#2Tools for observing malware behavior in isolated environments to understand its actions and impact.
Kitploit recommended
stuxctf/slythestxMobile app security auditing tool focused on automating SAST analysis, identifying underlying technologies (React Native, Flutter, Xamarin, native),…
mitmproxy/mitmproxyAn interactive TLS-capable intercepting HTTP proxy for penetration testers and software developers.
d4vinci/scraplingAdaptive web scraping framework with anti-bot bypass, automatic element relocation, concurrent crawling, proxy rotation, and browser automation for…
trufflesecurity/trufflehogFind, verify, and analyze leaked credentials
konloch/bytecode-viewerA Java 8+ Jar & Android APK Reverse Engineering Suite (Decompiler, Editor, Debugger & More)
nvidia/skillspectorSecurity scanner for AI agent skills. Detect vulnerabilities, malicious patterns, security risks, prompt injection, data exfiltration, and…
zaproxy/zap-hudThe ZAP Heads Up Display (HUD)
idiom/pftriagePython tool and library to help analyze files during malware triage and analysis.
security-prince/resources-for-application-securitySome good resources for getting started with application security
vaib25vicky/awesome-mobile-securityAn effort to build a single place for all useful android and iOS security related stuff. All references and tools belong to their respective owners.…
x64dbg/x64dbgAn open-source user mode debugger for Windows. Optimized for reverse engineering and malware analysis.
hxsecurity/dongtaiOpen-source Interactive Application Security Testing (IAST) tool that passively instruments Java applications to detect vulnerabilities and…
ggfuchsi-oss/spectrida-reverse_engineering_stackParallel IDA Pro binary analysis with AI-powered function naming, Neo4j knowledge graph, and phantomrt emulation/hooking/fuzzing engine for automated…
mobsf/mobile-security-framework-mobsfAutomated mobile application security testing framework for Android, iOS, and Windows. Performs static and dynamic analysis, malware detection, and…
lfi-project/lfiTop-level repository for LFI: Practical, Efficient, and Secure Software-based Sandboxing
aflplusplus/aflplusplusThe fuzzer afl++ is afl with community patches, qemu 5.1 upgrade, collision-free coverage, enhanced laf-intel & redqueen, AFLfast++ power schedules,…
anthropic-experimental/sandbox-runtimeA lightweight sandboxing tool for enforcing filesystem and network restrictions on arbitrary processes at the OS level, without requiring a container.
0vercl0k/wtfDistributed, code-coverage guided snapshot-based fuzzer for user and kernel-mode targets on Windows and Linux, with emulator and hypervisor backends.
