Tools

iamavu/zairo

Scans code diffs with context to build an impact graph and uses LLMs to find vulnerabilities, supporting multi-repo scans and CI gating with SARIF…

trailofbits/polytracker

An LLVM-based instrumentation tool for universal taint tracking, dataflow analysis, and tracing.

tomnomnom/gf

A wrapper around grep, to help you grep for things

chichou/grapefruit

Open-source mobile security testing suite for iOS and Android. Previously Passionfruit

go-delve/delve

Source-level debugger for Go with CLI, API, and headless modes; supports breakpoints, variable inspection, and execution tracing for efficient…

wapiti-scanner/wapiti

Web vulnerability scanner written in Python3

airbus-cert/ttddbg

Time Travel Debugging IDA plugin

pietroborrello/customprocessingunit

The first analysis framework for CPU microcode

chichou/vscode-frida

Unofficial frida extension for VSCode

worksbutnottested/lightkeeper

Maps execution-coverage data onto Ghidra disassembly to highlight visited code paths and accelerate reverse-engineering workflows.

zxgio/ghidra_stack_strings

A script to detect stack-strings by using emulation (leveraging Unicorn)

tanprathan/mobileapp-pentest-cheatsheet

The Mobile App Pentest cheat sheet was created to provide concise collection of high value information on specific mobile application penetration…

avast/yari

YARI is an interactive debugger for YARA Language.

fuzzysecurity/fermion

Fermion, an electron wrapper for Frida & Monaco.

binsec/xyntia

Xyntia, the black-box deobfuscator

hugsy/windbg_js_scripts

Toy scripts for playing with WinDbg JS API

rbmm/ntdetours

Detours implementation (x64/x86) which used only ntdll import

dvyukov/centipede

Distributed coverage-guided fuzzing engine compatible with libFuzzer targets; scales to thousands of concurrent jobs, uses sanitizers and corpus…