thumb16 thumb32 arm32 inlineHook in Android

Mac arm版本微信小程序F12 devtools

Python based web automation tool. Powerful and elegant.

Binder Trace is a tool for intercepting and parsing Android Binder messages. Think of it as "Wireshark for Binder".

A big list of Android Hackerone disclosed reports and other resources.

A runtime ObjC class-dump

Process Android Memory Dumper

Enable WebView remote inspector for every app

Reverse engineering of Apple MultipeerConnectivity Framework

「💉」XSS Payload List

Playwright is a framework for Web Testing and Automation. It allows testing Chromium, Firefox and WebKit with a single API.

简悦导入文章

Open-source reimplementation of Apple XPC library.

A tool that helps you easy trace classes, functions, and modify the return values of methods on iOS platform

手机品牌型号汇总 | Mobile Models | This repository is licensed under CC BY-NC-SA 4.0

A lightweight emulation framework for emulating security algorithms in iOS executables and libraries.

system3, Samsung's worst nightmare for a 3rd time!

Some old unexploited remote kernel memory corruption PoCs

Exploit Development and Reverse Engineering with GDB & LLDB Made Easy

Run commands as system (uid 1000) on Samsung devices! Includes API for privileged access!

Fastjson vulnerability quickly exploits the framework（fastjson漏洞快速利用框架）

IDA loader for SEP firmware with dyld cache support.

JNDI服务利用工具 RMI/LDAP，支持部分场景回显、内存shell，高版本JDK场景下利用等，fastjson rce命令执行，log4j rce命令执行 漏洞检测辅助工具

小红书笔记 | 评论爬虫、抖音视频 | 评论爬虫、快手视频 | 评论爬虫、B 站视频 ｜ 评论爬虫、微博帖子 ｜ 评论爬虫、百度贴吧帖子 ｜ 百度贴吧评论回复爬虫 | 知乎问答文章｜评论爬虫

Shiro反序列化利用工具，支持新版本(AES-GCM)Shiro的key爆破，配合ysoserial，生成回显Payload

一款信息泄漏利用工具，适用于.git/.svn/.DS_Store泄漏和目录列出

Launch any application activity

This contains notes and slides for my talk on Reverse Engineering Android Malware

The patching of Android kernel and Android system