All projects
Repositories in this selection 84 · UTC 2026-11-03
CompareRankProjectStarFork30-day trend7-day net changeLast pushSign in to save
1—WWerWolv / ImHex🔍 A Hex Editor for Reverse Engineers, Programmers and people who value their retinas when working at 3 AM.C++GPL-2.0 · Share derivative sourceInsufficient rank history55,7262,602——2026-10-09
2—Aastral-sh / ruffAn extremely fast Python linter and code formatter, written in Rust.RustMIT · PermissiveInsufficient rank history50,4072,574——2026-11-03
3—Kkoalaman / shellcheckShellCheck, a static analysis tool for shell scriptsHaskellGPL-3.0 · Share derivative sourceInsufficient rank history40,2731,973——2026-10-26
4—Ttirth8205 / code-review-graphLocal-first code intelligence graph for MCP and CLI. Builds a persistent map of your codebase so AI coding tools read only what matters, with benchmarked context reductions on reviews and large-repo workflows.PythonMIT · PermissiveInsufficient rank history32,5622,964——2026-10-29
5—MMobSF / Mobile-Security-Framework-MobSFMobile Security Framework (MobSF) is an automated, all-in-one mobile application (Android/iOS/Windows) pen-testing, malware analysis and security assessment framework capable of performing static and dynamic analysis.PythonGPL-3.0 · Share derivative sourceInsufficient rank history22,1133,799——2026-11-01
6—Rrealm / SwiftLintA tool to enforce Swift style and conventions.SwiftMIT · PermissiveInsufficient rank history19,7792,338——2026-10-16
7—Nnikic / PHP-ParserA PHP parser written in PHPPHPBSD-3-Clause · PermissiveInsufficient rank history17,4631,144——2026-10-27
8—Ssemgrep / semgrepLightweight static analysis for many languages. Find bug variants with patterns that look like source code.CLGPL-2.1 · Share derivative sourceInsufficient rank history17,4201,143——2026-11-03
9—Aast-grep / ast-grep⚡A CLI tool for code structural search, lint and rewriting. Written in RustRustMIT · PermissiveInsufficient rank history16,424488——2026-11-03
10—Mmeta / inferA static analyzer for Java, C, C++, and Objective-COCamlMIT · PermissiveInsufficient rank history15,7412,102——2026-11-02
11—KKonloch / bytecode-viewerA Java 8+ Jar & Android APK Reverse Engineering Suite (Decompiler, Editor, Debugger & More)JavaGPL-3.0 · Share derivative sourceInsufficient rank history15,7031,299——2026-10-30
12—Aanalysis-tools-dev / static-analysis⚙️ A curated list of static analysis (SAST) tools and linters for all programming languages, config files, build tools, and more. The focus is on tools which improve code quality.RustMIT · PermissiveInsufficient rank history14,8651,524——2026-11-01
13—Rrshipp / awesome-malware-analysisDefund the Police.UnknownNOASSERTION · Restricted / unknownInsufficient rank history14,3682,691——2024-06-07
14—Pphpstan / phpstanPHP Static Analysis Tool - discover bugs in your code without running it!PHPMIT · PermissiveInsufficient rank history14,149971——2026-11-03
15—PPHP-CS-Fixer / PHP-CS-FixerA tool to automatically fix PHP Coding Standards issuesPHPMIT · PermissiveInsufficient rank history13,5711,651——2026-11-01
16—OOWASP / mastgThe OWASP Mobile Application Security Testing Guide (MASTG) is a comprehensive manual for mobile app security testing and reverse engineering. It describes technical processes for verifying the OWASP Mobile Security Weakness Enumeration (MASWE) weaknesses, which are in alignment with the OWASP MASVS.PythonCC-BY-SA-4.0 · Share derivative sourceInsufficient rank history13,3062,845——2026-11-02
17—Aanchore / grypeA vulnerability scanner for container images and filesystemsGoApache-2.0 · PermissiveInsufficient rank history13,163930——2026-11-02
18—Tttroy50 / cmake-examplesUseful CMake ExamplesCMakeMIT · PermissiveInsufficient rank history13,0682,515——2024-02-28
19—Hhadolint / hadolintDockerfile linter, validate inline bash, written in HaskellHaskellGPL-3.0 · Share derivative sourceInsufficient rank history12,509513——2026-10-19
20—Hhorsicq / Detect-It-EasyProgram for determining types of files for Windows, Linux and MacOS.JavaScriptMIT · PermissiveInsufficient rank history11,858992——2026-11-02
License tiers are derived from metadata. Check obligations for your use; unknown does not mean prohibited.