Tools

cure53/dompurify

DOMPurify - a DOM-only, super-fast, uber-tolerant XSS sanitizer for HTML, MathML and SVG. DOMPurify works with a secure default, but offers a lot of…

hasherezade/jsc_deobfuscator

Static deobfuscation toolkit for compiled V8 JavaScript bytecode, focusing on JSCeal payloads. Provides pattern-driven filters, control-flow…

z3prover/z3

High-performance SMT solver for automated theorem proving, constraint solving, and program verification. Supports multiple theories and language…

coffeeandsecurity/dakshscra

Framework-aware static code analysis tool for automated source code review with platform-specific rules, taint analysis, effort estimation, and…

laplace1002/tamarinagent

Human-in-the-loop UI that converts natural-language or C/C++ protocol descriptions into a reviewable Protocol IR, then generates Sapic+/Tamarin…

githubsecuritylab/seclab-taskflow-agent

MCP-enabled multi-agent framework for declarative YAML-driven agentic workflows, used for AI-assisted code auditing, vulnerability triage, and…

ssh-pur66/afterimage

Patch-diff research for published urllib3 issues: pinned releases, original offline harnesses, before/after behavior and benign controls.

karankantaria/binviz

Binary visualiser and triage tool — entropy, byte-class and Hilbert surfaces, dot plots and control-flow graphs over one shared address-space model.

owasp/decodebox

Client-side workbench that auto-detects, recursively decodes, and analyses unknown or layered data, extracting indicators and CWE-tagged security…

google/bindiff

Quickly find differences and similarities in disassembled code

niffyhunt/codeguard-copilot

AI-powered security co-pilot that catches vulnerabilities as you code. Real-time security scanning, educational explanations, and auto fixes for…

ernos/browser-xpi-malware-scanner

A comprehensive browser extension (.xpi) malware scanner which checks for many common malware tricks like:, credential-stealers obfuscation tactics,…

tin-z/solidity_cve-2021-42574-poc

POC of CVE-2021-42574 for solidity and solc compiler

vulnex/bytesrevealer

Online Reverse Enginerring viewer

runtimeverification/kernel-c-to-rust-spike

Hardening kernel C parsers via Rust rewrite + differential fuzzing + formal verification. First target: UVC (CVE-2024-53104).

danielbohannon/revoke-obfuscation

PowerShell Obfuscation Detection Framework

cmu-sei/pharos

Automated static analysis tools for binary programs

tamarin-prover/tamarin-prover

Symbolic verification tool for security protocols using multiset rewriting and constraint solving to prove secrecy, authentication, and equivalence…