Tools

dynamorio/dynamorio

Runtime instrumentation framework for building dynamic analysis tools: tracing, profiling, code coverage, memory debugging, fuzzing, and disassembly…

owasp/pytm

A Pythonic framework for threat modeling

owasp/fiasse

A Framework for Integrating Application Security into Software Engineering (FIASSE) using the Securable Software Engineering Model (SSEM)

pascal-lab/tai-e

An easy-to-learn/use static analysis framework for Java and Android

crytic/slither

Static Analyzer for Solidity and Vyper

zhengxr930/maleval

Official code for the ISSTA 2026 paper: Is "Knowing It’s Malicious" Enough? Evaluating LLMs for Fine-Grained Malware Behavior Auditing

sentinelxofficial/sxwp2shell

WordPress wp2shell pre-auth RCE exploit kit (CVE-2026-63030 + CVE-2026-60137)

0p4n1k/noctyra

AST-based Python code transformation & deobfuscation framework

c3rb3ru5d3d53c/binlex

A Binary Genetic Traits Lexer Framework

gpt-laboratory/trustworthyrag

An Evaluation Agent for Detecting Misinformation and Knowledge Poisoning in Retrieval-Augmented Generation Systems.

0xbigshaq/apatchy

Fuzzing Framework for Modules in Apache HTTPD Server

roninforge/roninforge-hono

Cursor plugin for Hono v4 (TypeScript edge web framework). 59 LLM regressions with BAD/CORRECT pairs. Pinned to hono ^4.12.19 (>= 4.9.7 for…

vinsontang1/vultriage

The code of VulTriage: Triple-Path Context Augmentation for LLM-Based Vulnerability Detection

colton1skees/dna

LLVM based static binary analysis framework

renweimeng/vlun-agent-x

VulnAgent-X: A Layered Agentic Framework for Repository-Level Vulnerability Detection

sensepost/dotnethookertoolkit

Frida-based .NET Framework injector and managed method hooking toolkit for runtime tracing, native entrypoint resolution, and dynamic analysis of…

soheilkhodayari/jaw

JAW: A Graph-based Security Analysis Framework for Client-side JavaScript