Welcome to offsec-scripts, a personal collection of Ruby and Swift-powered scripts designed to streamline my daily workflow as an offensive security professional.
Here you'll find tools, automations, and utilities that help me solve real-world problems, speed up repetitive tasks, and avoid the rabbit holes of manual setup. These scripts range from plugin installers and system tweaks to mobile tooling and reverse engineering helpers β all crafted with care, clarity, and just the right amount of π₯.
This repo isn't meant to be a polished product β it's a living toolbox that grows as I break, fix, and automate things.
APKEnum.rb is a refactored and improved version of the original APKEnum tool, now written in Ruby to fit this repositoryβs language focus. This script automates APK reconnaissance and reverse engineering, extracting URLs, S3 buckets, public IPs, and Google Maps API keys from decompiled APK files.
Key Features:
- Modular, object-oriented Ruby design
- Robust error handling
- Skips binary files to avoid encoding errors
- Scope filtering support
- JSON output for easy integration
Usage:
ruby Ruby/APKEnum.rb -p /path/to/app.apk [-s keyword1,keyword2]What it does:
- Decompiles APKs using apktool
- Scans only text-based files in the decompiled output
- Extracts reconnaissance data relevant to mobile security assessments
Scripts are now organized by language for clarity and maintainability:
βββ Ruby/
β βββ APKEnum.rb # APK reconnaissance and enumeration tool (NEW)
β βββ Gemfile
β βββ Gemfile.lock
β βββ Rakefile
β βββ tasks/
β β βββ radare2.rake
β βββ install_r2lldb.rb
βββ Swift/
β βββ ipa_dump.swift
βββ README.md
Ruby:
# Run the APKEnum script
ruby Ruby/APKEnum.rb -p /path/to/app.apk [-s keyword1,keyword2]
# Or run other Ruby scripts/tasks as before
bundle install
bundle exec rake radare2:r2lldb:install
ruby Ruby/install_r2lldb.rbSwift:
chmod +x Swift/ipa_dump.swift
./Swift/ipa_dump.swift /path/to/App.ipaFeel free to further adjust the README to match your voice or add more technical details as needed!
Sources [1] GitHub - jrcarreiro/offsec-scripts https://github.com/jrcarreiro/offsec-scripts
This is a personal repo, but PRs, ideas, or improvements are always welcome β especially if you speak the language of elegant scripts and useful hacks π
MIT β because good tools should be free to use and share.
Crafted with focus, caffeine, and a little bit of controlled chaos ββοΈ
"Automate the boring. Script the chaos. Hack the planet."