yuske

deno

A modern runtime for JavaScript and TypeScript.

bun

Incredibly fast JavaScript runtime, bundler, test runner, and package manager – all in one

unredacter

Never ever ever use pixelation as a redaction technique

magic-trace

magic-trace collects and displays high-resolution traces of what a process is doing

learning-v8

Project for learning V8 internals

fuzzilli

A JavaScript Engine Fuzzer

Ropper

Display information about files in different file formats and find gadgets to build rop chains for different architectures (x86/x86_64, ARM/ARM64, MIPS, PowerPC, SPARC64). For disassembly ropper uses the awesome Capstone Framework.

BinAbsInspector

BinAbsInspector: Vulnerability Scanner for Binaries

ms-teams-rce

MicrosoftWontFixList

A list of vulnerabilities or design flaws that Microsoft does not intend to fix. Since the number is growing, I decided to make a list. This list covers only vulnerabilities that came up in July 2021 (and SpoolSample ;-))

codeql-cli-binaries

Binaries for the CodeQL CLI

angrop

sandworm-audit

Security & License Compliance For Your App's Dependencies 🪱

content-type-research

Content-Type Research

HexraysToolbox

Hexrays Toolbox - Find code patterns within the Hexrays ctree

KoiVM-Virtualization

Virtualization made for .NET using ConfuserEX

mongotail

Command line tool to log all MongoDB queries in a "tail"able way

ossf-cve-benchmark

The OpenSSF CVE Benchmark consists of code and metadata for over 200 real life CVEs, as well as tooling to analyze the vulnerable codebases using a variety of static analysis security testing (SAST) tools and generate reports to evaluate those tools.

sarif-vscode-extension

SARIF Microsoft Visual Studio Code extension

github-dependents-info

Collect information about dependencies between a github repo and other repositories. Results available in JSON, markdown and badge

bjoern

Binary analysis platform based on Octopus and Radare2

VSharp

Symbolic execution engine for .NET Core

proposal-symbol-proto

TC39 proposal for mitigating prototype pollution

HolBA

Binary analysis in HOL

SecBench.js

cauliflower

A Solver-Generator for CFL-R problems

Strings-Extractor

Extracts strings from .NET files through the #US stream

GLL4Graph

GLL-based context-free path querying algorithm

nodeprof.js

Instrumentation framework for Node.js compliant to ECMAScript 2020 based on GraalVM.

pathfinder

CFL-R-based static analysis tool