MobileApp-Pentest-Cheatsheet
Java-Deserialization-Cheat-Sheet
| MobileApp-Pentest-Cheatsheet | Java-Deserialization-Cheat-Sheet | |
|---|---|---|
| 1 | 1 | |
| 4,402 | 2,960 | |
| - | - | |
| 0.0 | 2.2 | |
| 3 months ago | 11 months ago | |
| - | - |
Stars - the number of stars that a project has on GitHub. Growth - month over month growth in stars.
Activity is a relative number indicating how actively a project is being developed. Recent commits have higher weight than older ones.
For example, an activity of 9.0 indicates that a project is amongst the top 10% of the most actively developed projects that we are tracking.
MobileApp-Pentest-Cheatsheet
-
Testing mobile applications for security vulnerabilities (assignment)
Not a pentester but Kali/metasploit/msfvenom/owasp all spring to mind. Also https://github.com/tanprathan/MobileApp-Pentest-Cheatsheet good luck I'm sure someone may come along with a simpler approach.
Java-Deserialization-Cheat-Sheet
-
A Study Notes of Exploit Spring Boot Actuator
It can be known that this variable is used to specify the location of the bootstrap configuration file. The supported file formats include ymland properties. Friends who are familiar with Java security may think that the parsing of yml will have a problem of deserialization. If the content of the configuration file is here, we If you can control it, there is a possibility that it can be exploited.
What are some alternatives?
awesome-frida - Awesome Frida - A curated list of Frida resources http://www.frida.re/ (https://github.com/frida/frida)
marshalsec
Mobile-Security-Framework-MobSF - Mobile Security Framework (MobSF) is an automated, all-in-one mobile application (Android/iOS/Windows) pen-testing, malware analysis and security assessment framework capable of performing static and dynamic analysis.
PENTESTING-BIBLE - articles
owasp-mastg - The Mobile Application Security Testing Guide (MASTG) is a comprehensive manual for mobile app security testing and reverse engineering. It describes the technical processes for verifying the controls listed in the OWASP Mobile Application Security Verification Standard (MASVS).
yaml-payload - A tiny project for generating SnakeYAML deserialization payloads
bap - Binary Analysis Platform
spring-boot-actuator-cloud-vul - Spring Boot Actuator + Spring Cloud Vul Env
awesome-malware-analysis - Defund the Police.
Red-Teaming-Toolkit - This repository contains cutting-edge open-source security tools (OST) for a red teamer and threat hunter.
WireShark_Configuration - This is my personal Wireshark configuration. This aids me in troubleshooting by adding new columns and filter buttons to help identify networking and or machine configuration issues.
hacker-roadmap - A collection of hacking tools, resources and references to practice ethical hacking.