Automated DAST for Android Apps
☆156Sep 16, 2026Updated last month
Alternatives and similar repositories for thorfinn
Users that are interested in thorfinn are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Map your path from a low-priv user to roo, like BloodHound, for local Linux privesc.☆173Jul 31, 2026Updated 2 months ago
- P³-Shellcode Loader is a loader that implements a code injection technique which leverages the Process Parameters structure as an executi…☆241Jul 8, 2026Updated 3 months ago
- Flutter SSL Pinning Bypass Tool for Android & iOS — works on any Flutter version without pattern databases☆316Sep 30, 2026Updated 2 weeks ago
- ☆74Oct 10, 2026Updated last week
- Ethiack AI Pentesting Benchmark Framework☆107Aug 20, 2026Updated last month
- 1-Click AI Models by DigitalOcean Gradient • AdDeploy popular AI models on DigitalOcean Gradient GPU virtual machines with just a single click. Zero configuration with optimized deployments.
- Modern offline-first Application Security Intelligence Platform for Android, iOS, Flutter and React Native with attack-chain analysis, ex…☆183Jul 21, 2026Updated 2 months ago
- Shellph is a portable command-line utility designed to automate encryption and obfuscation of arbitrary shellcode. Named after my cat (Be…☆36Jul 20, 2026Updated 2 months ago
- Active Directory pentest methodology for Claude Code: skills, agents and slash commands for internal AD red-team work (Kerberoasting, ADC…☆211Aug 24, 2026Updated last month
- ☆97Updated this week
- Live runtime audit for installed Android apps. Runs on the rooted phone, serves a browser dashboard.☆33May 23, 2026Updated 4 months ago
- A curated collection of offensive, defensive and AI/LLM security tools.☆177Updated this week
- ☆92Aug 5, 2026Updated 2 months ago
- All my walkthroughs for HTB Academy labs in the Active Directory Module ( CPTS path ). Includes folder of canvas files for Obsidian.☆67Apr 27, 2026Updated 5 months ago
- One-pass anonymous Active Directory enumeration over SAMR and LSARPC — null session, no credentials, with structured reusable output.☆69Sep 17, 2026Updated last month
- End-to-end encrypted email - Proton Mail • AdSpecial offer: 40% Off Yearly / 80% Off First Month. All Proton services are open source and independently audited for security.
- ☆56Sep 18, 2026Updated 3 weeks ago
- AD AutoPwn v4.13.0 — automated AD attack chain, zero-auth to Domain Admin. Discover/Kerberoast/AS-REP/AD CS ESC1-16/Shadow Creds/RBCD+KCD…☆215Sep 25, 2026Updated 3 weeks ago
- Zygisk module that intercepts Flutter app traffic — redirects to a proxy and bypasses BoringSSL TLS pinning. Persistent, no Frida session…☆127Aug 7, 2026Updated 2 months ago
- A GUI for Sliver☆167Updated this week
- Offensive security framework for AI agent infrastructure - recon, credential looting, model exfiltration, poisoning, and attack-path anal…☆452Updated this week
- Malware as a Service Ludus Range☆129Sep 24, 2026Updated 3 weeks ago
- KEV-gated continual-learning XSS specialist with execution-authoritative browser verification☆156Sep 28, 2026Updated 2 weeks ago
- JSHawk is a powerful, context-aware JavaScript security scanner that hunts for exposed credentials, API keys, and sensitive information i…☆17Apr 13, 2026Updated 6 months ago
- Self-hosted external attack surface scanner. See what attackers see: subdomains, takeovers, open ports, CVEs ranked by EPSS/KEV, TLS/SSH/…☆27Updated this week
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- iOS traffic interception framework which route all device HTTP/HTTPS traffic through Burp Suite via a system-wide VPN tunnel☆50Feb 15, 2026Updated 8 months ago
- Modified BloodHound.py CE ingestor for red team use. Obfuscates LDAP through ldapx, paces LDAP searches and host RPC, and resumes a stopp…☆88Oct 10, 2026Updated last week
- Vulnerable Windows Application for Pentesters from the house of DarkRelay Security Labs. The project is along the lines of DVWA, AWSGoat …☆15Dec 28, 2023Updated 2 years ago
- Reusable prompts for a structured, evidence-first bug bounty hunting workflow☆616Oct 3, 2026Updated 2 weeks ago
- Cyberful is an open-source AI Red Team for discovering, exploiting, verifying, and remediating vulnerabilities.☆139Aug 24, 2026Updated last month
- Sandbox escape PoC for iOS 26 and 27.☆276Aug 11, 2026Updated 2 months ago
- Cross-platform network execution toolkit (SMB/Kerberos/WMI/LDAP/DCSync) built on TrustedSec's Titanis - NetExec-style workflow in C#☆82Sep 18, 2026Updated 3 weeks ago
- ☆488Feb 14, 2025Updated last year
- Crystal port of GodPotato to abuse SeImpersonatePrivilege with indirect syscalls, dynamic API resolution and compile-time string obfuscat…☆131Aug 22, 2026Updated last month
- Simple, predictable pricing with DigitalOcean hosting • AdAlways know what you'll pay with monthly caps and flat pricing. Enterprise-grade infrastructure trusted by 600k+ customers.
- Corgea's rule-based SAST scanner☆286Updated this week
- Living Off the Land Credentials. Public credential defaults, locations, and exposure patterns for real products, SaaS/cloud services, app…☆61Jul 19, 2026Updated 2 months ago
- 𝘔𝘢𝘯𝘺 𝘰𝘧 𝘵𝘩𝘦𝘴𝘦 𝘴𝘤𝘳𝘪𝘱𝘵𝘴 𝘢𝘳𝘦 𝘤𝘰𝘭𝘭𝘦𝘤𝘵𝘦𝘥 𝘧𝘳𝘰𝘮 𝘤𝘰𝘶𝘳𝘴𝘦𝘴, 𝘣𝘭𝘰𝘨𝘴, 𝘤𝘰𝘮𝘮𝘶𝘯𝘪𝘵𝘺 𝘳𝘦𝘴𝘰𝘶𝘳𝘤�…☆37Nov 30, 2025Updated 10 months ago
- How many bugs can LMs find & fix in large codebases?☆138Oct 9, 2026Updated last week
- AI red-team platform. Autonomous LLM agents run a penetration test end to end inside a Kali container and write the report. LangGraph pla…☆343Oct 6, 2026Updated last week
- Tools that lower the barrier to security research on Meta's products, for vetted Meta Bug Bounty researchers. Designed to live where rese…☆243Updated this week
- Nuclei-like credential surface scanner with BloodHound support. Audits local hosts for exposed secrets, cloud tokens, DevOps, and AI keys…☆85Jul 21, 2026Updated 2 months ago