#1Static and dynamic code analysis, SAST, DAST, and code review tools.
Kitploit recommended
emicoecommerce/magento-apsb22-48-security-patchesThis repository contains potential security patches for the Magento APSB22-48 and CVE-2022-35698 security vulnerability
josue87/givemesecretsUse regular expressions to get sensitive information from a given repository (GitHub, pip or npm).
dr4k0nia/tooling-playgroundA collection of small scripts and tools for deobfuscation and malware analysis.
seanwrightsec/cve-2022-42889-pocProof of Concept for the Apache commons-text vulnerability CVE-2022-42889.
rakosn1cek/oversightA lightweight security auditor and sandbox for shell scripts. Oversight combines a Static Analysis engine (Rust) with Dynamic Enforcement (Linux…
raoufmaklouf/jsecretFast Go-based static scanner for detecting sensitive data (API keys, tokens, passwords) in JavaScript files and source code using regex patterns.
eset/wslink-vm-analyzerWslinkVMAnalyzer is a tool to facilitate analysis of code protected by a virtual machine featured in Wslink malware
cookiengineer/exocompSelf-hosted multi-agent environment for Go with LLM-powered pentesting agents (exploiter, reverser, threathunter, webscanner) that automate…
aethervm/aethervmLLVM-native binary analysis and emulation platform that lifts AArch64 and x86_64 machine code to LLVM IR for instrumentation, deobfuscation, and…
brennhill/sloppy-joeShields against supply-chain, slopsquatting, and typosquatting attacks from dependencies and code.
makerchecker/makercheckerOpen-source security gateway & static scanner for AI agents. Enforce role-based access control (RBAC), human-in-the-loop approvals, segregation of…
muhammadwaseem29/cve-2025-53770Unauthenticated Remote Code Execution via unsafe deserialization in Microsoft SharePoint Server (CVE-2025-53770)
codeshield-security/log4jshell-bytecode-detectorLocal Bytecode Scanner for the Log4JShell Vulnerability (CVE-2021-44228)
magicming200/cve-2020-10199_cve-2020-10204CVE-2020-10199、CVE-2020-10204漏洞一键检测工具，图形化界面。CVE-2020-10199 and CVE-2020-10204 Vul Tool with GUI.
ariary/trojansourcefinder🔎 Help find Trojan Source vulnerability in code 👀 . Useful for code review in project with multiple collaborators (CI/CD)
m4sh-wacker/cve-2026-3891-pix-for-woocommerce-plugin-exploitPoC for CVE-2026-3891 — Unauthenticated Arbitrary File Upload leading to Remote Code Execution in Pix for WooCommerce <= 1.5.0
ab1gale/phpcms-2008-cve-2018-19127Proof-of-concept exploit for CVE-2018-19127 in phpcms 2008, demonstrating remote code execution via crafted template parameter leading to webshell…
s4dhul4bs/vimana-frameworkVimana is an experimental security tool that aims to provide resources for auditing Python web applications.
