Tools

All Android Security Authentication & Authorization Cloud Infrastructure Security Defensive Tools Disk Forensics Embedded Systems Security General Purpose Utilities Indicator of Compromise (IOC) Management OSINT (Open Source Intelligence)Packet Sniffing & Analysis Password Cracking Penetration Testing Frameworks Phishing Tools Privilege Escalation Reconnaissance Static Analysis Vulnerability Scanners Web Vulnerability Scanners Wi-Fi Auditing Bluetooth Security Container Security Dynamic Analysis (Sandboxing)Encryption/Decryption Tools Exploit Frameworks Identity Management iOS Security IoT Security Memory Forensics Network Mapping OSINT for Social Engineering Password Attacks Payload Generation Persistence Mechanisms Port Scanning Static Code Analysis (SAST)Threat Feeds & Aggregators Vulnerability Analysis Web Proxies & Interception Code Analysis DNS & Subdomain Enumeration Dynamic Code Analysis (DAST)Exploitation Hash Analysis IDS/IPS Evasion Impersonation Tools Lateral Movement Mobile App Pentesting Network Forensics Reverse Engineering RFID/NFC Tools SCADA/ICS Security Scripting & Automation Serverless Security Shellcode Web Application Exploitation API Security Testing Configuration Auditing Data Exfiltration Debuggers Forensics Information Gathering Mobile Forensics Network Access Control Post-Exploitation Security Virtualization Phishing WAF Bypass Web Security Fuzzing Network Security Steganography Wireless Security Data Recovery Malware Analysis Digital Forensics Hardware Hacking Cryptography CTF Penetration Testing Cloud Security DevSecOps Mobile Security Privacy Command and Control Social Engineering Hardware Security Utilities & Frameworks Hardware & IoT Security Secret Detection Binary Analysis Threat Intelligence Identity & Access Management (IAM)Supply Chain Security Authentication Machine Learning Intrusion Detection Papers & Research Misconfiguration Subdomain Enumeration Email Harvesting Learning & Education AI-Assisted Reversing DNS Fuzzing Red Teaming Incident Response Crawler Curated Resources Remote Access Tool Shellcode Generation Payload Development Remote Access Trojan API Security Anti-Bot Fingerprint Spoofing CAPTCHA Bypass Email Security DNS Analysis Chaos Engineering Learning Paths & Courses Container Escape AI Security Database Security Firmware Analysis Anomaly Detection Log Analysis Adversarial Attack Binary Exploitation Labs & Practice

Newest Relevance Most popular Recently updated

33 results

luadec-tplink

superkhung/luadec-tplink

Modified luadec version to decompile TP-Link Archer C7 LUA firmware.

binary-analysisembedded-systems-securityfirmware-analysis+4

336 years ago

Deserializer

joshuaprovoste/deserializer

AST-based Static Code Analyzer with Agentic LLM-Powered Relationship Mapping to discover Python RCE paths and deep deserialization chains on AI, LLM,…

ai-securitycode-analysisexploitation+6

27 days ago

Vulnerability-DLink-CVE-2025-14659

peterlinccl/vulnerability-dlink-cve-2025-14659

Static analysis (Ghidra) and custom packet-crafting (Scapy) demonstrating a root-level DHCP command injection vulnerability (CVE-2025-14659) in…

embedded-systems-securityexploitationfirmware-analysis+6

25 days ago

mlkem-native

pq-code-package/mlkem-native

Secure, fast, and portable C90 implementation of ML-KEM / FIPS 203

cryptographyembedded-systems-securityhardware-security+1

2414 days ago

cpu_rec_rs

trou/cpu_rec_rs

Determine which CPU architecture is used in a binary file.

binary-analysisembedded-systems-securityfirmware-analysis+2

1295 months ago

ghidra-nanomips

nccgroup/ghidra-nanomips

nanoMIPS module for Ghidra

binary-analysisembedded-systems-securityreverse-engineering+1

5611 months ago

cabir_analysis

spiralbl0ck/cabir_analysis

cabin partial analysis

binary-analysisbluetooth-securityeducation+6

13 years ago

SkypeACLKeyGen.exe-analysis-for-hacking-team

spiralbl0ck/skypeaclkeygen.exe-analysis-for-hacking-team

SkypeACLKeyGen.exe analysis for hacking team

binary-analysisbinary-exploitationdigital-forensics+5

2 years ago

canon-mf644

synacktiv/canon-mf644

Exploit and firmware analysis toolkit for Canon MF644 printer vulnerabilities, including Python exploits, ARM shellcode, and IDA Pro loader scripts…

binary-exploitationembedded-systems-securityexploitation+6

323 years ago

Watchguard_WebUI_Unpacker

ret5et/watchguard_webui_unpacker

Watchguard Sysa-dl file format

binary-analysisembedded-systems-securityfirmware-analysis+2

33 years ago

mtk_bp

nccgroup/mtk_bp

Tools for analyzing and reverse engineering MediaTek baseband firmware, including file extraction, symbol parsing, and Ghidra integration for modem…

binary-analysisembedded-systems-securityfirmware-analysis+4

811 day ago

npm-tar-path-traversal-scanner

ridhinva/npm-tar-path-traversal-scanner

Scanner: CVE-2026-31802 npm tar path traversal — Python checker for arbitrary file write via npm pack

code-analysiseducationstatic-analysis+2

2 months ago

pyscan

ohaswin/pyscan

python dependency vulnerability scanner, written in Rust.

code-analysisdevsecopsstatic-analysis+2

2514 months ago

x64dbg

x64dbg/x64dbg

An open-source user mode debugger for Windows. Optimized for reverse engineering and malware analysis.

ai-assisted-reversingbinary-analysisbinary-exploitation+7

49.7k10 days ago

ImHex

werwolv/imhex

🔍 A Hex Editor for Reverse Engineers, Programmers and people who value their retinas when working at 3 AM.

ai-assisted-reversingbinary-analysisbinary-exploitation+10

55.0k3h 46m ago

cve-2015-1187-dir820l-firmware-reverse-engineering

christopher-leese/cve-2015-1187-dir820l-firmware-reverse-engineering

Static firmware reverse engineering of CVE-2015-1187: unauthenticated command injection in D-Link DIR-820L. MIPS root filesystem extraction with…

embedded-systems-securityexploitationfirmware-analysis+5

1 month ago

opentaint

seqra/opentaint

Formal inter-procedural taint analysis engine for application security. Tracks untrusted data across function boundaries, persistence layers, and…

ai-securityapi-securitycode-analysis+7

1637 days ago

AppInfoScanner

kelvinben/appinfoscanner

一款适用于以HW行动/红队/渗透测试团队为场景的移动端(Android、iOS、WEB、H5、静态网站)信息收集扫描工具，可以帮助渗透测试工程师、攻击队成员、红队成员快速收集到移动端或者静态WEB站点中关键的资产信息并提供基本的信息输出,如：Title、Domain、CDN、指纹信息、状态信息等。

android-securityinformation-gatheringios-security+6

3.6k9 days ago