
ddc
Android DEX → Java decompiler in Rust, built for speed — full apps in seconds, queries in milliseconds. Progressive analysis, javac-verified output,…

Android DEX → Java decompiler in Rust, built for speed — full apps in seconds, queries in milliseconds. Progressive analysis, javac-verified output,…

PHP Static Analysis Tool - discover bugs in your code without running it!

AST-based Static Code Analyzer with Agentic LLM-Powered Relationship Mapping to discover Python RCE paths and deep deserialization chains on AI, LLM,…

Django application that performs SAST and Malware Analysis for Android APKs

A native APK and DEX decompiler written in Rust

Open-source code analysis platform for C/C++/Java/Binary/Javascript/Python/Kotlin based on code property graphs. Discord https://discord.gg/vv4MH284Hc

UNIX-like reverse engineering framework and command-line toolset

Local-first macOS research browser built on a custom Brave build that captures network traffic, fingerprints, scripts, and runtime evidence for…

The community's most comprehensive, continuously-updated index of research on Large Language Models for software vulnerability detection — papers…

Main repo for hosting release binaries

Runtime instrumentation framework for building dynamic analysis tools: tracing, profiling, code coverage, memory debugging, fuzzing, and disassembly…

A security focused static analysis tool for Android and Java applications.

Ghidra is a software reverse engineering (SRE) framework

The OWASP Cheat Sheet Series was created to provide a concise collection of high value information on specific application security topics.

Open source binary analysis framework and decompiler built on LLVM and QEMU, lifting binaries to a readable intermediate representation for reverse…

Fast Android APK decompiler front-end that queries compiled DEX artifacts directly, extracting classes and cross-references in milliseconds without…

A Java 8+ Jar & Android APK Reverse Engineering Suite (Decompiler, Editor, Debugger & More)

Paranoid's library contains implementations of checks for well known weaknesses on cryptographic artifacts.