Ostorlab Pentest Benchmarks
☆18Aug 10, 2026Updated this week
Alternatives and similar repositories for benchmarks
Users that are interested in benchmarks are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Ostorlab Github Actions to complement your CI/CD with Security Testing.☆21Jul 17, 2026Updated 3 weeks ago
- Pure-Rust Android decompiler and security-audit suite. DEX → Java, Hermes → JavaScript. Cross-layer taint across the React Native bridge.…☆27Jun 11, 2026Updated 2 months ago
- OXO is a security scanning orchestrator for the modern age.☆580Updated this week
- A black-box fuzzer to detect custom permission related privilege escalation vulnerabilities in Android.☆33Jul 29, 2026Updated 2 weeks ago
- Open Redirect scanner - (out of date)☆28Nov 27, 2022Updated 3 years ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- Linkfinder by Rdzsp is a browser extension that automatically scans and collects endpoints from JavaScript files on websites☆32Aug 22, 2024Updated last year
- As a bug hunter, are your bug bounty reports getting rejected because you don't use a "malicious" Proof of Concept (PoC) app to exploit t…☆148Jul 1, 2026Updated last month
- Materials from different CTFs for later reuse☆27Mar 23, 2023Updated 3 years ago
- Writeup and exploit for CVE-2025-22441: Privilege escalation from installed app to SystemUI process on Android due to pass of untrusted A…☆104Oct 8, 2025Updated 10 months ago
- A tiny demo app using SSL pinning to block HTTPS MitM interception☆14Aug 8, 2022Updated 4 years ago
- ☆13Jul 12, 2021Updated 5 years ago
- Unauthenticated enumeration of AWS IAM Roles.☆28Apr 18, 2026Updated 3 months ago
- Collections of student projects to find execution path in binary program via taint analysis using Ghidra☆18Sep 25, 2022Updated 3 years ago
- ☆19Sep 1, 2025Updated 11 months ago
- 1-Click AI Models by DigitalOcean Gradient • AdDeploy popular AI models on DigitalOcean Gradient GPU virtual machines with just a single click. Zero configuration with optimized deployments.
- Repository for download all version of @hpAndro1337 (Android AppSec) application.☆104Dec 26, 2023Updated 2 years ago
- Blank methodology sheet for the OSWE exam☆14Dec 17, 2021Updated 4 years ago
- Collection of antivirus bypass techniques☆13Nov 20, 2023Updated 2 years ago
- Linux Space Booster is an advanced, secure disk space cleanup utility specifically designed for Linux virtual machines. It intelligently …☆15Jun 15, 2025Updated last year
- Significant security enchancements of recent major Android versions.☆187Jun 25, 2026Updated last month
- Android Dynamic Class Dumper — dump all DEX files from running Android apps using Frida☆57Mar 27, 2026Updated 4 months ago
- Python script to get Samba Server Version☆11May 8, 2018Updated 8 years ago
- Burp Extender plugin that generates a sitemap of a website using Wayback Machine☆12Jun 18, 2018Updated 8 years ago
- ☆49Oct 28, 2020Updated 5 years ago
- 1-Click AI Models by DigitalOcean Gradient • AdDeploy popular AI models on DigitalOcean Gradient GPU virtual machines with just a single click. Zero configuration with optimized deployments.
- This repository contains a basic custom lab environment designed to demonstrate and explore SQL injection vulnerabilities. The lab provid…☆10Sep 20, 2023Updated 2 years ago
- Android security tool that scans installed apps bytecode to discover content providers, file providers, and intent interfaces, then gener…☆19Mar 12, 2026Updated 4 months ago
- Hands-on challenges for learning how to reverse engineer Flutter applications.☆52Jan 31, 2026Updated 6 months ago
- My lab notes and learning progress for the PortSwigger Web Security Academy's SQL Injection chapter.☆13Aug 10, 2023Updated 3 years ago
- Automation of KNOXSS extension.☆11Apr 12, 2019Updated 7 years ago
- Automated JavaScript Debugging Tool using CDP - Automatically sets breakpoints for specified strings/patterns in JavaScript code☆93Dec 22, 2024Updated last year
- Exploit for CVE-2022-26134: Confluence Pre-Auth Remote Code Execution via OGNL Injection☆13Jul 24, 2022Updated 4 years ago
- A kernel-assisted shared-library injector for Android. Loads any .so into a target process without ptrace, in-process dlopen, or visible …☆158Jun 3, 2026Updated 2 months ago
- Browser-based Android security auditing tool.☆81Updated this week
- Open source password manager - Proton Pass • AdSecurely store, share, and autofill your credentials with Proton Pass, the end-to-end encrypted password manager trusted by millions.
- This is a repository for collecting and collating vulnerability disclosures, tips, and tools☆18Nov 19, 2025Updated 8 months ago
- A LKM (Loadable Kernel Module) to execute a command as root; I include a example of using netcat and a compiled(with source and steps on…☆17Oct 8, 2024Updated last year
- Scripts and package lists used to build image files on voidbuilds.xyz☆10Mar 20, 2024Updated 2 years ago
- ☆69Jul 24, 2026Updated 2 weeks ago
- ☆13Jan 4, 2022Updated 4 years ago
- user validation☆19Jun 18, 2026Updated last month
- A powerful Burp Suite extension that helps in converting requests between different formats, making web application testing more efficien…☆13Nov 18, 2024Updated last year