移动安全漏洞挖掘专家SKILL，基于 HackerOne 真实报告的移动安全漏洞挖掘知识库，提供 Android 和 iOS 应用的漏洞挖掘手法、技术细节和代码模式分析。
☆187Apr 19, 2026Updated 3 months ago
Alternatives and similar repositories for android-h1
Users that are interested in android-h1 are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- ☆25Dec 13, 2024Updated last year
- 使用 GO开发基于腾讯云 SCF 的IP 代理池，用于绕过 WAF IP限制，支持安全扫描工具调用。☆26Jan 27, 2026Updated 6 months ago
- 微信小程序全自动安全审计 Skill，基于 Claude Code Agent Teams。7 Agent 协作，覆盖敏感信息、API接口、加密分析、漏洞分析四大维度。采用脚本+LLM双层架构，脚本保证覆盖率，LLM保证准确率。☆369Apr 3, 2026Updated 3 months ago
- 专注于代码审计skill，最小化轻量化skill，只负责安全边界。☆980Jun 16, 2026Updated last month
- 实战 SRC / 众测 / Bug bounty 漏洞挖掘 Claude Code skill — 19 个攻击类 playbook、305 个结构化 payload、263 个 WAF/EDR 绕过、2887 份 HackerOne 真实案例、88,636 WooYun …☆593May 24, 2026Updated 2 months ago
- GPU virtual machines on DigitalOcean Gradient AI • AdGet to production fast with high-performance AMD and NVIDIA GPUs you can spin up in seconds. The definition of operational simplicity.
- 用于快速启动tabby 分析漏洞或者gadget的环境☆92Jul 14, 2025Updated last year
- 用于提取Webpack打包的未加载的JavaScript文件，并扫描这些文件以查找敏感信息。☆42Sep 17, 2025Updated 10 months ago
- 面向移动安全分析场景的 6 阶段总控 Skill。用于统一调度 APK 静态侦察、流量与代码对齐、SO/JNI 深度分析、加密与漏洞综合分析、验证设计与报告交付流程。支持 JADX MCP、Burp/Yakit MCP、IDA/Ghidra MCP。☆129Jun 30, 2026Updated last month
- 辅助甲方安全人员巡检网站资产，发现并分析API安全问题☆533Jan 20, 2025Updated last year
- 让fscan再次伟大☆362Jun 18, 2026Updated last month
- xxl-job漏洞综合利用工具☆161Jun 3, 2025Updated last year
- 一个IDEA插件：一键收集项目中所有jar包依赖的工具插件。遍历项目目录收集所有jar文件，复制到all-in-one文件夹，并自动添加为项目库。☆54Oct 30, 2025Updated 8 months ago
- 阿里巴巴安全SDK，提供SSRF、JDBC、XXE防护能力☆117Oct 15, 2025Updated 9 months ago
- 红队浏览器插件-检测VUE站点未授权漏洞☆904May 7, 2026Updated 2 months ago
- GPUs on demand by Runpod - Special Offer Available • AdRun AI, ML, and HPC workloads on powerful cloud GPUs—without limits or wasted spend. Deploy GPUs in under a minute and pay by the second.
- 一款针对K8s综合利用GUI工具☆166Apr 26, 2026Updated 3 months ago
- 多维度，UI/UX友好的Burp suite越权漏洞检测插件☆34Updated this week
- 《深入JDBC安全：特殊URL构造与不出网反序列化利用技术揭秘》对应研究总结项目 "Deep Dive into JDBC Security: Special URL Construction and Non-Networked Deserialization Explo…☆590Feb 7, 2026Updated 5 months ago
- PHP-Code-Audit-Skill是一个专注于PHP代码审计的Skill☆379Mar 25, 2026Updated 4 months ago
- xxljob-Hessian-Exp 一款XXL-JOB <=2.0.1 Hessian反序列化图形化利用工具，可不出网利用☆37Dec 31, 2024Updated last year
- Java Vulnerability Exploitation Platform☆2,132Apr 29, 2026Updated 3 months ago
- Burp插件，自动化挖掘SSRF，Redirect，Sqli漏洞，自定义匹配参数☆488Sep 10, 2023Updated 2 years ago
- ASP.net ViewState密钥被动扫描爆 破BurpSuite插件☆237Jun 5, 2026Updated last month
- CaA - Collector and Analyzer, Insight into information, exploring with intelligence in a thousand ways. 信息洞察，智探千方！☆1,511May 25, 2026Updated 2 months ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- 自己收集和编制的红队面试题，不定期更新☆171Jul 21, 2025Updated last year
- Burp插件，快速探测可能存在SQL注入的请求并标记，提高测试效率☆821Feb 26, 2026Updated 5 months ago
- cdnAnalyzer已更名为cdninfo 完善的CDN信息分析工具 基于EDNS、ASN、CNAME、IPlocate等多个维度筛选☆44Updated this week
- ☆25Jul 2, 2026Updated 3 weeks ago
- Burp Suite/antsword - Interactive shell (HTTP hijack + POST + AES-256-CBC/BASE64)☆31Dec 8, 2025Updated 7 months ago
- JSHunter-一款针对于前端的未授权访问扫描工具☆93Apr 27, 2025Updated last year
- NSFOCUS API_Sword：A Burp Suite extension, Automatically recursively collect API endpoints from any response☆410Jan 20, 2026Updated 6 months ago
- 用Go+Fyne开发的，展示JAVA序列化流以及集成一键插入脏数据,UTF过长编码绕WAF(Utf OverLoad Encoding),修改类SerializeVersionUID功能的图形化工具。☆126Jan 14, 2025Updated last year
- Burp Suite extension for receiving TLS/HTTP traffic captured by eCapture (eBPF)☆146Dec 8, 2025Updated 7 months ago
- AI Agents on DigitalOcean Gradient AI Platform • AdBuild production-ready AI agents using customizable tools or access multiple LLMs through a single endpoint. Create custom knowledge bases or connect external data.
- 东方隐侠团队出品，代码审计skill☆135Feb 25, 2026Updated 5 months ago
- GodInfo 是一个功能全面的后渗透信息和凭据收集工具，旨在帮助安全测试人员在获得授权访问权限后，快速收集目标系统的信息和凭据。☆257Apr 29, 2025Updated last year
- MaR - Matcher and Replacer, Perform intelligent replacement based on precise matching. 精准匹配，智能替换！☆372Jun 28, 2026Updated last month
- JavaGadgetGenerator 工具，支持 ysoserial，Hessian，字节码，Expr/SSTI，Shiro，JDBC 等 Gadget 生成，封装，混淆，出网延迟探测，内存马注入等...☆573Apr 3, 2026Updated 3 months ago
- aboutSecurity project skill finder / dict finder / exp finder, auto suggest and team knowledge base.☆26Jul 17, 2026Updated last week
- 一款Java内存马生成、测试工具，搭配@ax1sX的MemShell食用。☆265Feb 15, 2026Updated 5 months ago
- 让"WAF绕过"变得简单☆437Jan 26, 2025Updated last year