#1Static and dynamic code analysis, SAST, DAST, and code review tools.
Kitploit recommended

CQ, a code security scanner

Security-oriented Go toolchain, focused on state-of-the-art fuzzing capabilities.

Simple and lightweight library that helps to validate SVG files in security manners.

Top-level repository for LFI: Practical, Efficient, and Secure Software-based Sandboxing

CVE-2026-63030, CVE-2026-60137, wp2shell scanner

Maps execution-coverage data onto Ghidra disassembly to highlight visited code paths and accelerate reverse-engineering workflows.

SSLPinDetect is a tool for analyzing Android APKs to detect SSL pinning implementations by scanning for known patterns in decompiled code. It helps…

Claude Code and Codex skill for finding potentially vulnerable Brotli copies and guiding updates for CVE-2026-111497.

RCE exploit toolkit for CVE-2025-55182 and CVE-2025-66478 in React Server Components. Includes multiple exploit variants, detection scripts, a…

Curated Semgrep rule repository for GitLab SAST, providing static analysis patterns to detect security vulnerabilities across multiple programming…

The Web Exploit Detector is a Node.js application used to detect possible infections, malicious code and suspicious files in web hosting environments

PE Crypter written in Nim

PulseAPK is a WPF frontend for apktool and uber-signer with drag-and-drop support, live decompilation output, smali analysis, and integrated APK…

realtime cross-tool collaborative reverse engineering

Framework-aware static code analysis tool for automated source code review with platform-specific rules, taint analysis, effort estimation, and…

Open-source security audits for Supabase: a read-only MCP server, a CLI agent and a Claude Skill. Finds RLS misconfigurations, exposed keys and risky…

Log4j 漏洞本地检测脚本。 Scan all java processes on your host to check whether it's affected by log4j2 remote code execution vulnerability (CVE-2021-45046)

This repository contains PoC for CVE-2024-7965. This is the vulnerability in the V8 that occurs only within ARM64.