
dynamorio
Runtime instrumentation framework for building dynamic analysis tools: tracing, profiling, code coverage, memory debugging, fuzzing, and disassembly…

Runtime instrumentation framework for building dynamic analysis tools: tracing, profiling, code coverage, memory debugging, fuzzing, and disassembly…

A next-generation crawling and spidering framework.

Fast, multi-probe HTTP toolkit for reconnaissance and information gathering. Probes TLS, CSP, headers, tech stack, and CDN. Supports matchers,…

Fast YAML-based vulnerability scanner with template-driven detection engine for automated security testing across web apps, APIs, networks, DNS, and…


Deobfuscator for javascript-obfuscator 5.x output (string arrays, control-flow flattening, self-defending, RC4/base64)

Automatic SQL injection and database takeover tool

Automated Penetration Testing Framework - Open-Source Vulnerability Scanner - Vulnerability Management

Web vulnerability scanner written in Python3

Dynamic branch-divergence finder for native code -- traces two Frida executions and finds the exact instruction where they diverge.

Record and replay framework for deterministic debugging of multi-threaded applications, enabling reverse execution, hardware watchpoints, and…


GNU IFUNC is the real culprit behind CVE-2024-3094

Extract the managed (.NET) assemblies out of a MAUI Android assembly store.

Self-hosted WAF and reverse proxy that filters malicious HTTP traffic, blocks SQL injection, XSS, and bot attacks, with rate limiting and dynamic…

Maps execution-coverage data onto Ghidra disassembly to highlight visited code paths and accelerate reverse-engineering workflows.

An strace-like program for the Windows 'native' API

A fast, simple, recursive content discovery tool written in Rust.