awslabs/threat-modeling-mcp-serverMCP server for structured STRIDE-based threat modeling with automatic code validation, business context analysis, and comprehensive report generation…
seqra/opentaintFormal inter-procedural taint analysis engine for application security. Tracks untrusted data across function boundaries, persistence layers, and…
blacksnufkin/novaldrThreadless Module Stomping In Rust with some features (In memory of those murdered in the Nova party massacre)
jayu/rev-depDependency analysis and optimization toolkit for modern JavaScript and TypeScript codebases. Enforce dependency graph hygiene and remove unused code…
felixber/findfuncIDA Pro plugin for filtering functions by assembly patterns, byte sequences, string/name references, and size constraints, with rule-based search and…
penberg/chimeraSandbox untrusted code with safe access to the host.
arguslab/argus-safScala-based static analysis framework for Android and Java bytecode with flow analysis, decompilation, and native code analysis via symbolic…
ntoskernel/deepsecretsOffline secrets scanner combining regex rules, lexer-based semantic analysis, and hashed-value matching to detect exposed credentials in code with…
joshuavanderpoll/cve-2021-3129Laravel RCE Exploit PoC - CVE-2021-3129 (user-friendly with automatic log path detection)
0xdea/oneiromancerReverse engineering assistant that uses a locally running LLM to aid with pseudocode analysis.
traceforce/mcp-xrayUnified security scanner for MCP servers with config, pentest, and repo-scan modes. Generates SARIF reports for CI/CD integration, detects secrets,…
synacktiv/qlinspectorFinding Java/C# gadget chains with CodeQL
m14r41/scan4secretsFind credentials and secret with 170+ rules covering across source code, Web URL, and CI/CD, verifies them against vendor APIs, and generates SARIF,…
synacktiv/bipObject-oriented Python API to simplify interaction with IDA for reverse engineering, enabling plugin development and automation of disassembly…
shubhamshubhankar/autosourceAutomated static code analysis framework integrated with SonarQube for early vulnerability detection in source code by scanning Git repositories…
gach0ng/agentstalkerEnd-to-end security audit framework for LLM agents: static AST and taint modeling, attack synthesis, Docker sandbox replay, and deterministic verdict…
agrawalsmart7/scodescannerCommand-line static analysis scanner that detects critical vulnerabilities in PHP and YAML source code using custom semgrep rules, with Jira and…
luelueking/cve-2022-25845-in-springCVE-2022-25845 (fastjson 1.2.80) exploit for Spring environments with step-by-step PoC, file read, and arbitrary file write via Jackson/commons-io…
