JShunter
cc1a2b/jshunterjshunter is a command-line tool designed for analyzing JavaScript files and extracting endpoints. This tool specializes in identifying sensitive…
api-securitydynamic-code-analysispenetration-testing+6
539
cc1a2b/jshunterjshunter is a command-line tool designed for analyzing JavaScript files and extracting endpoints. This tool specializes in identifying sensitive…
ucsb-mlsec/vulnllm-rSpecialized reasoning LLM for source-code vulnerability detection in C/C++ and Python, with dataset construction, SFT/DPO training, and…
makenowjust-labs/recheckStatic analysis tool for detecting ReDoS (Regular Expression Denial of Service) vulnerabilities in JavaScript and Scala codebases, providing…
slowql/slowqlNext-generation SQL static analyzer written in Rust. 282+ rules. Zero false positives. Security, performance, reliability, cost, compliance, quality.…
kira2040k/php_code_analysisStatic PHP code scanner that detects SQL injection, XSS, SSRF, LFI, command injection, insecure deserialization, and other web vulnerabilities in…
vusec/ghostraceProof-of-concept and static analysis toolkit for finding speculative race condition (SCUAF) gadgets in Linux kernel. Includes 1200+ gadget dataset.
mustafabilgici/sucoshscanny"Sucosh" is an automated Source Code vulnerability scanner and assessment framework for Python(Flask-Django) & NodeJs capable of performing code…
0x3c3e/slidesCodeQL + DTrace = Memory Disclosure Vulnerabilities in XNU
nationwide-group-oss/cryptopticCodeQL-based scanner that inventories cryptographic function calls across repositories and GitHub organizations, producing a Cryptographic Bill of…
martyx00/vulnfanatic-ngBianryNinja plugin for identifying vulnerabilities in decompiled binaries with both programmatic scans and LLM support.
xs2024770/cve-2024-57521-ruoyi-sqliStatic code audit of CVE-2024-57521, an authenticated SQL injection in RuoYi-Vue's generator module, with source-to-sink analysis and a %0b filter…
shentao83/news-8.6.0-cve-2026-8726-backportMinimal security backport for CVE-2026-8726 in georgringer/news 8.6.0
nccgroup/secretscrubProcesses SARIF output from static analysis tools to detect and redact hard-coded secrets in source code, creating a clean copy without the original…
minhhk68/cve-2026-13158Proof-of-concept exploit and technical advisory for an Admin+ arbitrary file upload to remote code execution vulnerability in Everest Toolkit…
ockeghem/cve-2015-6835-checkerPHP script to detect CVE-2015-6835 (session deserialization vulnerability) by analyzing source code for unsafe unserialize() calls in session…
merbinr/cve-2023-31606Documentation of CVE-2023-31606: a ReDoS vulnerability in Redcloth gem's sanitize_html function, with root cause analysis, CVSS 7.5 scoring, and…
7alen7/cve-2026-48813-pocProof-of-concept exploit for terminal escape sequence injection via malicious filenames that hides Flawfinder's scan findings; fixed in version…
shoucheng3/codehaus-plexus__plexus-utils_cve-2022-4244_3-0-23Java utility library with patched CVE-2022-4244 vulnerability, providing common helper classes for I/O, reflection, and CLI argument parsing in…