neuroo

grabber

[DON'T USE ME] plain ol' web apps scanner

equip

Python bytecode instrumentation library

runtime-tracer

Dynamic tracing for binary applications (using PIN), IDA plugin to visualize and interact with the traces

apache-scalp

Scalp! is a log analyzer for the Apache web server that aims to look for security problems

pinpy

Detours from binaries method entry/exit point to Python scripts (PIN, CPython API)

LockMeNow

My iPhone 5 lock button is not working properly, so I wrote this app

json-ast

A tolerant JSON parser for Node

blacksheep

defunct web browser for pen-testing

xpdbg

PHP runtime analysis toolset based on Xdebug

java-runtime-tracer

JVMTI agent, following the same pattern as the runtime-tracer

tocify

Small JavaScript table of contents generator for Markdown generated HTML

tracer

Embed me in your Python application, I'll help you trace it.

sql-proc-analysis

Quick'n'dirty T-SQL procedure static analysis (don't be fooled, there is no inter-procedural static analysis engine behind, and it only follows assignments...)

cert-rosecheckers

codeql

CodeQL: the libraries and queries that power security researchers around the world, as well as code scanning in GitHub Advanced Security

Damn_Vulnerable_C_Program

An example C program which contains vulnerable code for common types of vulnerabilities. It can be used to show fuzzing concepts.

difftastic

a structural diff that understands syntax 🟥🟩

f-commons-exec

Apache Commons Exec

fuzzer-goal-directed

fuzzgoat

A vulnerable C program for testing fuzzers.

insecure-coding-examples

Code examples for the talk Secure Coding Practices in C++

juliet-test-suite-c

s-juice-shop

OWASP Juice Shop: Probably the most modern and sophisticated insecure web application

sei-cert-ccs-samples

SEI CERT C Coding Standard samples

sei-cert-cppcs-samples

SEI CERT C++ Coding Standard samples

strapi

🚀 Strapi is the leading open-source headless CMS. It’s 100% JavaScript, fully customizable and developer-first.

tis-demos

A collection of C/C++ code snippets showing TrustInSoft Analyzer capabilities

tree-sitter

An incremental parsing system for programming tools