#1Static and dynamic code analysis, SAST, DAST, and code review tools.
Kitploit recommended
ubfx/bindiffhelperGhidra Extension to integrate BinDiff for function matching
josehelps/git-wild-huntA tool to hunt for credentials in github wild AKA git*hunt
designsecurity/progpilotPHP static application security testing (SAST) tool that performs taint analysis to detect XSS, SQL injection, and other vulnerabilities using…
sourcecode-ai/auraPython source code auditing and static analysis on a large scale
awslabs/threat-modeling-mcp-serverMCP server for structured STRIDE-based threat modeling with automatic code validation, business context analysis, and comprehensive report generation…
cve-search/git-vuln-finderFinding potential software vulnerabilities from git commit messages
dmaivel/covirtAn x86-64 code virtualizer for VM based obfuscation
praetorian-inc/trajanA multi-platform CI/CD vulnerability detection and attack automation tool for identifying security weaknesses in pipeline configurations.
rwxstoned/ldrshuffleCode execution/injection technique using DLL PEB module structure manipulation
seqra/opentaintFormal inter-procedural taint analysis engine for application security. Tracks untrusted data across function boundaries, persistence layers, and…
atomdrift-project/scan0-day malware detection for binaries, source & scripts (that doesn't suck)
abstractengine/pentest-muse-cliAI-powered assistant for penetration testers that generates payloads, analyzes code, performs reconnaissance, and executes command-line actions to…
florianmattana/sass-kingReverse engineering NVIDIA SASS instruction dictionary, kernel audits and pattern recognition across GPU architectures.
nikic/php-fuzzerEdge-coverage-guided fuzzer for PHP libraries that detects bugs via crashes, timeouts, and warnings. Supports corpus management, crash minimization,…
blacksnufkin/novaldrThreadless Module Stomping In Rust with some features (In memory of those murdered in the Nova party massacre)
connormcgarr/littlecorporalLittleCorporal: A C# Automated Maldoc Generator
ropfuscator/ropfuscatorROPfuscator is a fine-grained code obfuscation framework for C/C++ programs using ROP (return-oriented programming).
jayu/rev-depDependency analysis and optimization toolkit for modern JavaScript and TypeScript codebases. Enforce dependency graph hygiene and remove unused code…
