
ddc
Android DEX → Java decompiler in Rust, built for speed — full apps in seconds, queries in milliseconds. Progressive analysis, javac-verified output,…

Android DEX → Java decompiler in Rust, built for speed — full apps in seconds, queries in milliseconds. Progressive analysis, javac-verified output,…

Community curated list of templates for the nuclei engine to find security vulnerabilities.

A Python pickling decompiler and static analyzer

opensource repo for validating agentic AI applications: redteam, behavior, supply-chain, static analysis

RAM efficient terminal agent harness for coding, cybersecurity, and automation.

High-performance secrets scanner. CLI, Go library, Burp Suite extension, and Chrome extension. 487 detection rules with live credential validation.

Main repo for hosting release binaries

Runtime instrumentation framework for building dynamic analysis tools: tracing, profiling, code coverage, memory debugging, fuzzing, and disassembly…

Cross-platform instrumentation and introspection library written in C

A security focused static analysis tool for Android and Java applications.

Validate environment variable usage in codebase

Reverse engineering assistant that uses a locally running LLM to aid with pseudocode analysis.

PHP Static Analysis Tool - discover bugs in your code without running it!

A secure Python sandbox, written in Rust, for code written by AI.

An extensible multilanguage static code analyzer.

Security scanner for AI agent skills. Detect vulnerabilities, malicious patterns, security risks, prompt injection, data exfiltration, and…

0-day malware detection for binaries, source & scripts (that doesn't suck)
