#1Static and dynamic code analysis, SAST, DAST, and code review tools.
Kitploit recommended
agrawalsmart7/scodescannerCommand-line static analysis scanner that detects critical vulnerabilities in PHP and YAML source code using custom semgrep rules, with Jira and…
c53elyas/cve-2023-33733Detailed technical write-up and proof-of-concept exploit for CVE-2023-33733, a remote code execution vulnerability in the Reportlab Python library…
firelock-ai/kinSemantic graph-based version control for AI-written code. Tracks entities and relations instead of file diffs, enabling blast radius analysis, shadow…
soxoj/gitcolombo🧬 Extract and analyze contributors info from git repos
masahiro331/cve-2019-10758Proof-of-concept exploit for CVE-2019-10758, demonstrating remote code execution in mongo-express via crafted document injection. Includes curl and…
mobb-dev/bugsyAutomatic security vulnerability remediation for your code.
luelueking/cve-2022-25845-in-springCVE-2022-25845 (fastjson 1.2.80) exploit for Spring environments with step-by-step PoC, file read, and arbitrary file write via Jackson/commons-io…
67-6f-64/antioreans-codedevirtualizerIDA 6.8 plugin that devirtualizes Themida's FISH virtual machine (2.2.5.0-2.2.7.0), restoring native code from protected binaries for reverse…
nccgroup/ccsRegex-based scanner for detecting hard-coded credentials in codebases, designed for CI/CD integration with suppression comment support and low…
r00tkitsmm/pishiPishi is a code coverage tool like kcov for macOS.
chrilleweb/dotenv-diffValidate environment variable usage in codebase
calebstewart/peachSimple vulnerability scanning framework
vladko312/research_successful_errorsWhitepaper introducing Error-Based and Boolean Error-Based Blind techniques for SSTI and Code Injection, with universal payloads for six programming…
soheilkhodayari/jawJAW: A Graph-based Security Analysis Framework for Client-side JavaScript
jonwiggins/xmloxideA pure Rust reimplementation of libxml2
elevenpaths/netoNeto | A tool to analyse browser extensions
michalbednarski/abxoverflowWriteup and exploit for CVE-2024-34740, integer overflow in Android's BinaryXmlSerializer to system_server file write and then to system_server code…
momenbasel/malware-checkStatic and dynamic analysis tool for detecting malicious code, suspicious binaries, and privacy violations
