#1Tools for analyzing application behavior during runtime to find security vulnerabilities.
Kitploit recommended
projectdiscovery/nucleiFast YAML-based vulnerability scanner with template-driven detection engine for automated security testing across web apps, APIs, networks, DNS, and…
chaitin/safelineSelf-hosted WAF and reverse proxy that filters malicious HTTP traffic, blocks SQL injection, XSS, and bot attacks, with rate limiting and dynamic…
ffuf/ffufFast web fuzzer written in Go
projectdiscovery/katanaA next-generation crawling and spidering framework.
atomdrift-project/scan0-day malware detection for binaries, source & scripts (that doesn't suck)
sqlmapproject/sqlmapAutomatic SQL injection and database takeover tool
jaeles-project/jaelesThe Swiss Army knife for automated Web Application Testing
ch0pin/rdxA native APK and DEX decompiler written in Rust
projectdiscovery/httpxFast, multi-probe HTTP toolkit for reconnaissance and information gathering. Probes TLS, CSP, headers, tech stack, and CDN. Supports matchers,…
urbanadventurer/whatwebNext generation web scanner
mongodb/kingfisherDetect secrets + live validation. Map blast radius. Revoke fast. Use the CLI or embed in Rust and Python.
mg1937/ascFast Android APK decompiler front-end that queries compiled DEX artifacts directly, extracting classes and cross-references in milliseconds without…
wapiti-scanner/wapitiWeb vulnerability scanner written in Python3
wpscanteam/wpscanWordPress security scanner that detects vulnerabilities, enumerates plugins/themes/users, and checks for weak passwords. Integrates with the WPScan…
vladko312/sstimapAutomatic SSTI detection tool with interactive interface
whatswrongandwhy/ptraceLinux ptrace-based process tracing and debugging utility for inspecting system calls, memory, and program execution flow.
sunghoojung/reverse-engineering-browserLocal-first macOS research browser built on a custom Brave build that captures network traffic, fingerprints, scripts, and runtime evidence for…
fkie-cad/sandroid_dexray-interceptA Android malware analysis tool that creates comprehensive runtime profiles by hooking into application behavior across cryptography, file systems,…
