Sebas Claim this profile

An experimental rootkit for Android

An experimental tapjacking framework for Android platform

PoC used to exploit some Firefox vulnerabilities

Android Data Extractor Lite

Solutions for Ethernaut CTF using Brownie

No description.

AAMO: Another Android Malware Obfuscator

SELinux Policy Analysis Tools v3

No description.

Create a virtual device for testing purposes on Android devices

Blackphone BP1 Kernel

Cybersecurity oriented awesome list

Smali Control Flow Graph's

SSLStrip for Android

unix-like reverse engineering framework and commandline tools

Released in accordance with GPL licensing.

a quick open/close/ioctl/read/write/free function hooker

This is an updated version of Dendroid with a working panel & APK, I hope that everyone enjoys this download.

No description.

Open source Android Forensics app and framework

Root Tools

Fork from http://redmine.poppopret.org/projects/suterusu. An LKM rootkit targeting Linux 2.6/3.x on x86 and ARM. Supports privilege escalation, process hiding, connection hiding (TCP/UDP v4/v6), file/directory hiding, keylogging, and screen unlocking. Under active development.

Google Play Unofficial Python API

A single archive of public exploit PoCs and vulnerability research writeups. At the time I post these, none have been reported. Feel free to report them yourself and take credit for the CVE if handed out lulz. Please do not abuse these. I do this so to allure people into the field, and I've always found this is the most efficient way.

Security through scrutiny

Goose Swift proof-of-concept README

Autonomous CTF solver that races multiple AI models in parallel. 1st place BSidesSF 2026.

wooyun-legacy skill for claude code

No description.

Offensive security toolkit for Claude Code

A list of public penetration test reports published by several consulting firms and academic security groups.

Summaries, transcripts, key points, and other useful insights from AWS re:inforce 2025 talks for those of us who don't have time to watch every presentation!

Indicators of Compromise from Amnesty International's cyber investigations

No description.

No description.

XBOW Validation Benchmarks

Fetches javascript file from a list of URLS or subdomains.

Cloud-native SIEM for intelligent security analytics for your entire enterprise.

A pre-jailbreak library for devices running iOS 12 - 14.

Reference notes for Attacking and Defending Generative AI presentation

A vulnerable Android application that shows simple examples of vulnerabilities in a ctf style.

An iOS app that lets you practice your Frida skills

The Black Hat GraphQL Book Repository

No description.

App for learnfrida.info

Repository dedicated to storing a multitude of iOS/macOS/OSX/watchOS crash bugs. Some samples need to be viewed as raw in order to see the Unicode. Please do not intentionally abuse these exploits.

A playground for run-time iOS app inspection

No description.

Azure Security Resources and Notes

A Pentest Collaboration and Reporting Tool

Open source templates you can use to bootstrap your security programs

A collection of vulnerable ARM binaries for practicing exploit development

Binder Trace is a tool for intercepting and parsing Android Binder messages. Think of it as "Wireshark for Binder".

Short deep dive into Threat Hunting on AWS

External Playbooks for Public Access

TInjA is a CLI tool for testing web pages for template injection vulnerabilities and supports 44 of the most relevant template engines for eight different programming languages.

The Template Injection Playground allows to test a large number of the most relevant template engines for template injection possibilities.

damn-exploitable-android-app-apk

Comprehensive parsing script for grepable Nmap output files. Provides a summary table, split hosts files, and URLs for web and SMB hosts.

No description.

Playground (and dump) of stuff I make or modify for the Flipper Zero

Oversecured Vulnerable Android App

My very personal and opinionatedly organized infosec/cybersec sources in one OPML file

iOS 15.0-15.7.1 (semi-)tethered checkm8 "jailbreak"

A generative art library for NFT avatar and collectible projects.

No description.

No description.

Build your own personal Digital Garden effortlessly with this Hugo theme

Periodic cyber security newsletters that capture the latest news, summaries of conference talks, research, best practices, tools, events, vulnerabilities, and analysis of trending threats and attacks

cve-search is a tool to import CVE (Common Vulnerabilities and Exposures) and CPE (Common Platform Enumeration) into a MongoDB to facilitate search and processing of CVEs.

OctoPrint provides a responsive web interface for controlling a 3D printer (RepRap, Ultimaker, ...).

Custom pentesting tools

A tiny and cute URL fuzzer

This repository contains all the supplement material for the book "The art of sub-domain enumeration"

This repository contains all the material from the talk "Esoteric sub-domain enumeration techniques" given at Bugcrowd LevelUp 2017 virtual conference

Fast web fuzzer written in Go

Leverages publicly available datasets from Google BigQuery to generate content discovery and subdomain wordlists

No description.

An IDA Toolkit for analyzing iOS kernelcaches.

Linux Exploit Suggester; based on operating system release number

No description.

A collection of AWS penetration testing junk

The Mobile Security Testing Guide (MSTG) is the ultimate guide for mobile app security testing and reverse engineering.

3D reproduction of TSA Master keys

iOS RCS (Hackedteam fork)

An xposed module that disables SSL certificate checking for the purposes of auditing and app with cert pinning

Some tools for testing USB devices

No description.

Colored logcat script which only shows log entries for a specific application package.

No description.

Collection of idapython scripts for dealing with the iOS kernelcache

PoC binary file of FakeID,with some source code

Android Loadable Kernel Modules - mostly used for reversing and debugging on controlled systems/emulators

Dex manipulation library

Google Wallet PIN Cracking App

No description.

The www.droidsec.org Web Site!

RuCTFE 2013

Contains many different ways to identify hostile environments.

A set of templates for documenting threat intelligence

Dumps decrypted mach-o files from encrypted iPhone applications from memory to disk. This tool is necessary for security researchers to be able to look under the hood of encryption.

No description.

CVE-2013-2094 exploit for android

Remote Administration Tool for Android devices

Protobuf metadata extraction tool

a set of tools/scripts to obfuscate and manipulate dex files

Application to easily download and install radare2 on android devices