Tools

trailofbits/polytracker

An LLVM-based instrumentation tool for universal taint tracking, dataflow analysis, and tracing.

zer0condition/reversekit

x64 Dynamic Reverse Engineering Toolkit

google/buzzer

eBPF fuzzer toolchain for generating random eBPF programs and validating kernel verifier/runtime behavior. Supports coverage-guided fuzzing and…

dolevf/graphql-cop

Lightweight Python utility for automated security auditing of GraphQL APIs. Detects misconfigurations, information leaks, and denial-of-service…

nccgroup/cartographer

Code Coverage Exploration Plugin for Ghidra

jpiechowka/jenkins-cve-2016-0792

Exploit for Jenkins serialization vulnerability - CVE-2016-0792

tca-iscas/cooper-ndss-2022

A tool for effective testing the binding layer of scripting languages

robertdfrench/ifuncd-up

GNU IFUNC is the real culprit behind CVE-2024-3094

0x3c3e/slides

CodeQL + DTrace = Memory Disclosure Vulnerabilities in XNU

hasherezade/pesieve-go

Golang bindings for PE-sieve

open-flaw/cve-2026-56848

Exploit PoC for CVE-2026-56848, a Node.js HTTP/2 heap-use-after-free that allows remote unauthenticated DoS. Includes raw-socket trigger, ASan build…

google/path-auditor

Runtime libc function auditor that detects file access race conditions and symlink vulnerabilities by hooking filesystem syscalls via LD_PRELOAD,…

dwisiswant0/findom-xss

A fast DOM based XSS vulnerability scanner with simplicity.

sullo/nikto

Nikto web server scanner

wpscanteam/wpscan

WordPress security scanner that detects vulnerabilities, enumerates plugins/themes/users, and checks for weak passwords. Integrates with the WPScan…

s0md3v/xsstrike

Most advanced XSS scanner.

cloudflare/security-audit-skill

A coding-agent skill for multi-phase security audits with independently verified, machine-readable findings

hahwul/dalfox

Fast XSS scanner with parameter analysis, WAF fingerprinting, and DOM/AST verification. Supports reflected, stored, and DOM-based XSS detection via…