Dynamic Code Analysis (DAST)

open-flaw/cve-2026-56848

Exploit PoC for CVE-2026-56848, a Node.js HTTP/2 heap-use-after-free that allows remote unauthenticated DoS. Includes raw-socket trigger, ASan build…

ddudle/ctxdebug

MCP-powered reverse engineering platform connecting WinDbg, IDA Pro & x64dbg with 160+ AI-accessible debugging and analysis tools.

chaitin/safeline

Self-hosted WAF and reverse proxy that filters malicious HTTP traffic, blocks SQL injection, XSS, and bot attacks, with rate limiting and dynamic…

de4dot/de4dot

.NET deobfuscator and unpacker.

tanprathan/mobileapp-pentest-cheatsheet

The Mobile App Pentest cheat sheet was created to provide concise collection of high value information on specific mobile application penetration…

hahwul/dalfox

Fast XSS scanner with parameter analysis, WAF fingerprinting, and DOM/AST verification. Supports reflected, stored, and DOM-based XSS detection via…

lmacken/pyrasite

Inject code into running Python processes

cloudflare/security-audit-skill

A coding-agent skill for multi-phase security audits with independently verified, machine-readable findings

vladko312/sstimap

Automatic SSTI detection tool with interactive interface

google/oss-fuzz-gen

LLM powered fuzzing via OSS-Fuzz.

dere-ad2001/frida-labs

The repo contains a series of challenges for learning Frida for Android Exploitation.

gaasedelen/patching

An Interactive Binary Patching Plugin for IDA Pro

narfindustries/http-garden

Differential testing framework for HTTP implementations

dwisiswant0/findom-xss

A fast DOM based XSS vulnerability scanner with simplicity.

steven-michaud/hookcase

Tool for reverse engineering macOS/OS X

microsoft/windbg-samples

Sample extensions, scripts, and API uses for WinDbg.

zer0condition/reversekit

x64 Dynamic Reverse Engineering Toolkit