#1Tools for examining malware binaries and code without executing them (e.g., disassemblers, unpackers).
Kitploit recommended
owasp/java-html-sanitizerTakes third-party HTML and produces HTML that is safe to embed in your web application. Fast and easy to configure.
owasp/docksecAI-powered Docker security scanner that explains vulnerabilities in plain English. An OWASP Lab Project.
b2r2-org/b2r2B2R2 is a fully managed binary analysis framework written in F#. It provides a rich set of algorithms, functions, and tools for reverse engineering,…
huhusmang/awesome-llms-for-vulnerability-detectionThe community's most comprehensive, continuously-updated index of research on Large Language Models for software vulnerability detection — papers…
z3prover/z3High-performance SMT solver for automated theorem proving, constraint solving, and program verification. Supports multiple theories and language…
zizmorcore/zizmorStatic analysis tool for CI/CD systems that detects and fixes security issues in GitHub Actions, Dependabot, and pre-commit configurations, including…
bethington/ghidra-mcpMCP server bridging Ghidra's reverse engineering with AI tools: 256 tools for decompilation, P-code emulation, live debugging, data flow analysis,…
stackrox/kube-linterKubeLinter is a static analysis tool that checks Kubernetes YAML files and Helm charts to ensure the applications represented in them adhere to best…
bridgecrewio/checkovStatic analysis tool for infrastructure as code that detects cloud misconfigurations, vulnerabilities, and secrets across Terraform, Kubernetes,…
owasp-noir/noirHunt every Endpoint in your code, expose Shadow APIs, map the Attack Surface.
radareorg/radare2UNIX-like reverse engineering framework and command-line toolset
nuguardai/nuguardopensource repo for validating agentic AI applications: redteam, behavior, supply-chain, static analysis
hydradragonantivirus/hydradragonantivirusDynamic and static analysis with Real Time Malware Analysis with Antivirus for Windows, including open-source XDR (3 EDR projects), ClamAV, YARA-X,…
praetorian-inc/titusHigh-performance secrets scanner. CLI, Go library, Burp Suite extension, and Chrome extension. 487 detection rules with live credential validation.
mayank729/cve-2025-55182-scanner🔍 Scan for CVE-2025-55182 risks in React Server Components with this non-intrusive tool that helps detect critical vulnerabilities in your…
icsharpcode/ilspy.NET Decompiler with support for PDB generation, ReadyToRun, Metadata (&more) - cross-platform!
x64dbg/x64dbgAn open-source user mode debugger for Windows. Optimized for reverse engineering and malware analysis.
sonarsource/sonarqubeCode-quality and static-analysis platform with quality gates, multi-language scanning, and security-focused rules to detect vulnerabilities and…
