Automated DAST for Android Apps
☆162Sep 16, 2026Updated last month
Alternatives and similar repositories for thorfinn
Users that are interested in thorfinn are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Flutter SSL Pinning Bypass Tool for Android & iOS — works on any Flutter version without pattern databases☆321Sep 30, 2026Updated last month
- Android security and penetration testing, from first principles to senior practitioner. 81 chapters, ~327 labs, measured rather than reci…☆64Aug 18, 2026Updated 2 months ago
- iOS traffic interception framework which route all device HTTP/HTTPS traffic through Burp Suite via a system-wide VPN tunnel☆48Feb 15, 2026Updated 8 months ago
- Zygisk module that intercepts Flutter app traffic — redirects to a proxy and bypasses BoringSSL TLS pinning. Persistent, no Frida session…☆129Aug 7, 2026Updated 2 months ago
- Modern offline-first Application Security Intelligence Platform for Android, iOS, Flutter and React Native with attack-chain analysis, ex…☆186Jul 21, 2026Updated 3 months ago
- 1-Click AI Models by DigitalOcean Gradient • AdDeploy popular AI models on DigitalOcean Gradient GPU virtual machines with just a single click. Zero configuration with optimized deployments.
- Browser-based Android security auditing tool.☆85Aug 7, 2026Updated 3 months ago
- Live runtime audit for installed Android apps. Runs on the rooted phone, serves a browser dashboard.☆33May 23, 2026Updated 5 months ago
- An agentic mobile security research system built as a Claude Code project. An orchestrator spawns focused sub-agents, each with one narro…☆42Sep 1, 2026Updated 2 months ago
- Live iOS runtime auditor for jailbroken devices. HTTPS dashboard served from the phone.☆15Jun 28, 2026Updated 4 months ago
- Complete Frida script that bypasses 19 layers of Android security including Talsec, freeRASP, PairIP, SSL pinning, root detection, emulat…☆20Oct 8, 2026Updated 3 weeks ago
- One-pass anonymous Active Directory enumeration over SAMR and LSARPC — null session, no credentials, with structured reusable output.☆68Sep 17, 2026Updated last month
- LSPosed module for disabling SSL certificate pinning on Android. Covers Java-layer pinning (OkHttp, TrustManager, Conscrypt, WebView, Cor…☆45Aug 20, 2026Updated 2 months ago
- 𝘔𝘢𝘯𝘺 𝘰𝘧 𝘵𝘩𝘦𝘴𝘦 𝘴𝘤𝘳𝘪𝘱𝘵𝘴 𝘢𝘳𝘦 𝘤𝘰𝘭𝘭𝘦𝘤𝘵𝘦𝘥 𝘧𝘳𝘰𝘮 𝘤𝘰𝘶𝘳𝘴𝘦𝘴, 𝘣𝘭𝘰𝘨𝘴, 𝘤𝘰𝘮𝘮𝘶 𝘯𝘪𝘵𝘺 𝘳𝘦𝘴𝘰𝘶𝘳𝘤�…☆38Nov 30, 2025Updated 11 months ago
- JSHawk is a powerful, context-aware JavaScript security scanner that hunts for exposed credentials, API keys, and sensitive information i…☆17Apr 13, 2026Updated 6 months ago
- Virtual machines for every use case on DigitalOcean • AdGet dependable uptime with 99.99% SLA, simple security tools, and predictable monthly pricing with DigitalOcean's virtual machines, called Droplets.
- JS+ is a browser extension that captures JS URLs from specified domains and scans them with AI.☆24Mar 16, 2026Updated 7 months ago
- A source code analysis tool that combines cross-file taint analysis and rule-based detection to identify vulnerability patterns, with opt…☆224Oct 20, 2026Updated 2 weeks ago
- Free BugBounty KrazePlanetTraining☆61Dec 17, 2025Updated 10 months ago
- The Kerberoasting / AD password-audit wordlist I use on engagements: priority-merged HashMob large list + The-Viper-One's kerberoast_pws,…☆16Oct 2, 2026Updated last month
- Drift Corpus : repository of Windows Kernel patch diffs.☆28Jul 15, 2026Updated 3 months ago
- ☆26Sep 5, 2025Updated last year
- Pentest Coverage Tracker is a Burp Suite extension that helps penetration testers monitor testing coverage in real time. It logs discover…☆49Mar 16, 2026Updated 7 months ago
- Autonomous Bug Bounty Hunting Framework powered by Claude Code. 20 AI agents, state-machine orchestration, Burp Suite MCP, credential vau…☆94May 19, 2026Updated 5 months ago
- WebSocket Penetration Testing Toolkit for Burp Suite☆32Mar 5, 2026Updated 8 months ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- Runtime-aware SCA — proves which CVEs are actually reachable, not just installed.☆19Updated this week
- Fetch, download, and decompile Android/iOS/Exe assets from HackerOne bug bounty programs☆43Oct 12, 2026Updated 3 weeks ago
- ☆28Apr 12, 2026Updated 6 months ago
- iOS iBugBazaar: Your mobile appsec playground to Explore, Exploit, Excel☆21Apr 30, 2024Updated 2 years ago
- TokenTwin Checker — Dual Token BAC/IDOR Tester for Burp Suite☆99Aug 24, 2026Updated 2 months ago
- Coroutine Frame-Oriented Programming exploitation technique☆17Nov 12, 2025Updated 11 months ago
- Thick client penetration testing and MSIX security audit toolkit for Windows. Audits .NET, Electron and native binaries: static and runti…☆24Oct 28, 2026Updated last week
- The one shot API attacker tool - finds the API url from the given root simulate the automated attacks☆35Jul 21, 2026Updated 3 months ago
- An automated exploit for CVE-2026-0073 (Android ADB TLS Auth Bypass). Features a built-in mDNS/Zeroconf scanner to instantly discover ran…☆29May 20, 2026Updated 5 months ago
- Bare Metal GPUs on DigitalOcean Gradient AI • AdPurpose-built for serious AI teams training foundational models, running large-scale inference, and pushing the boundaries of what's possible.
- 176 vulnerabilities in Samsung preinstalled Android apps☆363Jul 15, 2026Updated 3 months ago
- ThrottleStop.sys Arbitrary Physical Memory R/W☆22Aug 10, 2026Updated 2 months ago
- High-assurance, artifact-agnostic prompt for authorized security labs, exploit-chain research, PoC validation, and evidence-led reporting…☆48Aug 1, 2026Updated 3 months ago
- ☆11Jun 9, 2023Updated 3 years ago
- Malicious package & supply-chain intelligence☆203Oct 24, 2026Updated last week
- A Ralph Wiggum-style Claude Code plugin for iterative vulnerability hunting...☆15Feb 20, 2026Updated 8 months ago
- In-memory TLS 1.2/1.3 key extractor.☆15Jul 14, 2026Updated 3 months ago