#1Tools for analyzing application behavior during runtime to find security vulnerabilities.
Kitploit recommended
rust-fuzz/cargo-fuzzCargo subcommand for coverage-guided Rust fuzzing with libFuzzer: create and run fuzz targets, minimize failures and corpora, and report coverage.
narfindustries/http-gardenDifferential testing framework for HTTP implementations
google/oss-fuzz-genLLM powered fuzzing via OSS-Fuzz.
gaasedelen/patchingAn Interactive Binary Patching Plugin for IDA Pro
splx-ai/agentic-radarA security scanner for your LLM agentic workflows
steven-michaud/hookcaseTool for reverse engineering macOS/OS X
chichou/vscode-fridaUnofficial frida extension for VSCode
angorafuzzer/angoraCoverage-guided fuzzer that uses taint tracking and scalar optimization to solve path constraints without symbolic execution, improving branch…
cc1a2b/jshunterjshunter is a command-line tool designed for analyzing JavaScript files and extracting endpoints. This tool specializes in identifying sensitive…
byt3bl33d3r/offensivedlrToolbox containing research notes & PoC code for weaponizing .NET's DLR
dolevf/graphw00fGraphQL server engine fingerprinting tool that sends benign and malformed queries to identify backend technology and assess security defenses via the…
smackers/smackModular software verification toolchain that translates LLVM IR into Boogie intermediate verification language for bounded and experimental unbounded…
trailofbits/polytrackerAn LLVM-based instrumentation tool for universal taint tracking, dataflow analysis, and tracing.
ghostvectoracademy/dllhijackhunterAutomated DLL Hijacking Discovery, Validation, and Confirmation. Turning local misconfigurations into weaponized, confirmed attack paths.
swdunlop/andbugScriptable debugger for Android Dalvik VM using JDWP/DDM interfaces to hook methods, inspect process state, and modify runtime behavior without…
zer0condition/reversekitx64 Dynamic Reverse Engineering Toolkit
ejfkdev/ddcAndroid DEX → Java decompiler in Rust, built for speed — full apps in seconds, queries in milliseconds. Progressive analysis, javac-verified output,…
fuzzysecurity/fermionFermion, an electron wrapper for Frida & Monaco.
