Magisk Module for Pentest
Frida server auto-start on boot System CA certificate injection (for Burp/mitmproxy) SELinux permissive toggle Global proxy auto-configuration Enhanced root hid
Arsenal
Professional offensive security tools & exploit frameworks
98
Tools
12
Categories
Android Intent Fuzzer
Enumerate exported activities, services, receivers, providers Fuzz string extras with injection payloads (SQLi, XSS, path traversal) Fuzz URI schemes (file://,
Mobile Forensics Data Extractor
SMS/MMS messages with timestamps Call logs (incoming, outgoing, missed) Saved WiFi networks with PSKs Chrome browser history and saved logins WhatsApp/Telegram
Buffer Overflow Lab — Stack Smashing 101
Buffer overflow lab with 7 vulnerable C programs: ret2win (verified exploit → flag), ret2libc, off-by-one, ROP practice, format string read/write and more, each
Active Directory Attack Path Lab
Active Directory attack path lab: real Vagrantfile (StefanScherer/windows_2022 eval boxes) with a promoted lab.local DC, member server and workstation, provisio
Web Application Hacking Challenges Pack
15 self-contained vulnerable web challenges (Flask + Dockerfile + SOLUTION.json): union, blind boolean and time-based SQLi, stored/reflected XSS, Jinja2 SSTI, b
Red Team Operations Playbook
Red team operations playbook: phase-based engagement workflow mapped to MITRE ATT&CK, OPSEC checklists per phase, finding/credential/host tracking with persiste
Cloud Penetration Testing Workshop
Cloud pentest workshop with 6 deployable Terraform labs (valid HCL): AWS IMDSv1 credential theft, AWS public S3, Azure Managed Identity + Key Vault, Azure publi
Exploit Development from Scratch
Exploit development from scratch: cyclic patterns, shellcode templates with XOR encoder, ROP gadget finder and chain builder, SEH helpers, format-string read/wr
Advanced Threat Emulation Scenarios
Advanced threat emulation scenarios: 5 playbooks (APT28 and Lazarus added) with MITRE mapping, detection notes, tooling guidance and report generation.
Flipper Zero Payload Collection
Flipper Zero BadUSB collection with 11 real payloads including Wi-Fi exfiltration, screenshot exfil, bitcoin clipboard swap with --btc-addr option, and more.
USB Rubber Ducky Script Pack
USB Rubber Ducky script pack with 15 real payloads: Wi-Fi dump, Chrome credential dump, SAM dump, Defender disable, persistence, document exfil, keylogger, reve