#1Tools for dissecting, understanding, and reverse engineering malicious software behavior.
Kitploit recommended
owasp/cve-lite-cliFast, developer-friendly JS/TS dependency vulnerability scanner with local lockfile scanning, OSV matching, direct vs transitive visibility, --fix,…
ainfosec/fissureThe RF and reverse engineering framework for everyone. Follow and ★ to show your support!
msuiche/elegant-bouncerELEGANTBOUNCER is a detection tool for file-based mobile exploits.
xalgord/xalgorixAutonomous AI pentesting agents — real-time reconnaissance, vulnerability detection, and exploitation orchestration. Go + TypeScript.
pwndbg/pwndbgExploit Development and Reverse Engineering with GDB & LLDB Made Easy
symgraph/idassistmcpStandalone MCP server plugin for IDA Pro.
trailofbits/gosentrySecurity-oriented Go toolchain, focused on state-of-the-art fuzzing capabilities.
hydradragonantivirus/hydradragonantivirusDynamic and static analysis with Real Time Malware Analysis with Antivirus for Windows, including open-source XDR (3 EDR projects), ClamAV, YARA-X,…
capsulerun/vpodLightweight, secure Linux sandboxes for untrusted processes. Runs in the browser and on the server.
pirosap/aquos-r7-ghostlockDevice-specific Linux 5.10 kernel root exploit for Sharp AQUOS R7 (CVE-2026-43499), granting temporary UID 0 with SELinux permissive and an su daemon.
emanuele-f/pcapdroidNo-root network monitor, firewall and PCAP dumper for Android
mytechnotalent/reverse-engineeringA FREE comprehensive reverse engineering tutorial covering x86, x64, 32-bit/64-bit ARM, 8-bit AVR and 32-bit RISC-V architectures.
vigolium/vigoliumVigolium - High-fidelity vulnerability scanner fusing agentic AI with native speed, modularity, and precision
penberg/chimeraSandbox untrusted code with safe access to the host.
ergrelet/windiffTool that allows comparing symbol, type and syscall information of Microsoft Windows binaries across different versions of the OS, using a Web UI…
sheeki03/tirithTerminal security for developers and AI agents. Intercepts homograph URLs, pipe-to-shell, ANSI injection, obfuscated payloads, data exfiltration, and…
knostic/openantOpenAnt from Knostic is the leading open source LLM-based vulnerability discovery product, helping defenders proactively find verified security flaws…
google/kafelA language and library for specifying syscall filtering policies.
