pqaudit
pqcworld/pqauditScan codebases for quantum-vulnerable cryptography. Detect RSA, ECDSA, Ed25519, ECDH before Q-Day. CycloneDX CBOM + SARIF output.
code-analysiscryptographydevsecops+5
36 months ago
pqcworld/pqauditScan codebases for quantum-vulnerable cryptography. Detect RSA, ECDSA, Ed25519, ECDH before Q-Day. CycloneDX CBOM + SARIF output.
teycir/diffcatcherA Rust CLI tool that recursively discovers Git repositories, captures state changes, generates diffs, extracts code elements with full snippets, and…
intelowlproject/intelowlScalable threat intelligence platform that enriches observables and files using 200+ analyzers, with built-in GUI, REST API, and automated workflows…
bishopfox/jsluiceExtract URLs, paths, secrets, and other interesting bits from JavaScript
cryptax/droidlysisAutomated pre-analysis tool for Android apps that disassembles samples, extracts properties via configurable pattern matching, and organizes output…
0xpwny/apkatshuApkatshu is a Tool for extracting urls , emails , ip address , and interesting data from APK files
blackfan/bfscanTool for finding URLs, paths, secrets and generating raw HTTP requests and OpenApi specifications from config files and annotations used in JAR / WAR…
stuxctf/mhfMobile Helper Framework (mhf) is a tool that automates the process of identifying the framework/technology used to create a mobile application.…
professorquantumuniverse/vetoOpen-source Android client for VirusTotal. Scan files, URLs, and installed apps against 70+ antivirus engines. View detailed reports with hashes,…
h1nayoshi/smalienInformation flow analysis tool for Android applications
farhadalimohammadi-dir/vulnrepro-benchmarkBenchmark measuring AI models' ability to detect vulnerabilities in source code via real bug bounty cases with balanced recall and false-positive…
shinthink/blitzstrikeMCP server packaging a three-tier penetration-testing methodology: attack-surface reconnaissance, source-to-sink static analysis, and live finding…
certcc/trommelTROMMEL: Sift Through Embedded Device Files to Identify Potential Vulnerable Indicators
raoufmaklouf/jsecretFast Go-based static scanner for detecting sensitive data (API keys, tokens, passwords) in JavaScript files and source code using regex patterns.
horsicq/detect-it-easyProgram for determining types of files for Windows, Linux and MacOS.
symgraph/idassistAI-Powered Reverse Engineering Plugin for IDA Pro
hackinglz/svg_phishing_toolsSVG Analysis and generation tools for commonly seen SVG attachment phishing
xcodeon1/ipa-scopeStatic analysis tool for iOS applications that extracts links, API keys, subdomains, binary info, linked libraries, and strings to aid mobile…