Tools

akto-api-security/akto

Open-source API security platform for continuous API discovery, vulnerability testing, and runtime threat detection. Integrates with CI/CD pipelines…

google/oss-fuzz-gen

Generates and evaluates LLM-created fuzz targets against OSS-Fuzz to discover real-world vulnerabilities in C/C++, Java, and Python projects.

abacus-group-rto/legion

Semi-automated network penetration testing framework with integrated NMAP, Hydra, Nikto, and CVE-to-exploit mapping for discovery, reconnaissance,…

angorafuzzer/angora

Coverage-guided fuzzer that uses taint tracking and scalar optimization to solve path constraints without symbolic execution, improving branch…

narfindustries/http-garden

Differential testing framework for HTTP implementations

dwisiswant0/findom-xss

A fast DOM based XSS vulnerability scanner with simplicity.

cisco-ai-defense/defenseclaw

Admission control and runtime guardrails for agentic AI. Scans skills, MCP servers, plugins, and code before execution; inspects prompts,…

zer0condition/reversekit

Injected x64 runtime analysis toolkit that hooks syscalls/APIs, monitors threads, heaps, imports and URLs, and bypasses common debugger checks.

swdunlop/andbug

Scriptable debugger for Android Dalvik VM using JDWP/DDM interfaces to hook methods, inspect process state, and modify runtime behavior without…

trailofbits/polytracker

An LLVM-based instrumentation tool for universal taint tracking, dataflow analysis, and tracing.

chichou/vscode-frida

VSCode extension for Frida-based mobile reverse engineering: runtime class/module inspection, Java/ObjC/native hook generation, autocomplete, and…

byt3bl33d3r/offensivedlr

Toolbox containing research notes & PoC code for weaponizing .NET's DLR

redteamsocietegenerale/dllirant

Automates DLL hijacking and DLL proxying research on Windows binaries by analyzing PE imports, generating proxy DLLs, and producing proof-of-concept…

google/buzzer

eBPF fuzzer toolchain for generating random eBPF programs and validating kernel verifier/runtime behavior. Supports coverage-guided fuzzing and…

void-stack/vmunprotect.dumper

Dynamically unpacks VMProtect-protected .NET assemblies, removes tamper protection, and restores executable code for reverse engineering.

smackers/smack

Modular software verification toolchain that translates LLVM IR into Boogie intermediate verification language for bounded and experimental unbounded…

hackmanit/tinja

CLI tool for automated detection of server-side and client-side template injection vulnerabilities across 44 template engines in 8 programming…

ghostvectoracademy/dllhijackhunter

Automated DLL Hijacking Discovery, Validation, and Confirmation. Turning local misconfigurations into weaponized, confirmed attack paths.