Java

YouTube Comment Suite is a cross-platform tool designed for aggregating and analyzing comments from multiple YouTube videos, playlists, and channels. Its primary use case is to enhance comment management for creators and researchers by allowing users to search comments based on various criteria and display detailed statistics about comment activity and user engagement. Notable features include support for keyword searches, archiving capabilities for thumbnails and profiles, and the ability to view video context alongside comments.

The Ghidra LX Loader is an extension for Ghidra that facilitates the analysis of LX/LE executable formats, including OS/2 and various DOS styles, by providing comprehensive support for relocation, typed headers, and detailed fixup statistics. Notable features include the ability to manually override base addresses for debugging purposes, label management for fixups and memory pages, and customizable mapping options for image data. This tool is particularly useful for reverse engineers working with legacy executable formats needing robust analysis capabilities.

Nds4j is a Java library designed for reading, modifying, and creating various file types utilized in Nintendo DS games, initially catering to the Pokémon DS hacking community. Currently, it supports several formats such as NDS ROM, NARC, and others with full editing capabilities for certain file types, while additional formats are planned for future support. Notable features include cross-platform compatibility, a focus on byte-for-byte round-tripping, and being written in pure Java, making it accessible for JVM-based applications.

ARSCLib is a Java library designed for the manipulation of Android binary resources, enabling users to read, write, modify, and create resource tables and binary XML files. Its primary use case is to replace aapt/aapt2 with enhanced decoding capabilities, allowing conversion to/from JSON and XML formats for both obfuscated and un-obfuscated resources, making resource management more accessible to developers. Notable features include seamless integration across platforms and the ability to handle unvalidated XML input, which provides flexibility in resource encoding without strict checks.

Ghidra Emotion Engine: Reloaded is an extension for the Ghidra reverse engineering framework specifically designed to support the PlayStation 2 architecture. It enables users to disassemble and decompile Emotion Engine-specific instruction sets, recover data types and functions from ELF files, and import PCSX2 save states. Notable features include the STABS Analyzer for enhanced debugging capabilities and the MIPS-R5900 Constant Reference Analyzer for improved variable reference handling.

Ghidra Switch Loader is a Ghidra extension designed to support various Nintendo Switch file formats, enhancing reverse engineering capabilities for these files. Its primary use case involves facilitating the analysis and debugging of Nintendo Switch games and applications within the Ghidra development environment. Notable features include compatibility with multiple file formats and straightforward installation via Ghidra's extension management system.

The RevEng.AI Ghidra Plugin integrates with Ghidra to facilitate AI-assisted binary analysis, enabling users to upload binaries for analysis and perform Binary Code Similarity operations. Its notable features include automatic function renaming based on confidence thresholds and the ability to display similar function names, which assist in reverse engineering stripped binaries. This tool is particularly useful for security researchers and software developers involved in binary analysis and reverse engineering tasks.

smali/baksmali is an assembler and disassembler for the dex format utilized by Android's Dalvik Virtual Machine, enabling users to manipulate Android bytecode effectively. It supports comprehensive features of the dex format, including annotations and debugging information, while providing a command line interface for building and testing. The tool is a maintained fork of the original smali project, ensuring ongoing updates and support through Google Maven distribution.

ECD++ is a fork of the Enhanced Class Decompiler (ECD) designed for decompiling Java class files into readable source code. Its primary use case is to assist developers in analyzing and understanding compiled Java applications by providing improved decompilation capabilities. Notable features include support for integration with Eclipse, multiple download sources (GitHub, Jitpack, SourceForge), and regular updates to enhance functionality and performance.

Yentra is a Burp Suite extension designed to streamline collaborative security testing by deduplicating proxy history into a real-time unique request feed and color-coding traffic based on listener ports. Its notable feature, Live Share, enables real-time peer-to-peer sharing of HTTP requests without prior registration, accompanied by robust tools like a Magic Cookie, Match & Replace, and an inline Repeater for enhanced testing efficiency. Additional capabilities include automatic sharing of unique requests, replay options through local proxies, and integration with AI services for exporting requests.

Sonar Bypass is a Node.js script designed to circumvent the Sonar 2.1.x anti-bot verification mechanism for Minecraft servers by mimicking legitimate client behavior through raw socket communication. The tool operates without the need for captcha solving or manual interaction, handling various verification stages by copying the exact interactions of a real player, documented in its accompanying research files. Key features include automated packet responses and support for multiple server environments, making it effective for bypassing bot protections in targeted servers.

JADX MCP Server is a pure-Java Model Context Protocol server that facilitates the reverse engineering of Android APK files utilizing the JADX decompiler. Designed for security researchers and developers, it enables detailed analysis through features such as APK loading, code decompilation, component extraction, and comprehensive manifest analysis, all while maintaining cross-platform compatibility and requiring no external dependencies.

FridaBox is an Android mobile-security research tool that enables authorized dynamic analysis of original APKs within dedicated private virtual environments, eliminating the need for root access or modification of the APKs. Its notable features include the ability to import unmodified APKs for byte-for-byte analysis, provide multiple launch modes (on-device, computer, and clean), and load Frida Gadget at the earliest possible point in the application lifecycle, allowing for precise instrumentation without altering the application's integrity.

Free database schema discovery and comprehension tool

OpenLPX is an anti-packet exploit tool designed for Minecraft servers, focusing on protecting against crash packet exploits, specifically NettyCrasher attacks, without requiring any external dependencies. Key features include a smooth packet limiter with a configurable violation system, advanced packet logging capabilities for analyzing potential exploits, and compatibility with Minecraft mods like Printer and Schematica, ensuring minimal disruption to player experiences. The tool provides detailed configuration options to tailor protection measures while allowing for real-time alerts and server management commands.

DexFile is a library designed for the manipulation of DEX files, enabling users to read, generate, modify, and write these files, which are crucial for Android applications. Key features include support for multiple DEX versions up to 041, the ability to handle ODEX files, and the implementation of advanced instruction sets like expanded jumbo opcodes. This library aims to provide comprehensive functionality for developers working with DEX files in Java applications.

ISTE (Integrated Security Testing Environment) is a comprehensive Burp extension designed to streamline the security testing process for web applications. It offers features such as URL management, note-taking linked to raw logs, progress tracking, and advanced functionalities like repeat request customization and authentication flow handling. Notable capabilities include a request chain management system that automates the execution of multiple requests in sequence, enhancing efficiency in testing scenarios while reducing the complexity of maintaining parameter consistency.

Mixeway Flow is a comprehensive DevSecOps tool that integrates security throughout the software development lifecycle (SDLC) by automating scans for security vulnerabilities across various aspects such as source code, dependencies, infrastructure as code (IaC), and potential secret leaks. Notable features include a unified dashboard for centralized threat management, seamless Git integration with automated scans triggered by webhooks, and an upcoming AI/LLM-powered verification engine to enhance vulnerability validation directly within the source code.

The Snyk Maven Plugin provides automated security testing and monitoring for Maven dependencies, effectively identifying vulnerabilities in your projects. It offers features such as dependency scanning, monitoring for newly disclosed vulnerabilities, and experimental support for static analysis of source code and container image testing. This plugin is designed to integrate seamlessly into Maven builds, enhancing security throughout the software development lifecycle.

Ghidra Device Tree Blob is an extension designed to import Device Tree information into the Ghidra memory map, facilitating the reverse engineering of firmware from proprietary devices that lack published SVD files. Notable features include a straightforward import process through the Ghidra interface and compatibility with Ghidra's extension manager for easy installation. This tool is particularly useful for developers and security researchers working with embedded systems.

Ghidra SVD is a Ghidra plugin designed to import CMSIS SVD (System View Description) files into the Ghidra memory map, facilitating the reverse engineering of firmware for devices that provide SVD files. Its primary use case is enhancing the analysis of hardware-specific memory layouts, which is crucial for embedded systems development and security assessments. Notable features include ease of installation via Ghidra's Extension Manager, automatic memory map updates upon SVD file import, and support for numerous SVD file sources.

Confluence Hack is a tool designed to exploit CVE-2023-22515, enabling the creation of a new administrative user and compromising audit logs in Confluence servers. It features a web-based command shell plugin that allows for executing commands remotely, verified to work on Confluence Server 8.5.1. The repository is intended for educational purposes only and emphasizes ethical use.

TrivySummary is a reporting tool designed to interpret and summarize JSON outputs from Trivy vulnerability scans, facilitating visual and comparative reports for package vulnerabilities. It consolidates vulnerabilities by CVE and provides functionality for generating PDF or JSON reports, comparing scan results over time, and integrating with CI/CD pipelines to enforce security thresholds. Notable features include customizable report generation, integration of EPSS scores for exploitability assessment, and whitelisting capabilities for specific CVEs.

ReARM is a Release Governance Platform that facilitates the management of software releases by providing insights into their composition, security posture, and compliance through the storage and organization of Software Bill of Materials (SBOMs), security artifacts, and vulnerability data. Notable features include support for OCI-compatible storage, adherence to regulatory frameworks, and the introduction of a Product-Component relationship model for enhanced release metadata organization. This tool is particularly useful for organizations aiming to streamline their release processes while ensuring compliance with various security standards.

BinDiff is an open-source binary file comparison tool designed for vulnerability researchers and engineers, enabling them to swiftly identify differences and similarities within disassembled code across various architectures such as x86, ARM, and PowerPC. It facilitates the identification of identical functions, the porting of function names and comments between different binary versions, and highlights changes in function variants, thereby enhancing the efficiency of vulnerability analysis and knowledge transfer. Notable features include support for multiple disassemblers like IDA Pro, Binary Ninja, and Ghidra, alongside a user-friendly visual interface for detailed analysis.

Ghidra is a comprehensive software reverse engineering (SRE) framework developed by the National Security Agency, designed to analyze compiled code across multiple platforms, including Windows, macOS, and Linux. Notable features include disassembly, decompilation, extensive graphing capabilities, and user-customizable scripting options in Java or Python, making it suitable for both manual and automated code analysis. Ghidra supports various processor architectures and executable formats, facilitating deep insights into vulnerabilities and malware investigation in cybersecurity contexts.

A patcher that decompiles WhatsApp APK, patches the smali, recompiles and signs it.

Severed Chains is a tool designed to reverse engineer the classic game Legend of Dragoon into a high-level language, specifically Java, while offering a modding API for customization. The project features a fully functional game engine with no known crashes, comprehensive controller support, and an automatic update mechanism that preserves user data. Users can enhance their gameplay experience through a variety of controller options and GPU preference settings, making the tool suitable for both players and mod developers.

The `ghidra-scripts` repository comprises a collection of scripts designed for Ghidra to enhance reverse engineering and vulnerability research. It features tools that locate insecure function calls, extract pseudocode, and resolve iOS and MIPS syscalls, thereby streamlining the analysis process for security researchers. Compatibility is maintained with Ghidra version 12.0.2.

jd-gui-duo is a dual-function Java decompiler that integrates JD-Core versions 0 and 1, utilizing different algorithms for code analysis. Its primary use case is aiding developers in reverse engineering Java bytecode to recover source code. Notable features include support for the transformer-api, which enables additional decompiler compatibility beyond the original JD-Core implementations.

Apktool is a reverse engineering tool for Android applications that allows users to decode and rebuild APK files, facilitating modification and debugging of smali code. Its primary use case includes enabling localization and feature enhancements of existing applications while maintaining a project-like file structure for ease of use and automation of common tasks. Notable features include support for debugging, a structured file layout, and the ability to modify app resources while respecting copyright laws.

Ghidra MCP Server is a robust Model Context Protocol (MCP) server designed to enhance Ghidra's reverse engineering capabilities by integrating with AI tools and automation frameworks. It features a comprehensive suite of 251 tools, offering extensive write access for various operations such as renaming, typing, and live debugging, along with battle-tested AI workflows for optimized documentation and code handling. Key highlights include production-grade reliability with atomic transactions and reduced API calls for enhanced efficiency.

Ghidra FindCrypt is an auto-analysis module designed for Ghidra to identify and label cryptographic constants within binary files. Its primary use case is to enhance code analysis by automatically recognizing cryptographic algorithms and assigning appropriate labels to found constants, which are prefixed with `CRYPT_` for easy identification. Notable features include integration with the Ghidra API for improved functionality, automatic datatype assignment for recognized constants, and the ability to rerun analyses safely.

Rascal is a meta-programming language designed for constructing and manipulating software artifacts. Its primary use case involves providing tools for parser generation, type checking, and document compilation, making it suitable for developing languages and analysis tools. Notable features include a comprehensive standard library, an integrated development environment support, and compatibility with Maven for streamlined project management.

ReVa is a Ghidra extension that functions as an MCP server to facilitate AI-assisted reverse engineering, leveraging large language models (LLMs) for enhanced interaction with Ghidra's capabilities. It focuses on minimizing context rot and hallucination through a tool-driven approach, providing critical, easily interpretable tools that empower LLMs to perform complex tasks on large binaries and firmware images. Notable features include reporting additional context to guide analysis, integration with other MCP servers for enriched data sourcing, and the ability to handle diverse queries related to reverse engineering tasks.

Trinity is a next-generation Java reverse-engineering tool designed for exploring, understanding, and rewriting bytecode. Key features include an advanced decompiler based on Fernflower, in-place renaming with immediate cross-referencing updates, instant constant searches, and customizable workspaces for project management. Its focus on extensive cross-referencing and built-in refactoring capabilities enhance the analysis and modification of Java applications.

GhidrAssistMCP is a Ghidra extension that delivers an MCP (Model Context Protocol) server, facilitating seamless interaction between AI analysis tools and Ghidra's reverse engineering capabilities via a standardized API. Key features include support for various communication transports, built-in analysis tools, asynchronous task execution, and comprehensive logging to enhance usability and performance in multi-program environments. This extension empowers users to leverage AI-driven insights during the reverse engineering process through a dynamic and configurable interface.

BerylEnigma is a comprehensive CTF and penetration testing toolkit designed to perform a variety of encryption, coding, and text manipulation functions. It features modern and classical cryptographic methods, encoding formats, and practical utilities including image processing and Red Team capabilities such as reverse shell generation and payload conversion. Built with JDK17 and the JAVAFX framework, it aims to assist security professionals and researchers with a wide range of functionalities in a user-friendly interface.

PyCript is a Burp Suite extension designed for encrypting and decrypting HTTP requests, responses, and WebSocket messages, catering to both manual and automated application penetration testing. It enables the creation of custom encryption and decryption logic utilizing multiple programming languages, thus allowing users extensive flexibility for tailored security implementations. Notable features include automatic request encryption, decryption of multiple requests, and the ability to manipulate encrypted traffic seamlessly within Burp Suite.

JWTLens is a comprehensive security scanner for JSON Web Tokens (JWTs) integrated with Burp Suite, designed to automatically detect and test for vulnerabilities across a wide array of JWT attack vectors. It incorporates 56 security checks, enabling both passive analysis and active exploitation tactics, including signature bypasses and algorithm confusion. Key features include a JWT Forge tab for live token editing, a built-in secret extractor to identify hardcoded secrets, and efficient request/response scanning capabilities for thorough JWT vulnerability assessments.

Intigriti Quick Scope (IQS) is a Burp Suite extension that streamlines the project setup process by integrating with the Intigriti Researcher API, allowing users to import target scopes from bug bounty programs seamlessly. Key features include the ability to fetch available programs—including private ones—auto-configure Burp Suite with a single click, and inspect scope requirements like mandatory headers and rate limits. This tool enhances the efficiency of security testing for professionals engaged in bug bounty hunting.

BypassFuzzer is a Java-based Burp Suite extension designed to identify and exploit authorization bypass vulnerabilities, particularly for HTTP status codes 401 and 403. It offers an array of features, including a sweep mode for extensive coverage of proxy history, targeted bypass testing, IDOR and BOLA-style request mutation, and integrated URL validation for security assessments. The tool supports advanced attack vectors with a wide variety of payloads, rate limiting, and dynamic Burp Collaborator integration, making it a comprehensive solution for security professionals focused on authorization testing.

The Aqua Jenkins MicroScanner Plugin facilitates the scanning of Docker builds within Jenkins for OS package vulnerabilities, ensuring the security of containerized applications. It integrates seamlessly into both Freestyle and Pipeline jobs, allowing users to configure vulnerability scans as part of their build process. Notable features include customizable actions for handling high-severity vulnerabilities, detailed scanning output in both console and HTML formats, and ease of setup requiring only Docker installation and token configuration.

Log4J Detector is a scanning tool designed to identify vulnerable versions of the Log4J library, specifically addressing critical CVEs such as CVE-2021-44228 and related vulnerabilities. It meticulously analyzes the entire file system, including nested applications, to locate Log4J instances, even those obscured within complex structures like uber jars. Supporting multiple operating systems, this tool provides detailed reporting on the safety status of detected Log4J versions, facilitating comprehensive vulnerability assessments.

Nuclei is a fast tool for configurable targeted vulnerability scanning based on templates offering massive extensibility and ease of use.

Safelog4j is an instrumentation-based security tool designed to help teams identify, verify, and mitigate the log4shell vulnerability (CVE-2021-45046) without the need for scanning or upgrading log4j. The tool utilizes interactive application security testing (IAST) to confirm exploitability and runtime application self-protection (RASP) to prevent exploitation by disabling the vulnerable JNDI lookup code dynamically. Unlike traditional scanning methods, Safelog4j provides greater accuracy and speed by operating from within the running application context.

SmartCode-Guard is an AI-powered static code analysis tool specifically designed to identify security vulnerabilities in Java source code. It integrates a modular architecture that includes a parser for extracting code structure, a rule engine for detecting common security anti-patterns, and an AI engine for deep semantic analysis, making it highly effective for enforcing secure coding practices and allowing for customization through extensible security rules. Notable features include static rule enforcement and intelligent analysis for preparing code snippets for LLM-based audits.

VISTA (Vulnerability Insight & Strategic Test Assistant) is an AI-driven extension for Burp Suite that enhances security testing through real-time traffic analysis and intelligent vulnerability detection. It offers notable features such as an interactive AI advisor for context-aware testing suggestions, customizable analysis templates, and a comprehensive payload library, enabling pentesters to conduct faster and more systematic assessments. Additionally, VISTA supports multiple AI providers, including OpenAI and Azure, to tailor its guidance to user needs.

OmniStrike is a state-aware security scanning tool for Burp Suite that enables precise and customizable security testing by allowing users to target individual parameters within requests. It features 14 active scanning engines, 10 technology-aware scanners, and session automation capabilities, alongside optional AI analysis for focused vulnerability testing. This tool is designed to facilitate detailed assessments of modern web technologies while maintaining user control over scanning processes and findings management.

RouteVulScan is a passive recursive path probing extension for Burp Suite that leverages the Montoya API to perform low-noise vulnerability detection during web security testing. It automatically scans traffic for hidden endpoints and sensitive files using customizable YAML-based detection rules, allowing users to quickly identify high-value vulnerabilities without the need for manual dictionary management. Key features include automatic path recursion, support for active scanning of individual requests, and a comprehensive rules engine for effective vulnerability assessment.

SILENTCHAIN AI™ - Community Edition is a Burp Suite extension designed for AI-powered passive vulnerability analysis, providing intelligent detection of OWASP Top 10 vulnerabilities and security misconfigurations in real-time HTTP traffic. Notable features include context-aware detection using various AI models, detailed reporting with CWE and OWASP mapping, and robust data privacy measures through automatic sensitive data redaction. The tool enhances traditional security scanning by focusing on real vulnerabilities with zero false positives, making it a significant addition to web application security testing.

Citizen Intelligence Agency (CIA) is a Swedish political intelligence platform designed to enhance democratic transparency and accountability through evidence-based analysis and Open Source Intelligence (OSINT) methodologies. Primarily aimed at monitoring the activities of the Riksdag, Government, and public agencies in Sweden, it features robust data analysis capabilities, a commitment to independence and non-partisanship, and is aligned with Information Security Management Standards (ISMS). Noteworthy attributes include comprehensive documentation, annual reviews, and a strong focus on secure software development practices.

Java Reverse TCP is a versatile tool designed for establishing reverse shell communications with remote hosts using JAR, JSP, and Java files. It operates seamlessly across multiple operating systems, automatically detecting the environment and enabling compatible interactions with `ncat` or `multi/handler`. Notable features include the ability to handle various shell types and user-friendly setup instructions for deploying and utilizing the tool in educational contexts.

Malware APK is a testing and exploitation tool designed for security engineers and bug hunters to create malicious Proof of Concept (PoC) applications for vulnerability testing in Android environments. Notable features include a variety of testing modules for intent injection, task hijacking, and accessibility monitoring, without requiring device rooting. It also supports advanced options like caching intercepted intents and compiling native code for arbitrary code execution, making it a comprehensive utility for penetration testing.

Offensive ONOS is a cybersecurity research tool designed to weaponize ONOS applications, primarily for the detection of Cross App Poisoning Attacks in Software Defined Networks. Notable features include the ability to compile and activate ONOS applications, as well as the generation of ONOS archive files for testing, ultimately contributing to the discovery of vulnerabilities such as CVE-2023-24279 and CVE-2023-30093. This tool is a part of a broader research initiative within the context of a Cybersecurity M.Sc. thesis.

BlackOut is an addon for the Meteor client that enhances gameplay by introducing advanced features such as an upgraded CrystalAura, BedAura, and PacketFly, among others. Its primary use case is to improve user performance and competitiveness in Meteor client-based environments. Notable features include enhanced functionality and ease of installation when integrated with Fabric and Meteor, along with community support via Discord.

The googlephotos-filestorage tool is a Java application that enables the steganographic encoding of files into image data for upload to Google Photos. Its primary use case is to allow users to exploit Google Photos' former unlimited storage policy by converting files into images, thus facilitating file storage and retrieval. Notable features include encoding file data into the RGB channels of pixels, with the ability to expand storage capacity by utilizing the alpha channel.

NTRGhidra is a plugin for Ghidra that serves as a Nintendo DS loader, enabling users to analyze and debug DS software within the Ghidra environment. It supports Ghidra version 12.0.4 and allows for dynamic loading and unloading of overlays, enhancing the tool's functionality for developers working with Nintendo DS applications. Notable features include extension installation for Ghidra and comprehensive build instructions for developers interested in modifying the loader.

Nuclei-plus is an enhanced version of the Nuclei tool designed for high-speed scanning across multiple targets with customizable templates, ensuring zero false positives. It supports various protocols such as TCP, DNS, and HTTP, and includes features like project management, configuration management, and template editing, making it suitable for comprehensive security assessments. The tool further allows internationalization and multiple network engine interfaces, enhancing user flexibility and control in security checks.

ShotDroid v2 is a penetration testing tool designed for Android devices that features file retrieval from device storage, an integrated keylogger with reverse shell capabilities, and the ability to capture images from the device's front camera. Notable functionalities include the option to conceal apps in the file manager, customization of directories and HTML templates for webcam captures, and a focus on educational use within legal boundaries.

Auth Analyzer is a Burp Suite extension designed to identify authorization vulnerabilities within web applications by automating the process of request manipulation and parameter handling. It features advanced capabilities for auto-extracting and replacing session parameters, such as CSRF tokens and cookies, while analyzing the responses for bypass status, enabling users to effectively test various user roles and sessions. The tool streamlines authorization testing through GUI-driven session management, simultaneous role testing, and custom parameter definitions, thus enhancing the efficiency of security assessments.

EgnakeRAT is an advanced remote administration tool (RAT) designed for authorized penetration testing and red team operations on Android devices. It features a fully asynchronous command and control (C2) server utilizing AES-256-CBC encryption for secure communications, along with a real-time web dashboard for device management and various tactical modules such as remote shell access and keylogging. Its use of a length-prefixed JSON protocol and automatic reconnection handling enhances its performance and user experience, making it a robust solution for security researchers.

FACTION is an OWASP project designed to streamline and automate the entire penetration testing and security assessment workflow. It offers features such as real-time collaboration among assessors, customizable report templates, a peer review system for tracking changes, and robust integration capabilities with tools like Burp Suite and various authentication systems. Additionally, it includes a REST API for seamless integration with other platforms, enhancing vulnerability management and team coordination.

Alien is a modular webshell client designed for cybersecurity research and education, providing a flexible post-exploitation framework that integrates with various web technologies through reusable modules. Key features include arbitrary code execution, a file manager, database interaction, SOCKS5 proxying, HTTP traffic obfuscation, and the ability to pivot through webshells for enhanced communication security. The architecture enables advanced capabilities while keeping the core webshell lightweight, making it suitable for authorized penetration testing scenarios.

Neonmarker is an addon for the ZAP (Zed Attack Proxy) framework that enhances the visualization of the History table by applying color coding to entries based on assigned tags or user-defined criteria. Its primary use case is to facilitate the organization and easy identification of different scan results within the ZAP interface. Notable features include customizable color mappings, support for tag-based coloring, and the potential for saving color configurations across sessions and projects.

Damn Vulnerable Bank is an intentionally vulnerable Android application designed to educate users on security flaws in banking apps. Its primary use case is for security professionals and developers to explore various vulnerabilities, such as root detection and insecure storage, by interacting with features like user registration, fund transfers, and transaction history. Notable features include fingerprint and PIN verification for transactions, as well as a gamified approach to discovering hidden vulnerabilities within the app.

Skidfuscator is a production-grade Java obfuscation tool that employs SSA form to enhance and obscure Java bytecode flow while maintaining execution efficiency. Its primary use case is to protect applications from reverse engineering by providing advanced obfuscation techniques, automatic dependency downloading, and an easy-to-configure command-line interface. Notable features include smart recovery, flow obfuscation, and out-of-the-box optimization.

A Simple android remote administration tool using sockets. It uses java on the client side and python on the server side

AndroRAT | Remote Administrator Tool for Android OS Hacking

Android Anti-Emulator

BinAbsInspector: Vulnerability Scanner for Binaries

Burp Bounty (Scan Check Builder in BApp Store) is a extension of Burp Suite that allows you, in a quick and simple way, to improve the active and passive scanner by means of personalized rules through a very intuitive graphical interface.

BurpCrypto is a collection of burpsuite encryption plug-ins, support AES/RSA/DES/ExecJs(execute JS encryption code in burpsuite). 支持多种加密算法或直接执行JS代码的用于爆破前端加密的BurpSuite插件

A Burp Suite extension that integrates OpenAI's GPT to perform an additional passive scan for discovering highly bespoke vulnerabilities and enables running traffic-based analysis of any type.

轻量级DDD正向/逆向业务建模框架，支撑复杂业务系统的架构演化！

🐱‍💻 ✂️ 🤬 CVE-2021-44228 - LOG4J Java exploit - WAF bypass tricks

An android Dex protection shell implementation

一行代码检测XP/调试/多开/模拟器/root

Decompiler from Java bytecode to Java, used in IntelliJ IDEA.

A simple FOFA client written in JavaFX. Made by WgpSec, Maintained by f1ashine.

the fastest and most powerful android decompiler(native tool working without Java VM) for the APK, DEX, ODEX, OAT, JAR, AAR, and CLASS file. which supports malicious behavior detection, privacy leaking detection, vulnerability detection, path solving, packer identification, variable tracking, deobfuscation, python&java scripts, device memory extraction, data decryption, and encryption, etc.

Plugin for JADX to integrate MCP server

Java bytecode editor

HeapDump敏感信息提取工具

80+ Gadgets(30 More than ysoserial). JNDI-Injection-Exploit-Plus is a tool for generating workable JNDI links and provide background services by starting RMI server,LDAP server and HTTP server.

jSQL Injection is a Java application for automatic SQL database injection.

TCP/UDP Non-HTTP Proxy Extension (NoPE) for Burp Suite.

The Free and Open Source app for monitoring your AirPods on Android

The modern Java bytecode editor

红蓝对抗以及护网相关工具和资料，内存shellcode（cs+msf）和内存马查杀工具

Java RMI Vulnerability Scanner

🧩 Patches for ReVanced

JAVA安全SDK及编码规范

Free database schema discovery and comprehension tool

Android virtual machine and deobfuscator

A CAT called tabby ( Code Analysis Tool )

A proof-of-concept tool for generating payloads that exploit unsafe Java object deserialization.