Center-Sun
Follow
Lists (17)
apps
cloud_sec
construction
course
good good study , day day updev_sec_ops
env
EXP
ids/hids
java_tools
Lateral Movement
list
listsLLM
mobile security
pentest
Persistence
Persistence toolSAST
vuln_check & fix
A dozen tools to check vuln of leak , face to enterprise securityStars
中文翻译的 Hands-On-Large-Language-Models (hands-on-llms)，动手学习大模型
IoM implant, C2 Framework and Infrastructure
The AWS exploitation framework, designed for testing the security of Amazon Web Services environments.
The new bridge between Burp Suite and Frida!
🔥🔥hooker是一个基于frida实现的逆向工具包。为逆向开发人员提供统一化的脚本包管理方式、通杀脚本、自动化生成hook脚本、内存漫游探测activity和service、firda版JustTrustMe、disable ssl pinning
The FLARE team's open-source tool to identify capabilities in executable files.
Attack surface detector that identifies endpoints by static analysis
The Minimalistic x86/x64 API Hooking Library for Windows
Patch iOS Apps, The Easy Way, Without Jailbreak.
Github Actions based repo to extract files from APKs.
An step by step fuzzing tutorial. A GitHub Security Lab initiative
🔧 Electron based open source toolbox, free integration of rich plug-ins. 基于 electron 的开源工具箱，自由集成丰富插件。
Gram is Klarna's own threat model diagramming tool
📱 objection - runtime mobile exploration
The Mobile Application Security Testing Guide (MASTG) is a comprehensive manual for mobile app security testing and reverse engineering. It describes the technical processes for verifying the contr…
Dependency-Track is an intelligent Component Analysis platform that allows organizations to identify and reduce risk in the software supply chain.
(Sometimes partial) Python re-implementations of the technologies involved in reading various data sources in Chrome-esque applications.
PyInstaller Extractor Next Generation
Collection of community-driven CodeQL query, library and extension packs
Official github repo for SafetyBench, a comprehensive benchmark to evaluate LLMs' safety. [ACL 2024]
The production-scale datacenter profiler (C/C++, Go, Rust, Python, Java, NodeJS, .NET, PHP, Ruby, Perl, ...)
CodeQL zero to hero blog post series challenges
Lightweight static analysis for many languages. Find bug variants with patterns that look like source code.