Code Analysis

commando-x/vuln-bank

Intentionally vulnerable banking platform for practicing web application, API, and AI/LLM security testing, secure code review, and DevSecOps…

wireghoul/graudit

grep rough audit - source code auditing tool

google-github-actions/run-gemini-cli

A GitHub Action invoking the Gemini CLI.

pyupio/safety

Safety checks Python dependencies for known security vulnerabilities and suggests the proper remediations for vulnerabilities detected.

facebook/mariana-trench

A security focused static analysis tool for Android and Java applications.

owasp/pytm

A Pythonic framework for threat modeling

archerysec/archerysec

ASOC, ASPM, DevSecOps, Vulnerability Management Using ArcherySec.

zhangzhuosjtu/web3bugs

Demystifying Exploitable Bugs in Smart Contracts

gmh5225/awesome-llvm-security

Curated collection of LLVM security resources covering binary lifting, code obfuscation, static analysis, symbolic execution, sanitizers, and…

microcosm-cc/bluemonday

bluemonday: a fast golang HTML sanitizer (inspired by the OWASP Java HTML Sanitizer) to scrub user generated content of XSS

viruscamp/luadec

Lua Decompiler for lua 5.1 , 5.2 and 5.3

tellerops/teller

Cloud native secrets management for developers - never leave your command line for secrets.

gaasedelen/lighthouse

A Coverage Explorer for Reverse Engineers

datadog/guarddog

🐍 🔍 GuardDog is a CLI tool to Identify malicious PyPI and npm packages

matterpreter/offensivecsharp

Collection of Offensive C# Tooling

owasp/aisvs

The AI Security Verification Standard (AISVS) focuses on providing developers, architects, and security professionals with a structured checklist to…