Tools

iqtlabs/auraborealisapp

Do You Know What's In Your Python Packages? A Tool for Visualizing Python Package Registry Security Audit Data

samsung/utopia

UT based automated fuzz driver generation

chris-anley/cq

Source code security scanner for expert code review; emits file:line findings in plain text, designed for fast manual triage and filtering with…

nccgroup/cq

Fast code security scanner designed for manual security code review by experts. Outputs line-referenced findings to text files for easy filtering and…

sudo-wp/sudowp-hooks-visualizer

A security-hardened fork of "Simply Show Hooks". Replaces the compromised original (CVE-2024-6297) and patches unlisted Cross-Site Scripting (XSS)…

mandiant/route-sixty-sink

Traces user input from sources to dangerous sinks in .NET assemblies, automating source-to-sink data flow analysis to identify vulnerabilities in C#…

pycqa/bandit

AST-based security linter that scans Python code for common vulnerabilities by running plugins against parsed syntax trees, generating detailed…

doyensec/regexploit

Find regular expressions which are vulnerable to ReDoS (Regular Expression Denial of Service)

trailofbits/multiplier

Indexes C/C++ build artifacts into a queryable whole-program database, exposing AST, token, and IR-level APIs for code auditing and vulnerability…

jagracey/regex-dos

👮 👊 RegEx Denial of Service (ReDos) Scanner

advanced-threat-research/creosote

Scans Python codebases for the tarfile extraction vulnerability (CVE-2007-4559) using AST parsing, categorizing findings by confidence to prioritize…

avast/yls

Language server for YARA rule development, providing code completion, linting, formatting, navigation, and debugging support inside IDEs.

mustafabilgici/sucoshscanny

"Sucosh" is an automated Source Code vulnerability scanner and assessment framework for Python(Flask-Django) & NodeJs capable of performing code…

bekk/retire.js

Detects JavaScript libraries and Node.js modules with known vulnerabilities via CLI, Chrome extension, and CI/CD plugin integrations for web…

ockeghem/cve-2015-6835-checker

PHP script to detect CVE-2015-6835 (session deserialization vulnerability) by analyzing source code for unsafe unserialize() calls in session…

jfrog/jfrog-cve-2022-24675

Shell script to recursively scan folders for Go binaries using insecure pem.Decode function, detecting vulnerable or stripped binaries for…

shoucheng3/codehaus-plexus__plexus-utils_cve-2022-4244_3-0-23

Java utility library with patched CVE-2022-4244 vulnerability, providing common helper classes for I/O, reflection, and CLI argument parsing in…