apkvuln

ApkVuln root@kitploit: \ / \ / \ / \ / \ /\ \ \ \ /|\ \ \ | | | \ | |/ /\ \ / / | | | | | | | / \ | / ' \ V /| || | || . | // \|| |\ / /|||| Con ApkVuln obtendrás los archivos .java de un APK y serán analizados en busca de posibles vulnerabilidades en el código, para ello hará uso de...

checkov

...

StaCoAn

StaCoAn ¡Ya no se mantiene! Pronto será archivado. StaCoAn es una herramienta multiplataforma que ayuda a desarrolladores, cazadores de bugs y hackers éticos a realizar análisis estático de código en aplicaciones móviles. Esta herramienta busca líneas interesantes en el código que pueden contener...

cve-2020-29007

CVEID : CVE-2020-29007 Name of the affected products and versions : Mediawiki Score all versions up to 0.3.0 Problem type : CWE-96: Improper Neutralization of Directives in Statically Saved Code ‘Static Code Injection’ Summary Score is a Mediawiki extension which generates musical notation based ...

awesome-nodejs-security

Una lista curada de increíbles recursos de seguridad de Node.js. Aprende técnicas de codificación segura de Node.js y mejores prácticas de Liran Tal Contenido Herramientas Fortalecimiento del framework web Análisis estático de código Pruebas de seguridad dinámicas de aplicaciones Validación de...

packj

Packj flags malicious/risky open-source packages Packj pronounced package is a tool to help to mitigate software supply chain attacks. It can detect malicious, vulnerable, abandoned, typo-squatting, and other "risky" packages from popular open-source package registries, such as NPM, RubyGems, and...

androguard

Androguard Do you think your phone has been pwned ? please check IsMyPhonePwned New tool: Goauld Dynamic injection tool for Linux/Android See the new version of Androguard: https://github.com/androguard/androguard/tree/ng Installation Quick installation: root@kitploit: pip install androguard...

kube-score

kube-score kube-score is a tool that performs static code analysis of your Kubernetes object definitions. The output is a list of recommendations of what you can improve to make your application more secure and resilient. You can test kube-score out in the browser with the...

vulnhuntr

LLMと静的コード解析を使用して、リモートで悪用可能な脆弱性を特定するツールです。 世界初の自律型AIが発見した0day脆弱性 説明 Vulnhuntrは、LLMの力を活用して、リモートのユーザー入力から始まりサーバー出力に至るコード呼び出しチェーン全体を自動的に作成・分析し、従来の静的コード解析ツールの能力をはるかに超える、複雑で多段階のセキュリティ回避型脆弱性を検出します。すべての0dayに対するVulnhuntrの出力を含む詳細はこちら: Protect AI Vulnhuntr Blog 発見された脆弱性 !TIP Vulnhuntrを使用して脆弱性を発見しましたか？...

ngrev

ngrev Graphical tool for reverse engineering of Angular projects. It allows you to navigate in the structure of your application and observe the relationship between the different modules, providers, and directives. The tool performs static code analysis which means that you don't have to run you...

wpbullet

wpBullet A static code analysis for WordPress Plugins/Themes and PHP Installation Simply clone the repository, install requirements and run the script $ git clone https://github.com/webarx-security/wpbullet wpbullet $ cd wpbullet $ pip install -r requirements.txt $ python wpbullet.py Usage...

wpbullet

wpBullet Un análisis estático de código para Plugins/Temas de WordPress y PHP Instalación Simplemente clona el repositorio, instala los requisitos y ejecuta el script $ git clone https://github.com/webarx-security/wpbullet wpbullet $ cd wpbullet $ pip install -r requirements.txt $ python...

autoSource

AutoSource AutoSource es un marco de revisión automatizada de código fuente integrado con SonarQube, capaz de realizar análisis/revisiones estáticas de código. Se puede utilizar para encontrar vulnerabilidades de manera efectiva en una etapa muy temprana del SDLC Ciclo de Vida del Desarrollo de...

CVE-2026-68489

Static Code Injection in Plesk extensions "Ruby" before 1.6.6 and "Node.js Toolkit" before 2.5.0 allows remote authenticated users to execute arbitrary code as root via custom environment variables...

CVE-2026-68489

CVE-2026-68489 is a Static Code Injection vulnerability in two Plesk extensions: Ruby (before 1.6.6) and Node.js Toolkit (before 2.5.0). A remote authenticated user can execute arbitrary code as root by crafting malicious custom environment variables . The vulnerability scores 8.7 (HIGH) under CV...

EUVD-2026-78137

Static Code Injection in Plesk extensions "Ruby" before 1.6.6 and "Node.js Toolkit" before 2.5.0 allows remote authenticated users to execute arbitrary code as root via custom environment variables...

static-code-analysis-helper

Static-Code-Analysis-Helper Description It detects functions that are likely to cause attack methodologies in many web programming languages ​​and frameworks in your project folder. Helps you perform static code analysis. Note : Many of the functions described here may not cause vulnerabilities...

CVE-2026-86218-N-central-IOC-Toolkit

CVE-2026-86218 — N-able N-central Pre-Authentication RCE | IOC & Detection Toolkit CVSS 10.0 Critical · Pre-Auth Remote Code Execution · Static Code Injection CWE-96 · Actively Exploited · CISA KEV -yellow Maintainer: @jithinkrishnanrs · Repo:...

whispers

Whispers "My little birds are everywhere, even in the North, they whisper to me the strangest stories." - Lord Varys Whispers is a static code analysis tool designed for parsing various common data formats in search of hardcoded credentials and dangerous functions. Whispers can run in the CLI or...

N-able N-central Pre-Auth RCE Flaw Exploited in the Wild

The U.S. Cybersecurity and Infrastructure Security Agency CISA on Tuesday added a maximum-severity security flaw impacting N-able N-central to its Known Exploited Vulnerabilities KEV catalog, requiring Federal Civilian Executive Branch FCEB agencies to apply the fixes by September 11, 2026. The...