wycheproof
c2sp/wycheproofProject Wycheproof tests crypto libraries against known attacks.
code-analysiscryptographyeducation+3
c2sp/wycheproofProject Wycheproof tests crypto libraries against known attacks.
google/magikaFast and accurate AI powered file content types detection
vighnesh91/omnisec-hexBrowser-local security monorepo with six modules for mobile APK/IPA triage, client-side DAST fuzzing, OSINT directories, offline AI threat scoring,…
mandiant/flare-flossFLARE Obfuscated String Solver - Automatically extract obfuscated strings from malware.
jsonpath-plus/jsonpathA fork of JSONPath from http://goessner.net/articles/JsonPath/
ambitsecurity/jshoundFind every API request a web app makes, from the JavaScript it ships: method, URL, body, headers and GraphQL operations. One command.
affolter-engineering/xssearchRust-based XSS scanner with context-aware payload selection, WAF detection and bypass, crawling, blind XSS callbacks, and static DOM sink analysis.
eset/malware-researchCode written as part of our various malware investigations
ejfkdev/djExtracts dynamically loaded JavaScript files by statically analyzing website HTML and JS, detecting webpack chunks, import() lazy loading, and source…
shinthink/blitzstrikeMCP server packaging a three-tier penetration-testing methodology: attack-surface reconnaissance, source-to-sink static analysis, and live finding…
squeeze440/gortex-pocPoC — symlink following to out-of-repo content disclosure via search_text in Gortex (GHSA-6vhf-4wcm-2r83, CVE-2026-87003, CVSS 5.5).
bio/vue-template-compiler-patchedPatched Vue 2.7.16 template compiler with fixes for CVE‑2024‑6783 and CVE-2024-9506
zeze-zeze/ioctlanceA tool that is used to hunt vulnerabilities in x64 WDM drivers
sassoftware/jacksonThis repository provides a comprehensive security remediation of denial-of-service and allocation of resources without limits or throttling security…
teycir/diffcatcherA Rust CLI tool that recursively discovers Git repositories, captures state changes, generates diffs, extracts code elements with full snippets, and…
shoucheng3/jenkinsci__script-security-plugin_cve-2023-24422_1228.vd93135a_2fb_25Jenkins plugin providing script approval workflows and Groovy sandboxing to enforce secure script execution, with ACL-aware permission checks and…
jenish-sojitra/jsanalyzerBurp Suite extension for JavaScript static analysis: extracts API endpoints, URLs, secrets, and emails with noise filtering for web security testing.
heiheishushu/rsc_detect_cve-2025-55182Detects whether a website uses React Server Components (RSC) or Next.js, aiding in vulnerability assessment for CVEs like CVE-2025-55182.