47,133 repositories indexed
1–24 of 31 · Most stars
Mobile Security Framework (MobSF) is an automated, all-in-one mobile application (Android/iOS/Windows) pen-testing, malware analysis and security assessment framework capable of performing static and dynamic analysis.
CTF framework and exploit development library
Exploit Development and Reverse Engineering with GDB & LLDB Made Easy
The Leading Security Assessment Framework for Android.
This tool lets you search your gadgets on your binaries to facilitate your ROP exploitation. ROPgadget supports ELF, PE and Mach-O format on x86, x64, ARM, ARM64, PowerPC, SPARC, MIPS, RISC-V 64, and RISC-V Compressed architectures.
A high performance offensive security tool for reconnaissance and vulnerability scanning
Reverse engineering tool for Linux
Plasma is an interactive disassembler for x86/ARM/MIPS. It can generates indented pseudo-code with colored syntax.
Dissect is a digital forensics & incident response framework and toolset that allows you to quickly access and analyse forensic artefacts from various disk and file formats, developed by Fox-IT (part of NCC Group).
The repository host gives no description.
High fidelity scanner for php2shell (CVE-2026-109618 and CVE-2026-109619)
Krawl is a customizable, lightweight, cloud-native web deception server and anti-crawler that creates fake web applications with low-hanging vulnerabilities using realistic, randomly generated decoy data and AI-generated HTML templates.
HaboMalHunter is a sub-project of Habo Malware Analysis System (https://habo.qq.com), which can be used for automated malware analysis and security assessment on the Linux system.
AI-first external attack surface assessment with continuous discovery, evidence-based vulnerability validation, and developer-agent MCP integration.
MQTT-PWN intends to be a one-stop-shop for IoT Broker penetration-testing and security assessment operations.
Easily retargetable and hackable interactive disassembler with IDAPython-compatible plugin API
DC3 Malware Configuration Parser (DC3-MWCP) is a framework for parsing configuration information from malware. The information extracted from malware includes items such as addresses, passwords, filenames, and mutex names.
ROPMEMU is a framework to analyze, dissect and decompile complex code-reuse attacks.
Open Source SIEM (Security Information and Event Management system).
⚡A curated list of awesome resources related to the Ⱥlgorand Blockchain ⛓
Chiron - An IPv6 Security Assessment framework with advanced IPv6 Extension Headers manipulation capabilities.
SuperGhidra: Autonomous Agent Reverse Engineering, Lock-Free Ghidra Daemon & C++ Recovery Suite
Watchtower | Self-hosted AI security assessment, asset intelligence, and evidence workflows.
CLI utility and Python module for analyzing log files and other data.