#1Tools for examining malware binaries and code without executing them (e.g., disassemblers, unpackers).
Kitploit recommended
emproof-com/workshop_firmware_reverse_engineeringWorkshop on firmware reverse engineering
sslmate/go-pkcs12Go library for encoding and decoding PKCS#12 files
last-emo-boy/rikuneMCP server for reverse engineering Windows executables and binary formats. Combines static triage, Ghidra-assisted function recovery, plugin-driven…
voidsec/driverbuddyreloadedDriver Buddy Reloaded is an IDA Pro Python plugin that helps automate some tedious Windows Kernel Drivers reverse engineering tasks
elttam/semgrep-rulesStatic analysis security rules for vulnerability detection and audit-focused code review across Java, Go, Python, C#, Kotlin, PHP, Kubernetes, and…
ex0dus-0x/fuzzableStatic analysis framework that identifies fuzzable function targets in source code and binaries, generates harness templates, and integrates with…
fox-it/log4j-finderFind vulnerable Log4j2 versions on disk and also inside Java Archive Files (Log4Shell CVE-2021-44228, CVE-2021-45046, CVE-2021-45105)
check-spelling/check-spellingSpelling checker action to check spelling in repositories / pull requests / commits
corgea/sighthoundTree-sitter based static vulnerability scanner with pattern matching and taint-flow analysis for multi-language source code. Outputs findings as…
weareaisle/nano-analyzerA minimal LLM-powered zero-day vulnerability scanner by AISLE.
shinthink/blitzstrikeMCP server packaging a three-tier penetration-testing methodology: attack-surface reconnaissance, source-to-sink static analysis, and live finding…
biniamf/ai-reverse-engineeringAI-Assisted Reverse Engineering with Ghidra
jetp1ane/callistoAutomated binary vulnerability analysis tool that decompiles executables via Ghidra, scans pseudo-C code with Semgrep, and validates findings using…
fr0gger/iatelligenceIATelligence is a Python script that will extract the IAT of a PE file and request GPT to get more information about the API and the ATT&CK matrix…
nccgroup/susanrttiAnother RTTI Parsing IDA plugin
netspooky/inhaleA malware analysis and classification tool.
yalcinyolalan/wssatWEB SERVICE SECURITY ASSESSMENT TOOL
0sec-labs/foxguardA fast universal code security scanner, written in Rust. Batteries included: supports 14 languages, TUI for triage, secrets, post-quantum audits,…
