A collection of awesome one-liner scripts especially for bug bounty tips.

./dsc_extractor dyld_shared_cache_arm64 arm64

Malware As A Service

A quick and dirty python script to embed a Metasploit generated APK file into another APK for fun.

Azure Red Team tool for graphing Azure and Azure Active Directory objects

Cloud Auditor

Basics on commands/tools/info on how to assess the security of mobile applications

Jailbreak for A8 through A11, T2 devices, on iOS/iPadOS/tvOS 15.0, bridgeOS 5.0 and higher.

Cross-platform instrumentation and introspection library written in C

linWinPwn is a bash script that streamlines the use of a number of Active Directory tools

This a notes/handbook i made and gathered from a great resources on the internet. It consist of a very detailed cheat sheets and useful commands that every pentester use on a daily basis.

SandBox-Dumper makes use of multiple private libraries to provide exact locations of the application sandbox, application bundle and some other interesting information

Display and control your Android device

TREVORspray is a modular password sprayer with threading, clever proxying, loot modules, and more!

Penelope Shell Handler

find hardcoded strings from source code

This repository houses some of the small scripts I had used to quickly document throughout my OSCP course. This was referenced on YouTube, and should be made available to others!

An automatic obfuscation tool for Android apps that works in a black-box fashion, supports advanced obfuscation features and has a modular architecture easily extensible with new techniques

Mobile Hacker's Weapons / A collection of cool tools used by Mobile hackers. Happy hacking , Happy bug-hunting

Docker security analysis & hacking tools

A couple of methods for detecting Frida on Android.

Web recon script. No need to fear, sumrecon is here!

The Mobile App Pentest cheat sheet was created to provide concise collection of high value information on specific mobile application penetration testing topics.

Hand-crafted Frida examples

📱 objection - runtime mobile exploration

PEASS - Privilege Escalation Awesome Scripts SUITE (with colors)

Transparent proxy server that works as a poor man's VPN. Forwards over ssh. Doesn't require admin. Works with Linux and MacOS. Supports DNS tunneling.

The "bot" component of the PlugBot project