🔍 A Hex Editor for Reverse Engineers, Programmers and people who value their retinas when working at 3 AM.

windows macos linux c-plus-plus multi-platform cpp static-analysis reverse-engineering disassembler hacking forensics analyzer hex-editor cybersecurity dear-imgui binary-analysis ips hacktoberfest dark-mode pattern-language

• Updated Oct 9, 2026
• C++

An extremely fast Python linter and code formatter, written in Rust.

python rust styleguide static-code-analysis style-guide linter static-analysis python3 pep8 ruff rustpython

• Updated Nov 12, 2026
• Rust

ShellCheck, a static analysis tool for shell scripts

shell bash haskell linter static-analysis developer-tools

• Updated Nov 9, 2026
• Haskell

Local-first code intelligence graph for MCP and CLI. Builds a persistent map of your codebase so AI coding tools read only what matters, with benchmarked context reductions on reviews and large-repo workflows.

python tree-sitter mcp static-analysis incremental knowledge-graph code-review claude llm graphrag ai-coding claude-code

• Updated Nov 11, 2026
• Python

Mobile Security Framework (MobSF) is an automated, all-in-one mobile application (Android/iOS/Windows) pen-testing, malware analysis and security assessment framework capable of performing static and dynamic analysis.

rest static-analysis apk owasp dynamic-analysis web-security malware-analysis mobsf android-security mobile-security windows-mobile-security ios-security api-testing cwe devsecops runtime-security mstg masvs mastg

• Updated Nov 11, 2026
• Python

A tool to enforce Swift style and conventions.

swift linting linter static-analysis code-quality hacktoberfest

• Updated Nov 5, 2026
• Swift

Lightweight static analysis for many languages. Find bug variants with patterns that look like source code.

javascript ruby python c java go typescript static-code-analysis static-analysis production sast r2c semgrep

• Updated Nov 12, 2026
• C

A PHP parser written in PHP

php parser static-analysis ast

• Updated Nov 5, 2026
• PHP

⚡A CLI tool for code structural search, lint and rewriting. Written in Rust

refactoring search rust tree-sitter babel typescript command-line linter static-analysis ast codemod command-line-tool grep codereview structural-search

• Updated Nov 12, 2026
• Rust

A static analyzer for Java, C, C++, and Objective-C

c java objective-c cpp static-code-analysis static-analysis code-quality

• Updated Nov 10, 2026
• OCaml

A Java 8+ Jar & Android APK Reverse Engineering Suite (Decompiler, Editor, Debugger & More)

android java bytecode compiler jsp static-analysis java-decompiler decompiler apk war smali hacktoberfest bytecode-viewer dex2jar fernflower cfr baksmali procyon recompiler krakatau

• Updated Oct 30, 2026
• Java

⚙️ A curated list of static analysis (SAST) tools and linters for all programming languages, config files, build tools, and more. The focus is on tools which improve code quality.

analysis static-code-analysis linter static-analysis awesome-list code-quality static-analyzers hacktoberfest sast

• Updated Nov 9, 2026
• Rust

Defund the Police.

list awesome static-analysis chinese dynamic-analysis awesome-list malware-analysis chinese-translation malware-research threat-sharing threatintel malware-samples analysis-framework automated-analysis network-traffic threat-intelligence domain-analysis malware-collection drop-ice

• Updated Jun 7, 2024

PHP Static Analysis Tool - discover bugs in your code without running it!

testing php php7 static-code-analysis static-analysis static-analyzer phpstan

• Updated Nov 12, 2026
• PHP

A tool to automatically fix PHP Coding Standards issues

php static-analysis code-style code-standards

• Updated Nov 12, 2026
• PHP

The OWASP Mobile Application Security Testing Guide (MASTG) is a comprehensive manual for mobile app security testing and reverse engineering. It describes technical processes for verifying the OWASP Mobile Security Weakness Enumeration (MASWE) weaknesses, which are in alignment with the OWASP MASVS.

android ios static-analysis reverse-engineering hacking mobile-app android-application ios-app dynamic-analysis pentesting mobile-security network-analysis mast reverse-enginnering runtime-analysis mstg testing-cryptography compliancy-checklist mastg

• Updated Nov 10, 2026
• Python

A vulnerability scanner for container images and filesystems

go docker golang security tool containers static-analysis oci vulnerability vex vulnerabilities hacktoberfest container-image cyclonedx openvex

• Updated Nov 11, 2026
• Go

Useful CMake Examples

unit-testing cmake tutorial cpp catch boost static-analysis clang cpack cppcheck clang-format google-test ctest

• Updated Feb 28, 2024
• CMake

Dockerfile linter, validate inline bash, written in Haskell

docker dockerfile haskell linter static-analysis shellcheck dockerfile-linter

• Updated Oct 19, 2026
• Haskell

Program for determining types of files for Windows, Linux and MacOS.

debugger detect packer entropy scanner static-analysis reverse-engineering disassembler detector mach-o elf malware-analysis binary-analysis program-analysis macho malware-research pentest hacktoberfest unpacker hacktoberfest2023

• Updated Nov 12, 2026
• JavaScript