Dynamic Analysis (Sandboxing)

mitmproxy/mitmproxy

An interactive TLS-capable intercepting HTTP proxy for penetration testers and software developers.

d4vinci/scrapling

🕷️ An adaptive Web Scraping framework that handles everything from a single request to a full-scale crawl!

google/oss-fuzz

OSS-Fuzz - continuous fuzzing for open source software.

radareorg/radare2

UNIX-like reverse engineering framework and command-line toolset

firecracker-microvm/firecracker

Secure and fast microVMs for serverless computing.

trufflesecurity/trufflehog

Find, verify, and analyze leaked credentials

mobsf/mobile-security-framework-mobsf

Automated mobile application security testing framework for Android, iOS, and Windows. Performs static and dynamic analysis, malware detection, and…

frida/frida

Main repo for hosting release binaries

sandboxie-plus/sandboxie

Sandboxie Plus & Classic

zaproxy/zaproxy

Open-source web application security scanner for automated vulnerability detection, manual penetration testing, and API security testing with a…

ashishb/android-security-awesome

A collection of android security related resources

rizinorg/cutter

Free and Open Source Reverse Engineering Platform powered by rizin

google/gvisor

Sandboxes containers via a userspace application kernel that intercepts system calls, limits host kernel access, and integrates with…

owasp/mastg

Comprehensive OWASP guide for mobile app security testing, reverse engineering, and verifying MASVS/MASWE weaknesses through static, dynamic, and…

nvidia/skillspector

Security scanner for AI agent skills. Detect vulnerabilities, malicious patterns, security risks, prompt injection, data exfiltration, and…

gojue/ecapture

Capturing SSL/TLS plaintext without a CA certificate using eBPF. Supported on Linux/Android kernels for amd64/arm64.