Code Analysis

nationalsecurityagency/ghidra

Ghidra is a software reverse engineering (SRE) framework

usestrix/strix

Open-source AI penetration testing tool to find and fix your app’s vulnerabilities.

keygraphhq/shannon

Shannon is an autonomous, white-box AI pentester for web applications and APIs. It analyzes your source code, identifies attack vectors, and executes…

radareorg/radare2

UNIX-like reverse engineering framework and command-line toolset

trufflesecurity/trufflehog

Find, verify, and analyze leaked credentials

icsharpcode/ilspy

.NET Decompiler with support for PDB generation, ReadyToRun, Metadata (&more) - cross-platform!

analysis-tools-dev/static-analysis

Curated directory of static analysis (SAST) tools and linters for programming languages, configs, build tools, and CI, focused on improving code…

frida/frida

Main repo for hosting release binaries

aquasecurity/trivy

Find vulnerabilities, misconfigurations, secrets, SBOM in containers, Kubernetes, code repositories, clouds and more

go-delve/delve

Source-level debugger for Go with CLI, API, and headless modes; supports breakpoints, variable inspection, and execution tracing for efficient…

gitleaks/gitleaks

Fast, open-source static analysis tool for detecting hardcoded secrets like passwords, API keys, and tokens in git repositories, files, and stdin…

facebook/infer

A static analyzer for Java, C, C++, and Objective-C

projectdiscovery/nuclei-templates

Community curated list of templates for the nuclei engine to find security vulnerabilities.

semgrep/semgrep

Lightweight static analysis for many languages. Find bug variants with patterns that look like source code.

github/codeql

CodeQL: the libraries and queries that power security researchers around the world, as well as code scanning in GitHub Advanced Security

google/magika

Fast and accurate AI powered file content types detection