An open-source user mode debugger for Windows. Optimized for reverse engineering and malware analysis.
Repository Index
47,133 repositories indexed
1–24 of 85 · Most stars
UNIX-like reverse engineering framework and command-line toolset
- radare2
- c
- commandline
- reverse-engineering
Security scanner for AI agent skills. Detect vulnerabilities, malicious patterns, security risks, prompt injection, data exfiltration, and supply-chain risks in Claude Code, Codex, and MCP skills before you install them.
- agent-security
- agent-skills
- agentic-ai
- ai-security
Mobile Security Framework (MobSF) is an automated, all-in-one mobile application (Android/iOS/Windows) pen-testing, malware analysis and security assessment framework capable of performing static and dynamic analysis.
- static-analysis
- dynamic-analysis
- mobsf
- android-security
Get Android app updates straight from the source.
Loads environment variables from .env for nodejs projects.
- dotenv
- environment-variables
- javascript
- node
Free and Open Source Reverse Engineering Platform powered by rizin
An HTTP toolkit for security research.
Prevent cloud misconfigurations and find vulnerabilities during build-time in infrastructure as code, container images and open source packages with Checkov by Bridgecrew.
Go security checker
- golang
- security
- security-tools
- security-automation
Bandit is a tool designed to find common security issues in Python code.
- linter
- bandit
- security-tools
- security-scanner
A static analysis security vulnerability scanner for Ruby on Rails applications
Tfsec is now part of Trivy
An AI-powered security review GitHub Action using Claude to analyze code changes for security vulnerabilities.
A PHP static analysis tool for finding errors and security vulnerabilities in PHP applications
- static-analysis
- php
- type-inference
- security-analysis
UNIX-like reverse engineering framework and command-line toolset.
- reverse-engineering
- program-analysis
- security
- exploitation
Library for OpenAPI 3 with spring-boot
- openapi3
- spring-boot
- springdoc-openapi
- swagger-ui
:closed_lock_with_key: Security advisories as a simple composer exclusion list, updated daily
- php
- security-advisories
- security-vulnerability
- composer
Code security scanning tool (SAST) to discover, filter and prioritize security and privacy risks.
Find security vulnerabilities, compliance issues, and infrastructure misconfigurations early in the development cycle of your infrastructure-as-code with KICS by Checkmarx.
The SpotBugs plugin for security audits of Java web applications and Android applications. (Also work with Kotlin, Groovy and Scala projects)
- findbugs
- java
- security-audit
- owasp
Quickly clone or backup massive amounts of org/users repositories into one directory - Supports GitHub, GitLab, Bitbucket, and more 🐇🥚
Security-focused static analysis for the Phoenix Framework
TranslatedDesktop Android leak audit: permissions, endpoints, data flows, reversible fixes. Phone privacy audit: uses adb to scan an Android app's permissions, reporting endpoints, and data flows, and provides reversible remediation.