
trufflehog
Find, verify, and analyze leaked credentials

Find, verify, and analyze leaked credentials

Automated mobile application security testing framework for Android, iOS, and Windows. Performs static and dynamic analysis, malware detection, and…

Open-source web application security scanner for automated vulnerability detection, manual penetration testing, and API security testing with a…

A Java 8+ Jar & Android APK Reverse Engineering Suite (Decompiler, Editor, Debugger & More)

⚡️ Multiple target ZAP Scanning

Ghidra is a software reverse engineering (SRE) framework

Main repo for hosting release binaries

Unofficial revival of the well known .NET debugger and assembly editor, dnSpy

Open-source, cross platform Qt6 based IDE for reverse-engineering Android application packages. It features a friendly IDE-like layout including code…

A tool that helps you easy trace classes, functions, and modify the return values of methods on iOS platform

Vigolium - High-fidelity vulnerability scanner fusing agentic AI with native speed, modularity, and precision

Autonomous AI pentesting agents — real-time reconnaissance, vulnerability detection, and exploitation orchestration. Go + TypeScript.

Static and dynamic analysis tool that audits open-source packages for malicious, vulnerable, and risky attributes, with sandboxed installation to…

Modular file scanning/analysis framework


UNIX-like reverse engineering framework and command-line toolset

Free and Open Source Reverse Engineering Platform powered by rizin

Security scanner for AI agent skills. Detect vulnerabilities, malicious patterns, security risks, prompt injection, data exfiltration, and…