Dynamic Code Analysis (DAST)

SafeLine

chaitin/safeline

Self-hosted WAF and reverse proxy that filters malicious HTTP traffic, blocks SQL injection, XSS, and bot attacks, with rate limiting and dynamic…

vulnerability-scannersdynamic-code-analysisids-ips-evasion+8

22.3k

MobileApp-Pentest-Cheatsheet

tanprathan/mobileapp-pentest-cheatsheet

The Mobile App Pentest cheat sheet was created to provide concise collection of high value information on specific mobile application penetration…

android-securitypacket-sniffing-analysisstatic-analysis+9

5.3k2 years ago

dalfox

hahwul/dalfox

Fast XSS scanner with parameter analysis, WAF fingerprinting, and DOM/AST verification. Supports reflected, stored, and DOM-based XSS detection via…

web-vulnerability-scannersvulnerability-analysisdynamic-code-analysis+5

5.2k3 days ago

security-audit-skill

cloudflare/security-audit-skill

A coding-agent skill for multi-phase security audits with independently verified, machine-readable findings

static-analysisvulnerability-analysiscode-analysis+4

2.8k1 month ago

Frida-Labs

dere-ad2001/frida-labs

The repo contains a series of challenges for learning Frida for Android Exploitation.

android-securitydynamic-code-analysisexploitation+6

1.3k5 months ago

http-garden

narfindustries/http-garden

Differential testing framework for HTTP implementations

vulnerability-analysisdynamic-code-analysisweb-security+1

9412 months ago

pyrasite

lmacken/pyrasite

Inject code into running Python processes

general-purpose-utilitiesdynamic-code-analysisscripting-automation+1

2.9k1 year ago

oss-fuzz-gen

google/oss-fuzz-gen

LLM powered fuzzing via OSS-Fuzz.

vulnerability-analysisdynamic-code-analysisfuzzing+3

1.4k5 months ago

SSTImap

vladko312/sstimap

Automatic SSTI detection tool with interactive interface

vulnerability-scannerspayload-generationcode-analysis+6

1.6k3 months ago

WinDbg-Samples

microsoft/windbg-samples

Sample extensions, scripts, and API uses for WinDbg.

dynamic-code-analysisreverse-engineeringscripting-automation+2

8217 months ago

patching

gaasedelen/patching

An Interactive Binary Patching Plugin for IDA Pro

static-analysisdynamic-code-analysisexploitation+8

1.3k1 year ago

smack

smackers/smack

Modular software verification toolchain that translates LLVM IR into Boogie intermediate verification language for bounded and experimental unbounded…

static-analysiscode-analysisdynamic-code-analysis+1

4481 month ago

HookCase

steven-michaud/hookcase

Tool for reverse engineering macOS/OS X

dynamic-code-analysisreverse-engineeringdebuggers+1

8393 months ago

OffensiveDLR

byt3bl33d3r/offensivedlr

Toolbox containing research notes & PoC code for weaponizing .NET's DLR

privilege-escalationpersistence-mechanismscode-analysis+9

5264 years ago

NtTrace

rogerorr/nttrace

An strace-like program for the Windows 'native' API

dynamic-code-analysisreverse-engineeringapi-security-testing+2

38829 days ago

vscode-frida

chichou/vscode-frida

VSCode extension for Frida-based mobile reverse engineering: runtime class/module inspection, Java/ObjC/native hook generation, autocomplete, and…

android-securityios-securitydynamic-code-analysis+5

5951 month ago

AndBug

swdunlop/andbug

Scriptable debugger for Android Dalvik VM using JDWP/DDM interfaces to hook methods, inspect process state, and modify runtime behavior without…

android-securitydynamic-code-analysisreverse-engineering+2

59911 years ago

ReverseKit

zer0condition/reversekit

x64 Dynamic Reverse Engineering Toolkit

dynamic-code-analysisreverse-engineeringmalware-analysis+1

7713 years ago