satishpatnayak / ScanAndroidXML
Identifies vulnerabilities in network_security_config.xml, AndroidManifest.xml and if Firebase URL are accessible publicly
☆47Updated last year
Alternatives and similar repositories for ScanAndroidXML:
Users that are interested in ScanAndroidXML are comparing it to the libraries listed below
- Slides and other material from various conference presentations.☆40Updated 3 years ago
- Application for showcasing Android Deep Link and WebView Vulnerabilities☆14Updated last year
- Intentionally vulnerable webview implementions in Android☆56Updated 2 years ago
- Server and avi file to exploit FFmpeg HLS parse☆22Updated 5 years ago
- A Bash wrapper for radamsa that can be used to fuzz exported activities and deep links.☆51Updated 3 years ago
- Droz_scan is a automated script, that runs all the queries of drozer in a single run☆25Updated last year
- Created so I can collate all the usefull information and links I've found☆18Updated 3 years ago
- Some simple scripts that I use during bug bounty hunting in Android Apps☆28Updated 2 weeks ago
- Burp Suite plugin to copy regex matches from selected requests and/or responses to the clipboard.☆33Updated 3 years ago
- Enhanced 403 bypass header☆21Updated 2 years ago
- File system enumerator and monitor for Android and Ubuntu.☆17Updated 3 years ago
- ☆45Updated last month
- Flutter SSL pinning bypass using IP forwarding☆49Updated 2 years ago
- Tool to extract & validate google fcm server keys from apks☆27Updated 4 years ago
- apkizer is a mass downloader for android applications for all available versions.☆47Updated 3 years ago
- Dependency Confusion Security Testing Tool☆45Updated 2 years ago
- A collection of Burp Suite Lambda Filters ~ Bambdas☆25Updated 4 months ago
- ☆11Updated 2 years ago
- Automated JavaScript Debugging Tool using CDP - Automatically sets breakpoints for specified strings/patterns in JavaScript code☆80Updated last month
- This repository contains all the examples related to a series of tutorials that demonstrate how to use the new Montoya API of Burp Suite …☆41Updated 2 months ago
- This repository explain how to write frida hook scripts and analysis written hooks.☆80Updated last year
- ☆18Updated 3 years ago
- A simple tool to detect vulnerabilities described here https://portswigger.net/research/browser-powered-desync-attacks.☆36Updated 2 years ago
- Subdomain finder☆10Updated 2 years ago
- Security Advisories☆32Updated last year
- ☆36Updated last year
- A collection of utilities for building extensions using Burp's Montoya API☆47Updated 7 months ago
- A burp-suite plugin that extract all parameter names from in-scope requests☆29Updated 3 years ago
- Static and dynamic Android application security analysis☆72Updated 8 months ago
- ☆38Updated last year