Repository Index

🔍 A Hex Editor for Reverse Engineers, Programmers and people who value their retinas when working at 3 AM.

• hex-editor
• reverse-engineering
• ips
• dear-imgui

Mobile Security Framework (MobSF) is an automated, all-in-one mobile application (Android/iOS/Windows) pen-testing, malware analysis and security assessment framework capable of performing static and dynamic analysis.

• static-analysis
• dynamic-analysis
• mobsf
• android-security

A Java 8+ Jar & Android APK Reverse Engineering Suite (Decompiler, Editor, Debugger & More)

• java-decompiler
• apk
• java
• procyon

A vulnerability scanner for container images and filesystems

• containers
• security
• vulnerability
• docker

Program for determining types of files for Windows, Linux and MacOS.

• debugger
• detect
• unpacker
• disassembler

Vulnerability Static Analysis for Containers

• containers
• static-analysis
• go
• kubernetes

Prevent cloud misconfigurations and find vulnerabilities during build-time in infrastructure as code, container images and open source packages with Checkov by Bridgecrew.

• terraform
• static-analysis
• aws
• gcp

The modern Java bytecode editor

• java
• bytecode
• bytecode-engineering
• reverse-engineering

Scanning APK file for URIs, endpoints & secrets.

• mobile-security
• android-security
• reverse-engineering
• bugbounty

Code security scanning tool (SAST) to discover, filter and prioritize security and privacy risks.

• appsec
• compliance
• devsecops
• devsecops-tools

The SpotBugs plugin for security audits of Java web applications and Android applications. (Also work with Kotlin, Groovy and Scala projects)

• findbugs
• java
• security-audit
• owasp

Binary Analysis Platform

• binary-analysis
• reverse-engineering
• program-analysis
• static-analysis

Security-focused static analysis for the Phoenix Framework

• static-analysis
• phoenix-framework
• security
• elixir

TranslatedDesktop Android leak audit: permissions, endpoints, data flows, reversible fixes. Phone privacy audit: uses adb to scan an Android app's permissions, reporting endpoints, and data flows, and provides reversible remediation.

• adb
• android
• cli
• kotlin

Linting tool for CloudFormation templates

• continuous-testing
• unit-testing
• cloudformation
• aws

:coffee: SonarSource Static Analyzer for Java Code Quality and Security

• java
• sonarqube
• static-code-analysis
• static-analyzer

Protect against malicious open source packages 🤖

• devsecops
• security
• supply-chain-security
• policy-as-code

awesome llvm security [Welcome to PR]

• llvm
• ollvm
• clang
• obfuscate

HaboMalHunter is a sub-project of Habo Malware Analysis System (https://habo.qq.com), which can be used for automated malware analysis and security assessment on the Linux system.

• malware-analysis
• dynamic-analysis
• security
• linux

Andromeda - Interactive Reverse Engineering Tool for Android Applications

• android
• reverse-engineering
• binary-analysis
• static-analysis

Static Application Security Testing (SAST) engine focused on covering the OWASP Top 10, to make source code analysis to find vulnerabilities right in the source code, focused on a agile and easy to implement software inside your DevOps pipeline. Support the following technologies: Java (Maven and Android), Kotlin (Android), Swift (iOS), .NET Full Framework, C#, and Javascript (Node.js).

• sast
• security-tools
• security-scanner
• security-automation

SonarQube extension for Visual Studio providing code quality and security feedback directly in the IDE

• visual-studio
• sonarlint
• sonarqube
• code-quality

Astral-PE is a low-level mutator (Headers/EP obfuscator) for native Windows PE files (x32/x64)

• cybersecurity
• hacktoberfest
• low-level
• mutator

StaDynA: Addressing the Problem of Dynamic Code Updates in the Security Analysis of Android Applications

• android-security
• android
• static-analysis
• dynamic-analysis