An open-source user mode debugger for Windows. Optimized for reverse engineering and malware analysis.
Repository Index
55,140 visible repositories in the index
1–22 of 22 · Most stars
Security scanner for AI agent skills. Detect vulnerabilities, malicious patterns, security risks, prompt injection, data exfiltration, and supply-chain risks in Claude Code, Codex, and MCP skills before you install them.
- agent-security
- agent-skills
- agentic-ai
- ai-security
Loads environment variables from .env for nodejs projects.
- dotenv
- environment-variables
- javascript
- node
Vulnerability scanner written in Go which uses the data provided by https://osv.dev
Go security checker
- golang
- security
- security-tools
- security-automation
Bandit is a tool designed to find common security issues in Python code.
- linter
- bandit
- security-tools
- security-scanner
A static analysis security vulnerability scanner for Ruby on Rails applications
- ruby
- rails
- security
- static-analysis
Static analysis for GitHub Actions (and more)
a secure dotenv—from the creator of `dotenv`
- dotenv
- env
- dotenvx
- environment-variables
Code security scanning tool (SAST) to discover, filter and prioritize security and privacy risks.
Patch-level verification for Bundler
- bundler-audit
- ruby-advisory-db
- ruby
- dependency-checker
Find security vulnerabilities, compliance issues, and infrastructure misconfigurations early in the development cycle of your infrastructure-as-code with KICS by Checkmarx.
Quickly clone or backup massive amounts of org/users repositories into one directory - Supports GitHub, GitLab, Bitbucket, and more 🐇🥚
grep rough audit - source code auditing tool
- security
- shell
- vulnerability-detection
- source-code
LunaSec - Dependency Security Scanner that automatically notifies you about vulnerabilities like Log4Shell or node-ipc in your Pull Requests and Builds. Protect yourself in 30 seconds with the LunaTrace GitHub App: https://github.com/marketplace/lunatrace-by-lunasec/
- tokenization
- web-security
- compliance
- security
The open-source AI security harness. Includes a web interface for code analysis, pentesting, vulnerability research, reverse engineering, verification, and fixing + CLI and MCP for agents.
- llm-agents
- security-research
- security-tools
- application-security
Open source AI code review for coding agents. A separate reviewer checks every change your agent writes before you push, in Claude Code, Codex, Cursor and Cline. No account or key of its own.
- agent-skills
- ai-agents
- ai-code-review
- claude-code
StaCoAn is a crossplatform tool which aids developers, bugbounty hunters and ethical hackers performing static code analysis on mobile applications.
- bugbounty
- security
- security-tools
- mobile-security
Static Application Security Testing (SAST) engine focused on covering the OWASP Top 10, to make source code analysis to find vulnerabilities right in the source code, focused on a agile and easy to implement software inside your DevOps pipeline. Support the following technologies: Java (Maven and Android), Kotlin (Android), Swift (iOS), .NET Full Framework, C#, and Javascript (Node.js).
- sast
- security-tools
- security-scanner
- security-automation
A static analysis tool for security
- php
- static-code-analysis
- security-tools
- vulnerability-scanners
Local-first Git diff triage. Turn patches into actionable review checklists in your browser, CLI or GitHub Actions. Zero dependencies, no AI keys, no uploads. By brunnodev.
- code-review
- developer-tools
- git-diff
- github-actions
🛡️ Static security scanner (SAST) for Ansible playbooks, roles, and collections. 1,000+ rules across 30+ categories detecting malicious code, RCE, hardcoded credentials, and supply-chain risk. Outputs SARIF, CycloneDX SBOM, and GitLab SAST. SLSA Build Level 3, Sigstore-signed.
- ansible
- ansible-playbook
- devsecops
- infrastructure-as-code