Detect-It-Easy

⚙️ A curated list of static analysis (SAST) tools and linters for all programming languages, config files, build tools, and more. The focus is on tools which improve code quality.

code-quality

linter

static-code-analysis

SonarSource/sonarqube
628日前8.4k

Continuous Inspection

code-quality

static-analysis

sonarqube

checkstyle/checkstyle
628日前8.1k

Checkstyle is a development tool to help programmers write Java code that adheres to a coding standard. By default it supports the Google Java Style Guide and Sun Code Conventions, but is highly configurable. It can be invoked with an ANT task and a command line program.

reviewdog/reviewdog
628日前7.1k

🐶 Automated code review tool integrated with any code analysis tools regardless of programming language

facebook/pyre-check
628日前6.6k

Performant type-checking for python.

abstract-interpretation

program-analysis

taint-analysis

control-flow-analysis

detekt/detekt
628日前5.9k

Static code analysis for Kotlin

pylint-dev/pylint
629日前5.0k

It's not just a linter that annoys you!

pmd/pmd
629日前4.6k

An extensible multilanguage static code analyzer.

kucherenko/jscpd
628日前4.4k

Copy/paste detector for programming source code.

codeclimate/codeclimate
633日前2.5k

Code Climate CLI

ajinabraham/nodejsscan
630日前2.3k

nodejsscan is a static security code scanner for Node.js applications.

mbj/mutant
630日前1.9k

Automated code reviews via mutation testing - semantic code coverage.

ruby

code-review

static-analysis

code-quality-analyzer

Tencent/CodeAnalysis
628日前1.5k

Static Code Analysis - 静态代码分析

code-quality

code-review

code-quality-analyzer

program-analysis

code-analysis

python37

x64dbg/x64dbg
628日前42.7k

An open-source user mode debugger for Windows. Optimized for reverse engineering and malware analysis.

rrrene/credo
628日前4.8k

A static code analysis tool for the Elixir language with a focus on code consistency and teaching.

unicorn-engine/unicorn
628日前7.0k

Unicorn CPU emulator framework (ARM, AArch64, M68K, Mips, Sparc, PowerPC, RiscV, S390x, TriCore, X86)

capstone-engine/capstone
628日前6.9k

Capstone disassembly/disassembler framework for ARM, ARM64 (ARMv8), BPF, Ethereum VM, M68K, M680X, Mips, MOS65XX, PPC, RISC-V(rv32G/rv64G), SH, Sparc, SystemZ, TMS320C64X, TriCore, Webassembly, XCore and X86.

hadolint/hadolint
628日前9.5k

Dockerfile linter, validate inline bash, written in Haskell

nikic/PHP-Parser
629日前16.5k

A PHP parser written in PHP

REDasmOrg/REDasm
628日前1.5k

The OpenSource Disassembler

JustasMasiulis/lazy_importer
628日前1.4k

library for importing functions from dlls in a hidden, reverse engineer unfriendly way

wbthomason/packer.nvim
627日前7.4k

A use-package inspired plugin manager for Neovim. Uses native packages, supports Luarocks dependencies, written in Lua, allows for expressive config

liriliri/eruda
627日前16.8k

Console for mobile browsers

kaitai-io/kaitai_struct
627日前3.8k

Kaitai Struct: declarative language to generate binary data parsers in C++ / C# / Go / Java / JavaScript / Lua / Nim / Perl / PHP / Python / Ruby

baldurk/renderdoc
628日前8.2k

RenderDoc is a stand-alone graphics debugging tool.

lief-project/LIEF
627日前4.0k

LIEF - Library to Instrument Executable Formats

troessner/reek
630日前4.0k

Code smell detector for Ruby

pmusolino/Wormholy
629日前2.3k

iOS network debugging, like a wizard 🧙‍♂️

presidentbeef/brakeman
627日前6.9k

A static analysis security vulnerability scanner for Ruby on Rails applications

security-vulnerability

gruntwork-io/terratest
628日前7.3k

Terratest is a Go library that makes it easier to write automated tests for your infrastructure code.

aquasecurity/tfsec
627日前6.5k

Security scanner for your Terraform code

vulnerability-scanners

infrastructure-as-code

linter

google-cloud-platform

bridgecrewio/checkov
627日前6.4k

Prevent cloud misconfigurations and find vulnerabilities during build-time in infrastructure as code, container images and open source packages with Checkov by Bridgecrew.

infrastructure-as-code

chef/bento
629日前4.2k

Packer templates for building minimal Vagrant baseboxes for multiple platforms

Perfare/Il2CppDumper
627日前6.2k

Unity il2cpp reverse engineer

clong/DetectionLab
627日前4.5k

Automate the creation of a lab environment complete with security tooling and logging best practices

ChristianLempa/boilerplates
628日前3.4k

This is my personal template collection. Here you'll find templates, and configurations for various tools, and technologies.

StefanScherer/packer-windows
630日前1.2k

Windows Templates for Packer: Windows 11, Windows 10, Windows Server 2022, 2019, 2016, also with Docker

timsutton/osx-vm-templates
650日前1.1k

macOS templates for Packer and VeeWee.

WerWolv/ImHex
627日前31.8k

🔍 A Hex Editor for Reverse Engineers, Programmers and people who value their retinas when working at 3 AM.

mathematical-evaluator

astral-sh/ruff
626日前23.7k

An extremely fast Python linter and code formatter, written in Rust.

PyCQA/flake8
627日前3.2k

flake8 is a python tool that glues together pycodestyle, pyflakes, mccabe, and third-party plugins to check the style and quality of some python code.

winsiderss/systeminformer
626日前10.0k

A free, powerful, multi-purpose tool that helps you monitor system resources, debug software and detect malware. Brought to you by Winsider Seminars & Solutions, Inc. @ http://www.windows-internals.com

performance-monitoring

golang/vscode-go
627日前3.7k

Go extension for Visual Studio Code

CalebFenton/simplify
626日前4.3k

Android virtual machine and deobfuscator

pwndbg/pwndbg
626日前6.4k

Exploit Development and Reverse Engineering with GDB Made Easy

hugsy/gef
626日前6.3k

GEF (GDB Enhanced Features) - a modern experience for GDB with advanced debugging capabilities for exploit devs & reverse engineers on Linux

rev1si0n/lamda
626日前4.9k

⚡️ Android reverse engineering & automation framework | 史上最强安卓抓包/逆向/HOOK & 云手机/远程桌面/自动化辅助框架，你的工作从未如此简单快捷。

MobSF/Mobile-Security-Framework-MobSF
626日前15.9k

Mobile Security Framework (MobSF) is an automated, all-in-one mobile application (Android/iOS/Windows) pen-testing, malware analysis and security assessment framework capable of performing static and dynamic analysis.