#1Tools for analyzing application behavior during runtime to find security vulnerabilities.
Kitploit recommended
whatswrongandwhy/ptraceLinux ptrace-based process tracing and debugging utility for inspecting system calls, memory, and program execution flow.
raka200juta/28458Python exploit script for CVE-2020-28458, a prototype pollution vulnerability in DataTables. It sends crafted payloads to target URLs, supports proxy…
tinopreter/docviewerexploitappThis is an Exploit App I made when solving the DocumentViewer challenge (CVE-2021-40724) from MobileHackingLab. It will download a libdocviewe_pro.so…
shoucheng3/x-stream__xstream_cve-2021-21345_1-4-15Java XML serialization library with a focus on CVE-2021-21345 exploit analysis and deserialization vulnerability testing for web applications.
shoucheng3/esapi__esapi-java-legacy_cve-2022-23457_2-2-3-1Enterprise Security API library providing security controls for Java web applications, including authentication, access control, input validation,…
abubakar-shahid/cve-2024-36886Academic research on N-Day Linux kernel vulnerabilities, analyzing CVE-2024-36886 in the TIPC networking subsystem, lifecycle, impact, and mitigation…
hupe1980/cve-2021-3129Laravel debug mode - Remote Code Execution (RCE)
gmh5225/frida-stalker-ntstracefrida-stalker based system call tracer on windows(x64).
veridiff/veridiffDynamic branch-divergence finder for native code -- traces two Frida executions and finds the exact instruction where they diverge.
ylca0/idalib-cliAgent-native CLI wrapping IDA Pro IDALib for stateless, JSON-output binary analysis: disassembly, Hex-Rays decompilation, CFG, xrefs, strings, and…
anonmoty/xxstrikeXSStrike based XSS scanner with custom features. Detects XSS vulnerabilities in web applications.
gmh5225/enigma-C++ reimplementation of Ghidra's analytical core without JVM dependencies, providing embeddable binary analysis, Pcode/Sleigh foundations, and…
trailofbits/umbertoLibrary and CLI for mutating structured data (JSON, XML, X.509) to support grammar-based fuzzing, with multiple mutation strategies and integration…
aftermathlabs/vmp2Unpack and deobfuscate VMProtect 2 protected binaries with an emulation-based VM explorer, handler profiler, and experimental LLVM recompiler for…
de4dot/de4dot.NET deobfuscator and unpacker.
dwisiswant0/findom-xssA fast DOM based XSS vulnerability scanner with simplicity.
google/kernel-sanitizersLinux Kernel Sanitizers, fast bug-detectors for the Linux kernel
