#1Static and dynamic code analysis, SAST, DAST, and code review tools.
Kitploit recommended
nuguardai/nuguardopensource repo for validating agentic AI applications: redteam, behavior, supply-chain, static analysis
slowql/slowqlNext-generation SQL static analyzer written in Rust. 282+ rules. Zero false positives. Security, performance, reliability, cost, compliance, quality.…
a0xnirudh/kurukshetraKurukshetra - A framework for teaching secure coding by means of interactive problem solving.
elfmaster/mayaHighly advanced Linux anti-exploitation and anti-tamper binary protector for ELF.
rasetsuu/vmp-devirtTrace-assisted VMProtect devirtualization research platform: version front-ends feed a shared Remill/LLVM backend to lift handlers, recover dataflow,…
papermtn/gitlab-watchmanFinding exposed secrets and personal data in GitLab
nccgroup/goatcasinoThis is an intentionally vulnerable smart contract truffle deployment aimed at allowing those interested in smart contract security to exploit a wide…
avito-tech/deepsecretsStatic analysis tool that scans source code for hardcoded secrets, API keys, and credentials using semantic understanding of code context.
faloker/purifyAll-in-one tool for managing vulnerability reports from AppSec pipelines
synacktiv/bipObject-oriented Python API to simplify interaction with IDA for reverse engineering, enabling plugin development and automation of disassembly…
rog3rsm1th/frelatageCoverage-based fuzzer for python applications
we5ter/flerkenA Solution For Cross-Platform Obfuscated Commands Detection presented on CIS2019 China. 动静态Bash/CMD/PowerShell命令混淆检测框架 - CIS 2019大会
owasp/owasp-scsOWASP Smart Contract Security (SCS) Project
nstarke/egodeathA JavaScript Obfuscator based on Cryptographic Indistinguishability Obfuscation techniques
opensourcemalware/polinriderTechnical dossier on the DPRK-linked PolinRider supply-chain attack, documenting obfuscated JS payload injection, git history manipulation, C2…
nollium/cve-2024-9264Exploit for Grafana arbitrary file-read and RCE (CVE-2024-9264)
neo23x0/yaraqaYARA rule analyzer to improve rule quality and performance
