Reverse engineer anything with agents, from app behavior down to native binaries.
Repository Index
54,141 visible repositories in the index
1–24 of 300 · Most stars
Dex to Java decompiler
- android
- dex
- java
- decompiler
Shannon is an AI pentester for web applications and APIs. It analyzes your source code, identifies attack vectors, and executes real exploits to prove vulnerabilities before they reach production.
- penetration-testing
- pentesting
- security-audit
- security-automation
An open-source user mode debugger for Windows. Optimized for reverse engineering and malware analysis.
Metasploit Framework
- hacktoberfest
Automatic SQL injection and database takeover tool
- sql-injection
- detection
- exploitation
- python
Open Source Identity and Access Management For Modern Applications and Services
- keycloak
- oidc
- saml
A boilerplate for Node.js web applications
The most comprehensive authentication framework
- authentication
- oauth
- oauth2
- typescript
DNS-Blocklists: For a better internet - keep the internet clean!
- dns
- ads
- blacklist
- blocklist
Authentication for the Web.
⚙️ NGINX config generator on steroids 💉
A tool for reverse engineering Android apk files
- apktool
- apk
- android
- reverse-engineering
The authentication glue you need.
- saml
- saml-idp
- saml-sp
- oauth2
Mobile Security Framework (MobSF) is an automated, all-in-one mobile application (Android/iOS/Windows) pen-testing, malware analysis and security assessment framework capable of performing static and dynamic analysis.
- static-analysis
- dynamic-analysis
- mobsf
- android-security
SWE-agent takes a GitHub issue and tries to automatically fix it, using your LM of choice. It can also be employed for offensive cybersecurity or competitive coding challenges. [NeurIPS 2024]
Apache Casbin: an authorization library that supports access control models like ACL, RBAC, ABAC.
- casbin
- access-control
- authorization
- rbac
Wazuh - The Open Source Security Platform. Unified XDR and SIEM protection for endpoints and cloud workloads.
- security
- compliance
- log-analysis
- vulnerability-detection
Internet-scale OpenID Certified™ OpenID Connect and OAuth2.1 provider that integrates with your user management through headless APIs. Solve OIDC/OAuth2 user cases over night. Consume as a service on Ory Network or self-host. Trusted by OpenAI and many others for scale and security. Written in Go.
- hydra
- oauth2
- openid-connect
- docker
A 100% free modern JS SaaS boilerplate (React, NodeJS, Prisma). Full-featured: Auth (email, google, github, slack, MS), Email sending, Background jobs, Landing page, Payments (Stripe, Polar.sh), Shadcn UI, S3 file upload. AI-ready with tailored AGENTS.md, skills, and Claude Code plugin. One cmd deploy. Powered by Wasp full-stack framework.
- full-stack
- open-source
- saas
- nodejs
MVT (Mobile Verification Toolkit) helps with conducting forensics of mobile devices in order to find signs of a potential compromise.
A Java 8+ Jar & Android APK Reverse Engineering Suite (Decompiler, Editor, Debugger & More)
- java-decompiler
- apk
- java
- procyon
ZITADEL - Identity infrastructure, simplified for you.
- saml
- authentication
- authorization
- login
Most advanced XSS scanner.
- xss
- xss-scanner
- xss-exploit
- xss-bruteforce