#1Tools for examining malware binaries and code without executing them (e.g., disassemblers, unpackers).
Kitploit recommended
amenti-labs/openentropyOpen-source entropy harvesting from unconventional hardware sources. Rust + Python SDK.
0p4n1k/noctyraAST-based Python code transformation & deobfuscation framework
adamsjack711-ux/pkgxrayPre-install security for AI agents, npm packages, and MCP servers. Zero-dep local static analysis; normal scans never execute package code.
murphysecurity/libwebp-checkerA tool for finding vulnerable libwebp(CVE-2023-4863)
stuxctf/mhfMobile Helper Framework (mhf) is a tool that automates the process of identifying the framework/technology used to create a mobile application.…
afine-com/glassworm-hunterDetects GlassWorm supply chain attack payloads by scanning VS Code extensions, npm/PyPI packages, and git repos for invisible Unicode payloads,…
malwaretech/msdia-x64Enable Microsoft PDB support in Ghidra without installing Visual Studio
happytotoro116/ghidra-llm-pipelineDeterministic PyGhidra extraction, triage, and local LLM compiler-backend pipeline for C reimplementation.
atiilla/cve-2026-21852-pocEducational demo of three Claude Code vulnerabilities (hooks bypass, MCP injection, API key exfiltration) with attacker server, MITM proxy, and…
dnszlsk/muad-dibReal-time npm/PyPI supply-chain threat detection. Behavioral chain analysis, AST scanning, IOC feeds, and compound scoring engine.
anpa1200/aidebugEvidence-focused malware reverse engineering with deep PE/.NET inspection, Ghidra reconstruction, AI cross-checks, YARA, and ELF debugging
ald3ns/copy-as-yaraThis is a little plugin to copy disassembly in a way that is usable in YARA rules!
hydradragonantivirus/hydradragonav-mobileAndroid Antivirus which doesn't require root, adb, ca install and cloud with many features and ways to detect more zero-day malware
otsmane-ahmed/ci-supplychain-guardStatic analysis tool that detects malicious dependencies in CI/CD pipelines using pattern matching and AST analysis, with a traffic-light risk…
xcodeon1/ipa-scopeStatic analysis tool for iOS applications that extracts links, API keys, subdomains, binary info, linked libraries, and strings to aid mobile…
wspr-ncsu/mininodeStatic analysis CLI tool that reduces Node.js application attack surface by constructing dependency graphs and removing unused modules and functions…
califio/ngxrayngxray — nginx config security scanner
coinbase/salusWe would like to request that all contributors please clone a *fresh copy* of this repository since the September 21st maintenance.
