mohwahyudi Goto Github PK

ai-exploits

A collection of real world AI/ML exploits for responsibly disclosed vulnerabilities

allvideopocsfromhackerone

This script grab public report from hacker one and make some folders with poc videos

apkatshu

Apkatshu is a Tool for extracting urls , emails , ip address , and interesting data from APK files

appmon

Documentation:

awesome--frida-ui

this tool for beginner , and make easier to use this

awesome-flipperzero

🐬 A collection of awesome resources for the Flipper Zero device.

awesome-gpt-agents

A curated list of GPT agents for cybersecurity

bagbak

Yet another frida based iOS dumpdecrypted, supports decrypting app extensions and no SSH required

bug-bounty-labs

All the labs in this repository simulate real world bugs I found in the wild

cve

Gather and update all available and newest CVEs with their PoC.

cve-2021-22204-exiftool

Python exploit for the CVE-2021-22204 vulnerability in Exiftool

cve-2021-41773

ds_store_exp

A .DS_Store file disclosure exploit. It parses .DS_Store file and downloads files recursively.

dwarf

Full featured multi arch/os debugger built on top of PyQt5 and frida

flipper

Playground (and dump) of stuff I make or modify for the Flipper Zero

flipper-irdb

A collective of different IRs for the Flipper (maintained)

flipper_zero_badusb_hack5_payloads

hack5 badusb payloads moded for be played with flipper zero

gda-android-reversing-tool

GDA is a new fast and powerful decompiler in C++(working without Java VM) for the APK, DEX, ODEX, OAT, JAR, AAR, and CLASS file. which supports malicious behavior detection, privacy leaking detection, vulnerability detection, path solving, packer identification, variable tracking, deobfuscation, python&java scripts, device memory extraction, data decryption, and encryption, etc.

gopherus

This tool generates gopher link for exploiting SSRF and gaining RCE in various servers

grapefruit

(WIP) Runtime Application Instruments for iOS. Previously Passionfruit

instagramsslpinningbypass-ios

A Frida script to bypass SSL pinning in Instagram 157.0 and later (iOS)

iot_vuln

IOT vuln

mongodb-shodan

simple tool to get unauth mongodb server

pentest-tools

Custom pentesting tools

poc-in-github

📡 PoC auto collect from GitHub. ⚠️ Be careful Malware.

ra1nstorm

A tool for downgrading 64-bit iDevices vulnerable to checkm8

rce-0-day-for-ghostscript-9.50

RCE 0-day for GhostScript 9.50 - Payload generator

rms-runtime-mobile-security

Runtime Mobile Security (RMS) 📱🔥 - is a powerful web interface that helps you to manipulate Android and iOS Apps at Runtime

rsacrack

A toolbox for extracting RSA private keys from public keys.

tiktok-ssl-pinning-bypass

SSL Pinning Bypass For iOS