The OWASP Mobile Application Security Testing Guide (MASTG) is a comprehensive manual for mobile app security testing and reverse engineering. It describes technical processes for verifying the OWASP Mobile Security Weakness Enumeration (MASWE) weaknesses, which are in alignment with the OWASP MASVS.

Prevent cloud misconfigurations and find vulnerabilities during build-time in infrastructure as code, container images and open source packages with Checkov by Bridgecrew.

Awesome autocompletion, static analysis and refactoring library for python

Static Analyzer for Solidity and Vyper

It's not just a linter that annoys you!

Scanning APK file for URIs, endpoints & secrets.

A static type analyzer for Python code

flake8 is a python tool that glues together pycodestyle, pyflakes, mccabe, and third-party plugins to check the style and quality of some python code.

CodeChecker is an analyzer tooling, defect database and viewer extension for static and dynamic analyzer tools.

A Static Analysis Tool for Detecting Security Vulnerabilities in Python Web Applications

Zero shot vulnerability discovery using LLMs

Various code metrics for Python code

A service that analyzes docker images and scans for vulnerabilities

A reactive Python kernel for Jupyter notebooks.

a tool to perform static analysis of known vulnerabilities, trojans, viruses, malware & other malicious threats in docker images/containers and to monitor the docker daemon and running docker containers for detecting anomalous activities

An analysis tool for Python that blurs the line between testing and type systems.

My collection of various security tools created mostly in Python and Bash. For CTFs and Bug Bounty.

HaboMalHunter is a sub-project of Habo Malware Analysis System (https://habo.qq.com), which can be used for automated malware analysis and security assessment on the Linux system.

mobsfscan is a static analysis tool that can find insecure code patterns in your Android and iOS source code. Supports Java, Kotlin, Swift, and Objective C Code. mobsfscan uses MobSF static analysis rules and is powered by semgrep and libsast pattern matcher.

Packj stops ⚡ Solarwinds-, ESLint-, and PyTorch-like attacks by flagging malicious/vulnerable open-source dependencies ("weak links") in your software supply-chain