
Mobile-Security-Framework-MobSF
Automated mobile application security testing framework for Android, iOS, and Windows. Performs static and dynamic analysis, malware detection, and…

Automated mobile application security testing framework for Android, iOS, and Windows. Performs static and dynamic analysis, malware detection, and…

Hunt every Endpoint in your code, expose Shadow APIs, map the Attack Surface.

nodejsscan is a static security code scanner for Node.js applications.

A curated list of Android Security materials and resources For Pentesters and Bug Hunters

An Interactive Binary Patching Plugin for IDA Pro

Static and dynamic analysis tool that audits open-source packages for malicious, vulnerable, and risky attributes, with sandboxed installation to…

Modular file scanning/analysis framework

Static analysis security rules for vulnerability detection and audit-focused code review across Java, Go, Python, C#, Kotlin, PHP, Kubernetes, and…

AI-native code security auditor on AgentField that proves exploitability with verdicts, traces, and actionable evidence.

Static analysis tool that scans Dockerfiles for insecure commands and configuration issues, providing actionable security notifications to harden…

🔍 A Hex Editor for Reverse Engineers, Programmers and people who value their retinas when working at 3 AM.

.NET Decompiler with support for PDB generation, ReadyToRun, Metadata (&more) - cross-platform!

Free and Open Source Reverse Engineering Platform powered by rizin

Fast and accurate AI powered file content types detection

DOMPurify - a DOM-only, super-fast, uber-tolerant XSS sanitizer for HTML, MathML and SVG. DOMPurify works with a secure default, but offers a lot of…

A static analyzer for Java, C, C++, and Objective-C

Comprehensive OWASP guide for mobile app security testing, reverse engineering, and verifying MASVS/MASWE weaknesses through static, dynamic, and…

AI-powered reverse engineering assistant that bridges IDA Pro with language models through MCP.