Global

Rows explicitly marked Shizuku required run through a shell UserService. Start Shizuku with ADB and tap the status card to grant access; all other rows use the app's normal execution path.

A list of useful payloads and bypass for Web Application Security and Pentest/CTF

claude-red is a curated library of offensive security skills designed for the Claude skills system. md file that primes Claude with expert-level methodology for a specific attack surface — from SQLi to shellcode, EDR evasion to exploit development.

Penetration testing is the practice of launching authorized, simulated attacks against computer systems and their physical infrastructure to expose potential security weaknesses and vulnerabilities.

Awesome Android Root is a community-curated knowledge base for rooting Android devices and getting the most out of root access:

Let's make it the biggest resource repository for our community.

Dirty Frag is a case that extends the bug class to which Dirty Pipe and Copy Fail belong.

GTFOBins is a curated list of Unix-like executables that can be used to bypass local security restrictions in misconfigured systems.

-5-BugBounty — “Let me reset your password and login into your account “-How I was able to Compromise any User Account via Reset Password Functionality:

Your local copy of HackTricks will be available at after <5 minutes (it needs to build the book, be patient).

The classic profile pipeline stays untouched: CVE-2026-43499 payloads (local or Shizuku), Root My Galaxy integration, per-device validated profiles (S25 ZZHL/ZZI4, S26 Ultra ZZHK, S93XX, Oppo), profile editor, instant root, and run-log archives.

iOS customization toolbox using the badquery sandbox escape. 0db1-db4.

Create logons with clear-text credentials without triggering a suspicious Event ID 4648 (Explicit Credential Logon).

This repository contains cutting-edge open-source security tools (OST) for a red teamer and threat hunter.

Copy Fail (CVE-2026-31431): 9-year-old Linux kernel LPE found by Theori's Xint Code