Tools

projectdiscovery/nuclei

Fast YAML-based vulnerability scanner with template-driven detection engine for automated security testing across web apps, APIs, networks, DNS, and…

chaitin/safeline

Self-hosted WAF and reverse proxy that filters malicious HTTP traffic, blocks SQL injection, XSS, and bot attacks, with rate limiting and dynamic…

whatswrongandwhy/ptrace

Linux ptrace-based process tracing and debugging utility for inspecting system calls, memory, and program execution flow.

projectdiscovery/httpx

Fast, multi-probe HTTP toolkit for reconnaissance and information gathering. Probes TLS, CSP, headers, tech stack, and CDN. Supports matchers,…

jaeles-project/jaeles

The Swiss Army knife for automated Web Application Testing

s0md3v/xsstrike

Most advanced XSS scanner.

wapiti-scanner/wapiti

Web vulnerability scanner written in Python3

ffuf/ffuf

Fast web fuzzer written in Go

go-delve/delve

Source-level debugger for Go with CLI, API, and headless modes; supports breakpoints, variable inspection, and execution tracing for efficient…

sqlmapproject/sqlmap

Automatic SQL injection and database takeover tool

cloudflare/security-audit-skill

A coding-agent skill for multi-phase security audits with independently verified, machine-readable findings

urbanadventurer/whatweb

Next generation web scanner

steven-michaud/hookcase

Tool for reverse engineering macOS/OS X

trailofbits/polytracker

An LLVM-based instrumentation tool for universal taint tracking, dataflow analysis, and tracing.

microsoft/windbg-samples

Sample extensions, scripts, and API uses for WinDbg.

iamavu/zairo

Scans code diffs with context to build an impact graph and uses LLMs to find vulnerabilities, supporting multi-repo scans and CI gating with SARIF…

zaproxy/zaproxy

Open-source web application security scanner for automated vulnerability detection, manual penetration testing, and API security testing with a…

splx-ai/agentic-radar

A security scanner for your LLM agentic workflows