#1Tools for dissecting, understanding, and reverse engineering malicious software behavior.
Kitploit recommended
pq-code-package/mlkem-nativeSecure, fast, and portable C90 implementation of ML-KEM / FIPS 203
magicsword-io/loldriversCurated database of vulnerable and malicious Windows drivers with YARA, Sigma, ClamAV, and Sysmon detection rules for proactive threat hunting and…
google/clusterfuzzScalable fuzzing infrastructure with coverage-guided engines (libFuzzer, AFL, Honggfuzz), automated crash deduplication, bug filing, and regression…
stuxctf/slythestxMobile app security auditing tool focused on automating SAST analysis, identifying underlying technologies (React Native, Flutter, Xamarin, native),…
snyk/agent-scanSecurity scanner for AI agents, MCP servers and agent skills.
anchore/grypeA vulnerability scanner for container images and filesystems
0xdea/oneiromancerReverse engineering assistant that uses a locally running LLM to aid with pseudocode analysis.
ev-flow/quark-engineRule-based Android malware scoring engine that analyzes APKs using static and dynamic analysis to detect vulnerabilities, identify malware families,…
ddudle/ctxdebugMCP-powered reverse engineering platform connecting WinDbg, IDA Pro & x64dbg with 160+ AI-accessible debugging and analysis tools.
xiaoqimikko/jetty-line-checkCVE-2026-2332 and 4 more 2026 Jetty CVEs: which does your Jetty (or Spring Boot) build hit, and does the fixed version Jetty names even exist on…
crissyfield/super-trouperMCP server exposing Frida instrumentation as tools for coding agents to connect to devices, inspect processes, manage sessions, and load JavaScript…
misp/misp-objectsCurated JSON object templates that define MISP attributes and relationship types for structured threat intelligence sharing and interoperable IOC…
erocarrera/pefilepefile is a Python module to read and work with PE (Portable Executable) files
pmd/pmdAn extensible multilanguage static code analyzer.
owasp-noir/noirHunt every Endpoint in your code, expose Shadow APIs, map the Attack Surface.
misp/misp-galaxyClusters and elements to attach to MISP events or attributes (like threat actors)
anchore/syftCLI tool and library for generating a Software Bill of Materials from container images and filesystems
presidentbeef/brakemanA static analysis security vulnerability scanner for Ruby on Rails applications
