Web Pentesting Fuzz 字典,一个就够了。

Dictionary of attack patterns and primitives for black-box application fault injection and resource discovery.

Proxifier alternative tool on Android - root version

Gtk application to view property list files

Blackbox tool to disable SSL certificate validation - including certificate pinning - within iOS and macOS applications.

An app that lets you open .car files and browse/extract their images.

Fast iOS executable dumper

pull decrypted ipa from jailbreak device

Next Generation of ShadowsocksX

BlackDex is an Android unpack(dexdump) tool, it supports Android 5.0~12 and need not rely to any environment. BlackDex can run on any Android mobile phone or emulator, you can unpack APK File in se…

APKToolBoxGUI is a handy tool for programmer with user-friendly GUI.

Hacking tools pack & backdoors generator.

🎬 ScreenToGif allows you to record a selected area of your screen, edit and save it as a gif or video.

Nemo是用来进行自动化信息收集的一个简单平台，通过集成常用的信息收集工具和技术，实现对内网及互联网资产信息的自动收集，提高隐患排查和渗透测试的工作效率。

一款burp插件,请看简介

一款快速、全面、易用的页面信息提取工具，可快速发现和提取页面中的JS、URL和敏感信息。

Android security insights in full spectrum.

Dude Suite Web 渗透测试工具

An all-in-one hacking tool to remotely exploit Android devices using ADB and Metasploit-Framework to get a Meterpreter session.

Jar Analyzer - 一个JAR包分析工具，SCA漏洞分析，批量分析JAR包，方法调用关系搜索，字符串搜索，Spring组件分析，CFG程序分析，JVM栈帧分析，进阶表达式搜索，字节码指令级的动态调试分析，反编译JAR包一键导出，一键提取序列化数据恶意代码

一个安卓渗透工具盒子

Modern. Native. Delightful Web Debugging Proxy for macOS, iOS, and Android ⚡️

JSFinder is a tool for quickly extracting URLs and subdomains from JS files on a website.

nim免杀过某数字、某绒

Navigate the CVE jungle with ease.

Decrypts and logs a process's SSL traffic.

Android Xposed Module to bypass SSL certificate validation (Certificate Pinning).

heapdump敏感信息查询工具，例如查找 spring heapdump中的密码明文，AK,SK等