Tools

ostesayed/oste-meta-scan

Multi-engine DAST scanner aggregating Nikto, ZAP, Nuclei, SkipFish, and Wapiti for automated web injection vulnerability detection with consolidated…

hahwul/xspear

🔱 Powerfull XSS Scanning and Parameter analysis tool&gem

mandiant/capa

Rule-based static and dynamic analysis tool that identifies capabilities in PE, ELF, .NET, and shellcode files, mapping them to MITRE ATT&CK…

anthropic-experimental/sandbox-runtime

A lightweight sandboxing tool for enforcing filesystem and network restrictions on arbitrary processes at the OS level, without requiring a container.

cyb3rmx/qu1cksc0pe

All-in-One malware analysis tool.

cocoadebug/cocoadebug

iOS Debugging Tool 🚀

microsoft/procdump-for-linux

A Linux version of the ProcDump Sysinternals tool

charles2gan/gda-android-reversing-tool

the fastest and most powerful android decompiler(native tool working without Java VM) for the APK, DEX, ODEX, OAT, JAR, AAR, and CLASS file. which…

hengyoush/kyanos

Kyanos is a networking analysis tool using eBPF. It can visualize the time packets spend in the kernel, capture requests/responses, makes…

fkie-cad/fact_core

Firmware Analysis and Comparison Tool

honeynet/apkinspector

APKinspector is a powerful GUI tool for analysts to analyze the Android applications.

mandiant/flare-fakenet-ng

FakeNet-NG - Next Generation Dynamic Network Analysis Tool

capacitorset/box-js

A tool for studying JavaScript malware.

reversenseorg/dexcalibur

[Official] Android reverse engineering tool focused on dynamic instrumentation automation leveraging Frida. It disassembles dex, analyzes it…

datadog/guarddog

🐍 🔍 GuardDog is a CLI tool to Identify malicious PyPI and npm packages

hxsecurity/dongtai

Open-source Interactive Application Security Testing (IAST) tool that passively instruments Java applications to detect vulnerabilities and…

0xgalz/virtuailor

IDAPython tool for creating automatic C++ virtual tables in IDA Pro

zeze-zeze/ioctlance

A tool that is used to hunt vulnerabilities in x64 WDM drivers