#1Tools for examining malware binaries and code without executing them (e.g., disassemblers, unpackers).
Kitploit recommended
rtkwlf/wolf-toolsScans Windows, Linux, and macOS hosts for Java packages containing JndiLookup.class to detect Log4Shell (CVE-2021-44228, CVE-2021-45046) exposure and…
raj3shp/malscoreMaliciousness scoring for Linux commands
blackvectorops/semantic_firewallGenerate deterministic semantic fingerprints for Go functions. Detect xz-style backdoors and verify semantic equivalence using Static Single…
happytotoro116/ghidra-llm-pipelineDeterministic PyGhidra extraction, triage, and local LLM compiler-backend pipeline for C reimplementation.
edtrackai/nextjs-supabase-stripe-security-checkerLocal static security scanner for Next.js, Supabase and Stripe apps: 24 AST-based checks for leaked keys, missing RLS and grants, unsafe webhooks.…
jaime64net/debuggerj-Debugger de aplicaciones x86 y x64 con intgracion de AI
nemo22/retrokitHeadless-Ghidra toolkit for reverse engineering 32-bit DOS and Win32 games (1993-2010): own LE/LX loader, Watcom calling conventions, library…
gmh5225/malicious-code-detection-buguAI-based malicious code detection and obfuscation system with microservices for detection, packing, and code confusion, plus user and admin services.
maximilianfeix/hexveroThe first look at a binary or app bundle: static, execution-free analysis with evidence. CLI, 15-tool MCP server and local web UI, Node only.
affolter-engineering/xssearchRust-based XSS scanner with context-aware payload selection, WAF detection and bypass, crawling, blind XSS callbacks, and static DOM sink analysis.
abraxas/spark-history-store-pathApache Spark 4.2.0 - High - Remote - File write - History appStorePath unsanitized App ID
gach0ng/agentstalkerEnd-to-end security audit framework for LLM agents: static AST and taint modeling, attack synthesis, Docker sandbox replay, and deterministic verdict…
oscarsantanaarias/ida-ghidra-bridgeTCP JSON bridge servers for IDA Pro and Ghidra exposing decompilation, xrefs, symbols, vtables, RTTI and memory patching to external scripts and…
ambitsecurity/jshoundFind every API request a web app makes, from the JavaScript it ships: method, URL, body, headers and GraphQL operations. One command.
abraxas/sqlite-fts5-securedelSQLite 3.53.4 - High - Local - Crash - FTS5 secure-delete PutVarint footer overrun
hillu/local-log4j-vuln-scanner[Moved to Codeberg] Simple local scanner for vulnerable log4j instances
dnspy/dnspy.NET debugger and assembly editor
google/android-classysharkAndroid and Java bytecode viewer
