🔍 A Hex Editor for Reverse Engineers, Programmers and people who value their retinas when working at 3 AM.
- hex-editor
- reverse-engineering
- ips
- dear-imgui
Repository Index
47,133 repositories indexed
1–24 of 25 · Most stars
Mobile Security Framework (MobSF) is an automated, all-in-one mobile application (Android/iOS/Windows) pen-testing, malware analysis and security assessment framework capable of performing static and dynamic analysis.
- static-analysis
- dynamic-analysis
- mobsf
- android-security
A Java 8+ Jar & Android APK Reverse Engineering Suite (Decompiler, Editor, Debugger & More)
- java-decompiler
- apk
- java
- procyon
A vulnerability scanner for container images and filesystems
Program for determining types of files for Windows, Linux and MacOS.
- debugger
- detect
- unpacker
- disassembler
Vulnerability Static Analysis for Containers
Prevent cloud misconfigurations and find vulnerabilities during build-time in infrastructure as code, container images and open source packages with Checkov by Bridgecrew.
The modern Java bytecode editor
- java
- bytecode
- bytecode-engineering
- reverse-engineering
Scanning APK file for URIs, endpoints & secrets.
- mobile-security
- android-security
- reverse-engineering
- bugbounty
The SpotBugs plugin for security audits of Java web applications and Android applications. (Also work with Kotlin, Groovy and Scala projects)
- findbugs
- java
- security-audit
- owasp
Binary Analysis Platform
- binary-analysis
- reverse-engineering
- program-analysis
- static-analysis
Security-focused static analysis for the Phoenix Framework
Linting tool for CloudFormation templates
- continuous-testing
- unit-testing
- cloudformation
- aws
:coffee: SonarSource Static Analyzer for Java Code Quality and Security
- java
- sonarqube
- static-code-analysis
- static-analyzer
Protect against malicious open source packages 🤖
awesome llvm security [Welcome to PR]
- llvm
- ollvm
- clang
- obfuscate
HaboMalHunter is a sub-project of Habo Malware Analysis System (https://habo.qq.com), which can be used for automated malware analysis and security assessment on the Linux system.
- malware-analysis
- dynamic-analysis
- security
- linux
Andromeda - Interactive Reverse Engineering Tool for Android Applications
- android
- reverse-engineering
- binary-analysis
- static-analysis
Static Application Security Testing (SAST) engine focused on covering the OWASP Top 10, to make source code analysis to find vulnerabilities right in the source code, focused on a agile and easy to implement software inside your DevOps pipeline. Support the following technologies: Java (Maven and Android), Kotlin (Android), Swift (iOS), .NET Full Framework, C#, and Javascript (Node.js).
- sast
- security-tools
- security-scanner
- security-automation
SonarQube extension for Visual Studio providing code quality and security feedback directly in the IDE
- visual-studio
- sonarlint
- sonarqube
- code-quality
Astral-PE is a low-level mutator (Headers/EP obfuscator) for native Windows PE files (x32/x64)
- cybersecurity
- hacktoberfest
- low-level
- mutator
StaDynA: Addressing the Problem of Dynamic Code Updates in the Security Analysis of Android Applications
- android-security
- android
- static-analysis
- dynamic-analysis
🛡️ Static security scanner (SAST) for Ansible playbooks, roles, and collections. 1,000+ rules across 30+ categories detecting malicious code, RCE, hardcoded credentials, and supply-chain risk. Outputs SARIF, CycloneDX SBOM, and GitLab SAST. SLSA Build Level 3, Sigstore-signed.
- ansible
- ansible-playbook
- devsecops
- infrastructure-as-code
AI writes. SPARDA proves. A deterministic, offline gate that catches when an AI edit removes a guard, exposes a route, or breaks an invariant — no API key, right in the agent edit loop.
- ai-agents
- ai-code-review
- authorization
- bola