47,133 repositories indexed
1–24 of 36 · Most stars
Security scanner for AI agent skills. Detect vulnerabilities, malicious patterns, security risks, prompt injection, data exfiltration, and supply-chain risks in Claude Code, Codex, and MCP skills before you install them.
Six Degrees of Domain Admin
🤖 A CLI application that automatically prepares Android APK files for HTTPS inspection
Android Reverse-Engineering Workbench for VS Code
Cecil is a library to inspect, modify and create .NET programs and libraries.
Android Package Inspector - dynamic analysis with api hooks, start unexported activities and more. (Xposed Module)
A generic, spec-compliant, thorough implementation of the OAuth request-signing logic
Th3Inspector 🕵️ Best Tool For Information Gathering 🔎
DRAKVUF Black-box Binary Analysis
:rocket: An open source alternative to searx which provides a modern-looking :sparkles:, lightning-fast :zap:, privacy respecting :disguised_face:, secure :lock: meta search engine
🕵️ Tool to reverse-engineer Protocol Buffers with unknown definition
SIPVicious OSS is a VoIP security testing toolset. It helps security teams, QA and developers test SIP-based VoIP systems and applications. This toolset is useful in simulating VoIP hacking attacks against PBX systems especially through identification, scanning, extension enumeration and password cracking.
APKinspector is a powerful GUI tool for analysts to analyze the Android applications.
A concise, directive, specific, flexible, and free incident response plan template
Java library to analyse Portable Executable files with a special focus on malware analysis and PE malformation robustness
Keyscope is a key and secret workflow (validation, invalidation, etc.) tool built in Rust
Limon is a sandbox developed as a research project written in python, which automatically collects, analyzes, and reports on the run time indicators of Linux malware. It allows one to inspect Linux malware before execution, during execution, and after execution (post-mortem analysis) by performing static, dynamic and memory analysis using open source tools
Discover internet-wide misconfigurations while drinking coffee
Set of tools for security testing of Internet of Things devices using specific network IoT protocols
inVtero.net: A high speed (Gbps) Forensics, Memory integrity & assurance. Includes offensive & defensive memory capabilities. Find/Extract processes, hypervisors (including nested) in memory dumps using microarchitechture independent Virtual Machiene Introspection techniques
A Rails 6 boilerplate to create your next Saas product. Preloaded with graphQL, devise, JWT, CanCanCan, RailsAdmin, Rubocop, Rspec, i18n and more.
Authenticated and encrypted API tokens using modern crypto
A convenience library for generating, comparing and inspecting password hashes using the scrypt KDF in Go 🔑
preflight helps you verify scripts and executables to mitigate chain of supply attacks such as the recent Codecov hack.