#1Tools for examining source code without execution to find security flaws.
Kitploit recommended
linuztx/alter-zeroRAM efficient terminal agent harness for coding, cybersecurity, and automation.
shubhamshubhankar/autosourceAutomated static code analysis framework integrated with SonarQube for early vulnerability detection in source code by scanning Git repositories…
samsung/utopiaUT based automated fuzz driver generation
clearbluejar/ghidrecompPython Command-Line Ghidra Decompiler
agrawalsmart7/scodescannerCommand-line static analysis scanner that detects critical vulnerabilities in PHP and YAML source code using custom semgrep rules, with Jira and…
advanced-threat-research/creosoteCreosote is our solution to searching for the tarfile vulnerability described by CVE-2007-4559.
airbus-cert/vbsparkleVBScript & VBA source-to-source deobfuscator with partial-evaluation
chris-anley/cqCQ, a code security scanner
gitlab-org/security-products/sast-rulesCurated Semgrep rule repository for GitLab SAST, providing static analysis patterns to detect security vulnerabilities across multiple programming…
coffeeandsecurity/dakshscraFramework-aware static code analysis tool for automated source code review with platform-specific rules, taint analysis, effort estimation, and…
dmdhrumilmistry/security-harnessMulti-agent static application-security review harness for AI coding agents: maps codebases, hunts vulnerability classes, chains and verifies…
nccgroup/cqFast code security scanner designed for manual security code review by experts. Outputs line-referenced findings to text files for easy filtering and…
vusec/ghostraceProof-of-concept and static analysis toolkit for finding speculative race condition (SCUAF) gadgets in Linux kernel. Includes 1200+ gadget dataset.
redsection/jspandaclient-side prototype pullution vulnerability scanner
whitesquirrell/c0devari4ntA variant analysis and visualisation tool that scans codebases for similar vulnerabilities
kc57/awesome-pentestA list of awesome penetration testing tools and resources.
silverplate3/my-cvesCVE's I found. technical writeups, expolitation examples and fuzzing sessions walkthroughs
