移动安全漏洞挖掘专家SKILL，基于 HackerOne 真实报告的移动安全漏洞挖掘知识库，提供 Android 和 iOS 应用的漏洞挖掘手法、技术细节和代码模式分析。
☆200Apr 19, 2026Updated 4 months ago
Alternatives and similar repositories for android-h1
Users that are interested in android-h1 are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- ☆25Dec 13, 2024Updated last year
- 使用 GO开发基于腾讯云 SCF 的IP 代理池，用于绕过 WAF IP限制，支持安全扫描工具调用。☆26Jan 27, 2026Updated 7 months ago
- 微信小程序全自动安全审计 Skill，基于 Claude Code Agent Teams。7 Agent 协作，覆盖敏感信息、API接口、加密分析、漏洞分析四大维度。采用脚本+LLM双层架构，脚本保证覆盖率，LLM保证准确率。☆396Apr 3, 2026Updated 5 months ago
- 专注于代码审计skill，最小化轻量化skill，只负责安全边界。☆1,017Jun 16, 2026Updated 2 months ago
- 实战 SRC / 众测 / Bug bounty 漏洞挖掘 Claude Code skill — 19 个攻击类 playbook、305 个结构化 payload、263 个 WAF/EDR 绕过、2887 份 HackerOne 真实案例、88,636 WooYun …☆612May 24, 2026Updated 3 months ago
- Virtual machines for every use case on DigitalOcean • AdGet dependable uptime with 99.99% SLA, simple security tools, and predictable monthly pricing with DigitalOcean's virtual machines, called Droplets.
- 用于快速启动tabby 分析漏洞或者gadget的环境☆92Jul 14, 2025Updated last year
- 用于提取Webpack打包的未加载的JavaScript文件，并扫描这些文件以查找敏感信息。☆42Sep 17, 2025Updated 11 months ago
- 辅助甲方安全人员巡检网站资产，发现并分析API安全问题☆535Jan 20, 2025Updated last year
- 面向移动安全分析场景的 6 阶段总控 Skill。用于统一调度 APK 静态侦察、流量与代码对齐、SO/JNI 深度分析、加密与漏洞综合分析、验证设计与报告交付流程。支持 JADX MCP、Burp/Yakit MCP、IDA/Ghidra MCP。☆153Aug 14, 2026Updated 3 weeks ago
- 让fscan再次伟大☆369Aug 13, 2026Updated 3 weeks ago
- xxl-job漏洞综合利用工具☆160Jun 3, 2025Updated last year
- 一个IDEA插件：一键收集项目中所有jar包依赖的工具插件。遍历项目目录收集所有jar文件，复制到all-in-one文件夹，并自动添加为项目库。☆55Oct 30, 2025Updated 10 months ago
- 阿里巴巴安全SDK，提供SSRF、JDBC、XXE防护能力☆117Oct 15, 2025Updated 10 months ago
- 红队浏览器插件-检测VUE站点未授权漏洞☆927May 7, 2026Updated 4 months ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- 一款针对K8s综合利用GUI工具☆185Apr 26, 2026Updated 4 months ago
- 多维度，UI/UX友好的Burp suite越权漏洞检测插件☆36Jul 26, 2026Updated last month
- 《深入JDBC安全：特殊URL构造与不出网反序列化利用技术揭秘》对应研究总结项目 "Deep Dive into JDBC Security: Special URL Construction and Non-Networked Deserialization Explo…☆595Feb 7, 2026Updated 7 months ago
- PHP-Code-Audit-Skill是一个专注于PHP代码审计的Skill☆402Mar 25, 2026Updated 5 months ago
- xxljob-Hessian-Exp 一款XXL-JOB <=2.0.1 Hessian反序列化图形化利用工具，可不出网利用☆37Dec 31, 2024Updated last year
- Java Vulnerability Exploitation Platform☆2,159Aug 22, 2026Updated 2 weeks ago
- Burp插件，自动化挖掘SSRF，Redirect，Sqli漏洞，自定义匹配参数☆489Sep 10, 2023Updated 2 years ago
- ASP.net ViewState密钥被动扫描爆破BurpSuite插件☆236Jun 5, 2026Updated 3 months ago
- CaA - Collector and Analyzer, Insight into information, exploring with intelligence in a thousand ways. 信息洞察，智探千方！☆1,518May 25, 2026Updated 3 months ago
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- Burp插件，快速探测可能存在SQL注入的请求并标记，提高测试效率☆824Feb 26, 2026Updated 6 months ago
- 自己收集和编制的红队面试题，不定期更新☆173Jul 21, 2025Updated last year
- cdnAnalyzer已更名为cdninfo 完善的CDN信息分析工具 基于EDNS、ASN、CNAME、IPlocate等多个维度筛选☆45Updated this week
- ☆28Jul 2, 2026Updated 2 months ago
- Burp Suite/antsword - Interactive shell (HTTP hijack + POST + AES-256-CBC/BASE64)☆31Dec 8, 2025Updated 9 months ago
- JSHunter-一款针对于前端的未授权访问扫描工具☆93Apr 27, 2025Updated last year
- NSFOCUS API_Sword：A Burp Suite extension, Automatically recursively collect API endpoints from any response☆417Jan 20, 2026Updated 7 months ago
- 用Go+Fyne开发的，展示JAVA序列化流以及集成一键插入脏数据,UTF过长编码绕WAF(Utf OverLoad Encoding),修改类SerializeVersionUID功能的图形化工具。☆125Jul 30, 2026Updated last month
- Burp Suite extension for receiving TLS/HTTP traffic captured by eCapture (eBPF)☆147Dec 8, 2025Updated 8 months ago
- AI Agents on DigitalOcean Gradient AI Platform • AdBuild production-ready AI agents using customizable tools or access multiple LLMs through a single endpoint. Create custom knowledge bases or connect external data.
- 东方隐侠团队出品，代码审计skill☆140Feb 25, 2026Updated 6 months ago
- GodInfo 是一个功能全面的后渗透信息和凭据收集工具，旨在帮助安全测试人员在获得授权访问权限后，快速收集目标系统的信息和凭据。☆256Apr 29, 2025Updated last year
- MaR - Matcher and Replacer, Perform intelligent replacement based on precise matching. 精准匹配，智能替换！☆373Jun 28, 2026Updated 2 months ago
- JavaGadgetGenerator 工具，支持 ysoserial，Hessian，字节码，Expr/SSTI，Shiro，JDBC 等 Gadget 生成，封装，混淆，出网延迟探测，内存马注入等...☆575Apr 3, 2026Updated 5 months ago
- aboutSecurity project skill finder / dict finder / exp finder, auto suggest and team knowledge base.☆36Aug 12, 2026Updated 3 weeks ago
- 一款Java内存马生成、测试工具，搭配@ax1sX的MemShell食用。☆267Feb 15, 2026Updated 6 months ago
- 让"WAF绕过"变得简单☆436Jan 26, 2025Updated last year