ikkisoft

ikkisoft's Stars

• frohoff/ysoserial

  A proof-of-concept tool for generating payloads that exploit unsafe Java object deserialization.

  Language:Java7.9k2131061.8k

• ntop/ntopng

  Web-based Traffic and Security Network Traffic Monitoring

  Language:Lua6.3k1578.2k657

• linkedin/qark

  Tool to look for several security related Android application vulnerabilities

  Language:Python3.2k134231644

• welk1n/JNDI-Injection-Exploit

  JNDI注入测试工具（A tool which generates JNDI links can start several servers to exploit JNDI Injection vulnerability,like Jackson,Fastjson,etc）

  Language:Java2.6k277726

• Bubka/2FAuth

  A Web app to manage your Two-Factor Authentication (2FA) accounts and generate their security codes

  Language:PHP2.4k22312153

• cujanovic/SSRF-Testing

  SSRF (Server Side Request Forgery) testing resources

  Language:Python2.4k731482

• Escapingbug/awesome-browser-exploit

  awesome list of browser exploitation tutorials

  2.1k804289

• ptoomey3/Keychain-Dumper

  A tool to check which keychain items are available to an attacker once an iOS device has been jailbroken

  Language:Objective-C1.4k5751299

• globaleaks/globaleaks-whistleblowing-software

  GlobaLeaks is a free and open-source whistleblowing software enabling anyone to easily set up and maintain a secure reporting platform.

  Language:Python1.3k803.4k278

• Simpsonpt/AppSecEzine

  AppSec Ezine Public Repository.

  1.1k283497

• anestisb/vdexExtractor

  Tool to decompile & extract Android Dex bytecode from Vdex files

  Language:C1k4377219

• ptoomey3/evilarc

  Create tar/zip archives that can exploit directory traversal vulnerabilities

  Language:Python984150182

• doyensec/electronegativity

  Electronegativity is a tool to identify misconfigurations and security anti-patterns in Electron applications.

  Language:JavaScript982255768

• muraenateam/muraena

  Muraena is an almost-transparent reverse proxy aimed at automating phishing and post-phishing activities.

  Language:Go9414281174

• ilmila/J2EEScan

  J2EEScan is a plugin for Burp Suite Proxy. The goal of this plugin is to improve the test coverage during web application penetration tests on J2EE applications.

  Language:Java6493619186

• andreafioraldi/frida-fuzzer

  This experimetal fuzzer is meant to be used for API in-memory fuzzing.

  Language:JavaScript572201791

• MozillaSecurity/dharma

  Generation-based, context-free grammar fuzzer. Refer to https://github.com/posidron/dharma for a maintained version.

  Language:Python485321790

• mborgerson/mdec

  Decompilation as a Service. Explore multiple decompilers and compare their output with minimal effort. Upload binary, get decompilation.

  Language:Python454132330

• sensepost/mallet

  Mallet is an intercepting proxy for arbitrary protocols

  Language:Java263201844

• sbehrens/sleepy-puppy

  Deprecated please use https://github.com/Netflix/sleepy-puppy

  Language:HTML94141824

• gand3lf/semgrepper

  An extension to use Semgrep inside Burp Suite.

  Language:Java88148

• bonkc/BugBountySubdomains

  Tools to gather subdomains from Bug Bounty programs

  Language:Python645015

• aljazceru/mattermost-retention

  Data retention /cleanup script for mattermost

  Language:Shell515322

• francescolacerenza/TamperThemAll

  A tampered payload generator to Fuzz Web Application Firewalls

  Language:Python36105

• irsl/apache-openoffice-rce-via-uno-links

  35327

• doyensec/electronegativity-action

  The action integrates Electronegativity, a tool to identify misconfigurations and security anti-patterns in Electron applications, into GitHub CI/CD.

  14311