XSS'OR - Hack with JavaScript.

A runtime mobile application analysis toolkit with a Web GUI, powered by Frida, written in Python.

Vajra is a highly customizable target and scope based automated web hacking framework to automate boring recon tasks and same scans for multiple target during web applications penetration testing.

Tool Information Gathering & social engineering Write By [Python,JS,PHP]

⚡Chrome extension allows you to create lists of Google and Github dork to open multiple tabs with one click, import "scope/out of scope" from #HackerOne #Bugcrowd #Intigriti ...

Brute Force Tool to Crack Wi-Fi Passwords (Android Rooted Only)

its like a tricorder, for your wireless world.

its like a tricorder, for your wireless world.

Cosmos Market Apps Build By TinyActive

Advanced JWT decoding & cracking toolkit with a user-friendly UI for security testing

Shannon-Uncontained. A Docker-free, black‑box‑first fork that treats AI as a fallible witness rather than an oracle: treats uncertainty as a first class citizen via EQBSL epistemic bookkeeping, and agentic recon/analysis/synthesis tuned for “paste url -> pwn box -> ???? -> profit”

Pentest Report Manager

Google Chrome Extension automates testing fundamental Web Problems via Chrome

Android Pentest Framework

JSpider is a smart crawler for hidden endpoints. It crawls and extracts hidden API endpoints and URLs from JavaScript files and HTML source code — all directly in your browser.

A HackBar for google chrome/firefox browser. Small tool for pentesting websercurity.

A collection of utility scripts leveraging the Corellium API and designed to facilitate mobile pentesting.

⭐⭐⭐⭐⭐ 识别网站上使用的技术和组件，收集网站上泄露的敏感信息。

Self-deployable file hosting service for red teamers, allowing to easily upload and share payloads over HTTP and WebDAV.