#1Static and dynamic code analysis, SAST, DAST, and code review tools.
Kitploit recommended
preflightsh/preflightGo-based CLI tool that scans codebases for launch readiness, detecting missing configuration, security hygiene issues, secret leaks, and integration…
arsbr/veritensorThe Anti-Virus for AI Artifacts & RAG Firewall. A static analysis tool scanning Models and Notebooks for RCE, Datasets and RAG docs for Data…
nccgroup/cqFast code security scanner designed for manual security code review by experts. Outputs line-referenced findings to text files for easy filtering and…
binsec/xyntiaXyntia, the black-box deobfuscator
llvmparty/strigaExperimental x86-64 to LLVM IR lifter in Python that translates machine code into analyzable IR for reverse engineering, optimization, and VM handler…
owasp/agent-security-regression-harnessExecutable security regression testing for agentic applications and MCP-integrated systems.
petrusviet/cve-2021-39115Template Injection in Email Templates leads to code execution on Jira Service Management Server
momenbasel/vulnhawkAI-powered SAST scanner that finds auth bypass, IDOR, and logic bugs Semgrep/CodeQL miss. Free GitHub Action. Supports Python, JS/TS, Go, PHP, Ruby.
jas502n/jackson-cve-2020-8840FasterXML/jackson-databind 远程代码执行漏洞
brianwrf/wordpress_4.9.8_rce_pocA simple PoC for WordPress RCE (author priviledge), refer to CVE-2019-8942 and CVE-2019-8943.
owasp/cwe-toolA command line CWE discovery tool based on OWASP / CAPSEC database of Common Weakness Enumeration.
adam-atlassoftware/krakenReverse-engineering workbench built on Ghidra's decompiler with a native Java-free engine, AI-assisted function analysis, byte patching, sandboxed…
owasp/tcasvsOWASP Thick Client Application Security Verification Standard
marven11/cve-2024-28397-js2py-sandbox-escapeCVE-2024-28397: js2py sandbox escape, bypass pyimport restriction.
pelock/jobfuscatorObfuscates Java source code to protect against reverse engineering, decompilation, and IP theft. Renames variables/methods, encrypts strings, and…
nightwatchcybersecurity/gitbleed_toolsShell scripts to clone and mirror Git repositories, compute deltas, and run gitleaks to detect secrets hidden in deleted or reset commits.
y4sec-team/cve-2023-21939JDK CVE-2023-21939
sqlsure/sqlsureSemantic inspector for SQL — catches fan-out double-counting, additivity violations, wrong join keys, and policy breaches before the query runs.…
