
oss-scanner
Service that builds enrolled open-source repositories in isolated offline VMs and scans them for security vulnerabilities, emailing findings with…

Service that builds enrolled open-source repositories in isolated offline VMs and scans them for security vulnerabilities, emailing findings with…

UNIX-like reverse engineering framework and command-line toolset

Find vulnerabilities, misconfigurations, secrets, SBOM in containers, Kubernetes, code repositories, clouds and more

agent runtime security - zero trust, zero setup, zero latency agent sandboxing

Community curated list of templates for the nuclei engine to find security vulnerabilities.

Cross-platform instrumentation and introspection library written in C

Open-source AI penetration testing tool to find and fix your app’s vulnerabilities.

Ghidra is a software reverse engineering (SRE) framework

Rule-based static and dynamic analysis tool that identifies capabilities in PE, ELF, .NET, and shellcode files, mapping them to MITRE ATT&CK…

Vulnerability scanner written in Go which uses the data provided by https://osv.dev

Main repo for hosting release binaries

High-performance secrets scanner. CLI, Go library, Burp Suite extension, and Chrome extension. 487 detection rules with live credential validation.

Plugin for JADX to integrate MCP server

AI harness for long-running code audits, web pentests, and bug bounty hunting, built around how real investigations fail: anchored hypotheses, false…

Know what changed inside your app: inspect Electron apps and binaries, trace findings to file and line, compare releases. Locally, without executing…

Peer-to-peer code collaboration and publishing stack with a secure, decentralized protocol, CLI tool, and network daemon for sovereign code forges.

Generate deterministic semantic fingerprints for Go functions. Detect xz-style backdoors and verify semantic equivalence using Static Single…

Unofficial revival of the well known .NET debugger and assembly editor, dnSpy