受を防ぎます。 対応OS: Windows Linux Mac OS FreeBSDと派生OS なぜ？ Meterpreterペイロードは優れていますが、AV製品に検出されることがあります。 このプロジェクトの目的は、複数のシステムで動作するシンプルなリバースシェルを提供することです。 どのように？ Goで書かれているため、目的のアーキテクチャ向けにソースをクロスコンパイルできます。 はじめに & 依存関係...

certPinningVulnerableOkHttp

OkHttp simple-client app vulnerable to CVE-2016-2402 This is a fork of the default simple-client from the okhttp project. Simple-client is a Java app that just does a GET request to https://api.github.com and fetches the names of okhttp's contributors. This fork has been edited so that OkHttp 3.0...

cert-pinning-flaw-poc

cert pinning flaw POC Simple POC script for testing CVE-2016-2402 and similar flaws. Read my blog post for details. This utility will set up a HTTPS server that servers a malicious certificate chain to the client for a specific domain. If traffic from an app with a vulnerable certificate pinning...

objection

📱objection - ランタイムモバイル探索 objection は、Frida を搭載したランタイムモバイル探索ツールキットであり、脱獄を必要とせずにモバイルアプリケーションのセキュリティ状況を評価するために構築されました。 iOS と Android の両方をサポートします。 コンテナファイルシステムの検査と操作。 SSL ピンバイパス。 キーチェーンのダンプ。 ダンプやパッチなどのメモリ関連タスクを実行。 ヒープ上のオブジェクトの探索と操作。 さらに多くの機能... スクリーンショットはwikiでご覧いただけます。 installation インストールは pip3 insta...

Damn-Vulnerable-Bank

Damn Vulnerable Bank Guide: https://rewanthtammana.com/damn-vulnerable-bank/ About application Damn Vulnerable Bank is designed to be an intentionally vulnerable android application. All the details are documented in the guide, here. Upcoming Sessions NoNameCon...

SSLPinDetect

🔒 SSL Pinning Detector SSLPinDetect is a tool for analyzing Android APKs to detect SSL pinning implementations by scanning for known patterns in decompiled smali code. It helps security researchers and penetration testers identify SSL pinning mechanisms used in mobile applications efficiently. 🚀...

reproducer-okio-cve-2023-3635

reproducer-okio-cve-2023-3635 此项目复现的内容 针对 facebook/react-native58148 的复现器： React Native 自带的 packages/react-native/gradle/libs.versions.toml 将 okhttp = "4.9.2" / okio = "2.9.0" 固定为指定版本，而 okio 2.9.0 受 CVE-2023-3635 / GHSA-w33c-445m-f8w7 影响， 该漏洞已在 okio 3.4.0 中修复。 未对任何应用代码进行修改以生成此项目。 ReproducerApp 是...

hershell

Hershell 注意： 该项目已分支至此仓库，请在那里查看其他开发进展。 Hershell 是一个用 Go 编写的简单 TCP 反向 Shell。 它使用 TLS 来保护通信，并提供证书公钥指纹固定功能，防止流量被拦截。 支持的操作系统： Windows Linux Mac OS FreeBSD 及其衍生版本 为什么？ 虽然 meterpreter 负载非常强大，但有时会被防病毒产品检测到。 此项目的目标是获得一个能够在多个系统上工作的简单反向 Shell。 如何实现？ 由于它使用 Go 编写，因此可以针对目标架构交叉编译源代码。 快速入门与依赖 由于这是一个 Go...

EUVD-2026-79192

Http4s is a Scala interface for HTTP services. Prior to 0.23.35 and 1.0.0-M47, WebSocket FrameTranscoder.bodyLength rejects extended payload lengths above Integer.MAXVALUE but permits negative 64-bit lengths. A remote client that completes a WebSocket handshake through an Ember server can send su...

gha-lab-232af4821f

自动化研究产物 — 非上游项目。 本仓库是由自动化工具链构建的一次性实验环境，用于拉瓦尔大学（Université Laval）硕士论文中复现已发表的 GitHub Actions 工作流漏洞。它是 BraveUX/for-the-badge 在提交 409c1fda3477b8dd05f3289926e08d88edd5a664（2021-07-20）时的逐字快照，并依据该项目自身的许可证进行再分发。 上游项目未 参与其中，也从未 成为攻击目标，此处研究的漏洞已公开。本仓库中的每个密钥和变量均为随机生成的虚拟值——不包含任何真实凭据。操作引用和运行器镜像均固定为 2021-07-20...