Dynamic Analysis (Sandboxing)

mitmproxy/mitmproxy

An interactive TLS-capable intercepting HTTP proxy for penetration testers and software developers.

d4vinci/scrapling

Adaptive web scraping framework with anti-bot bypass, automatic element relocation, concurrent crawling, proxy rotation, and browser automation for…

google/oss-fuzz

OSS-Fuzz - continuous fuzzing for open source software.

radareorg/radare2

UNIX-like reverse engineering framework and command-line toolset

firecracker-microvm/firecracker

Secure and fast microVMs for serverless computing.

trufflesecurity/trufflehog

Find, verify, and analyze leaked credentials

frida/frida

Main repo for hosting release binaries

mobsf/mobile-security-framework-mobsf

Automated mobile application security testing framework for Android, iOS, and Windows. Performs static and dynamic analysis, malware detection, and…

ashishb/android-security-awesome

A collection of android security related resources

zaproxy/zaproxy

Open-source web application security scanner for automated vulnerability detection, manual penetration testing, and API security testing with a…

sandboxie-plus/sandboxie

Sandboxie Plus & Classic

rizinorg/cutter

Free and Open Source Reverse Engineering Platform powered by rizin

google/gvisor

Sandboxes containers via a userspace application kernel that intercepts system calls, limits host kernel access, and integrates with…

google/syzkaller

Unsupervised coverage-guided kernel fuzzer for Linux and major OS kernels; automatically discovers security vulnerabilities through intelligent…

ytisf/thezoo

Curated repository of live malware samples and source code for educational malware analysis and research, with an organized database and CLI tools…

owasp/mastg

Comprehensive OWASP guide for mobile app security testing, reverse engineering, and verifying MASVS/MASWE weaknesses through static, dynamic, and…