Android tapjacking quick PoC tool
☆39Nov 3, 2022Updated 3 years ago
Alternatives and similar repositories for tapjacker
Users that are interested in tapjacker are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- ☆32Feb 24, 2021Updated 5 years ago
- ☆36Aug 25, 2023Updated 3 years ago
- All kind of frida stuff when needed in pentesting or reverse engineering of an android app - The perfect starter kit☆18Jun 2, 2020Updated 6 years ago
- Simple exploit POC for https://promon.co/security-news/strandhogg/ which can steal username and password from targeted android package pr…☆21Jan 14, 2022Updated 4 years ago
- An android application which exploits sieve through android components.☆44Sep 17, 2017Updated 9 years ago
- Managed Database hosting by DigitalOcean • AdPostgreSQL, MySQL, MongoDB, Kafka, Valkey, and OpenSearch available. Automatically scale up storage and focus on building your apps.
- Virtual host bruteforcer against given network range or single ip☆11Mar 21, 2019Updated 7 years ago
- A Productivity-Boosting Burp Suite extension written in Kotlin that enables persistent sticky session handling in web application testing…☆15Oct 8, 2025Updated last year
- TapJacking Attacks Demo☆20Apr 25, 2021Updated 5 years ago
- gSAST - Grep Static Analysis Security Tool☆13Mar 30, 2024Updated 2 years ago
- A fast, read-only MCP server for AI-assisted analysis of APK, DEX, JAR, and other Android artifacts, powered by ASC.☆19Oct 8, 2026Updated 3 weeks ago
- A Frida script to bypass Xamarin certificate pinning implementations☆76Jan 6, 2023Updated 3 years ago
- ☆476Jul 17, 2025Updated last year
- Demonstrates how Android Marshmallow permissions dialog can be hijacked by the app drawind on top of it.☆27Jan 20, 2016Updated 10 years ago
- ☆16Oct 24, 2018Updated 8 years ago
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- Bypass security checks in IOSSecuritySuite and Rootbear☆52Jul 5, 2023Updated 3 years ago
- ☆11Apr 18, 2022Updated 4 years ago
- Casino Heist is a playground for learning Solidity smart contracts security, we have it ready for you to play at https://casinoheist.enum…☆15Jan 15, 2026Updated 9 months ago
- Burp Intruder File Payload Generator☆18Oct 27, 2019Updated 7 years ago
- Find Bitcoin addresses with abuse reports that made transaction with a specific Bitcoin address and generate a graph☆11Nov 18, 2021Updated 4 years ago
- Checks if an Android application has successfully completed the "App Link Verification" process for Android App Links.☆74Dec 4, 2025Updated 10 months ago
- generate yara-androguard report on your local and scan☆12Oct 3, 2019Updated 7 years ago
- My own collection of Frida scripts and tricks☆73May 28, 2021Updated 5 years ago
- Explore a rich collection of diverse payloads in these GitHub repositories. 🚀☆12Apr 9, 2026Updated 6 months ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- resux' reference sheets☆32Updated this week
- IoC Feed for security analysts etc.☆13Feb 1, 2023Updated 3 years ago
- NMAP NSE scripts - (not all)) my contributions before merging to nmap svn☆37Jun 30, 2015Updated 11 years ago
- apkfram was written in order to help any mobile penetration testers to identify the Framework used to develop the Android application.☆12Updated this week
- Token Tailor is a Burp Suite Community Edition extension that aims to simplify security testing by automating JWT renewal.☆38Sep 30, 2025Updated last year
- CVE-2026-0075 — Android ContactsProvider information disclosure via JSON error side-channel, including PoC, root-cause analysis, and patc…☆13Aug 12, 2026Updated 2 months ago
- Injects frida gadget using zygisk to bypass anti-tamper checks.☆68Oct 19, 2026Updated last week
- Cloning apk for bypassing code tampering detection, Google Safety Net and scanning vulnerable plugins☆88Jun 16, 2023Updated 3 years ago
- CVE-2020-0096-StrandHogg2 复现☆12Mar 15, 2021Updated 5 years ago
- AI Agents on DigitalOcean Gradient AI Platform • AdBuild production-ready AI agents using customizable tools or access multiple LLMs through a single endpoint. Create custom knowledge bases or connect external data.
- Burp proxy flutter apps☆361Jun 24, 2025Updated last year
- The scripts helps security analsts to identify misconfigured firebase instances.☆238Aug 9, 2022Updated 4 years ago
- Scanner for Cross-Site WebSocket Hijacking☆40Feb 19, 2026Updated 8 months ago
- Bitcoin miner runs at the possible highest speed your pc can handle☆13Nov 1, 2022Updated 3 years ago
- A collection of Semgrep rules derived from the OWASP MASTG specifically for Android applications.☆343Jun 5, 2026Updated 4 months ago
- Android virtual camera for security testing. Injects frames into cameraserver so any app sees a video file, desktop stream, or webcam ins…☆45Oct 13, 2026Updated 2 weeks ago
- Tool to automatize captcha process to perform a brute force attack☆14May 1, 2025Updated last year