NationalSecurityAgency / ghidra
Ghidra is a software reverse engineering (SRE) framework
NationalSecurityAgency / ghidra
dataease / dataease
🔥 人人可用的开源 BI 工具，数据可视化神器。An open-source BI tool alternative to Tableau.
doocs / source-code-hunter
😱 从源码层面，剖析挖掘互联网行业主流技术的底层实现原理，为广大开发者 “提升技术深度” 提供便利。目前开放 Spring 全家桶，Mybatis、Netty、Dubbo 框架，及 Redis、Tomcat 中间件等
OpenRefine / OpenRefine
OpenRefine is a free, open source power tool for working with messy data and improving it
SonarSource / sonarqube
Continuous Inspection
stanfordnlp / CoreNLP
CoreNLP: A Java suite of core NLP tools for tokenization, sentence segmentation, NER, parsing, coreference, sentiment analysis, etc.
checkstyle / checkstyle
Checkstyle is a development tool to help programmers write Java code that adheres to a coding standard. By default it supports the Google Java Style Guide and Sun Code Conventions, but is highly configurable. It can be invoked with an ANT task and a command line program.
jeecgboot / jimureport
一款真正的 AI 报表诞生了！JimuChatBI —— 首款免费开源对话式智能数据分析产品（Chat2BI）。 一句话生成报表和数据大屏，支持对话式 AI 修改优化；类 Excel 在线报表设计，兼容国产信创数据源。 对着 AI 说句话，报表就出来了——表格、图表、分组汇总自动生成，复杂报表场景轻松应对。想做数据大屏？同样一句话搞定，让数据分析进入 AI 时代。
Graylog2 / graylog2-server
Free and open log management
dependency-check / DependencyCheck
OWASP dependency-check is a software composition analysis utility that detects publicly disclosed vulnerabilities in application dependencies.
Col-E / Recaf
The modern Java bytecode editor
google / error-prone
Catch common Java mistakes as compile-time errors
javaparser / javaparser
Java 1-25 Parser and Abstract Syntax Tree for Java with advanced analysis functionalities.
bethington / ghidra-mcp
Ghidra MCP Server — 200+ MCP tools for AI-powered reverse engineering. GUI plugin + headless server, lazy tool loading, convention enforcement, batch operations, Ghidra Server integration, and Docker deployment.
pmd / pmd
An extensible multilanguage static code analyzer.
emanuele-f / PCAPdroid
No-root network monitor, firewall and PCAP dumper for Android
SPLWare / esProc
esProc SPL is a JVM-based programming language designed for structured data computation, serving as both a data analysis tool and an embedded computing engine.
DependencyTrack / dependency-track
Dependency-Track is an intelligent Component Analysis platform that allows organizations to identify and reduce risk in the software supply chain.
uber / NullAway
A tool to help eliminate NullPointerExceptions (NPEs) in your Java code with low build-time overhead
spotbugs / spotbugs
SpotBugs is FindBugs' successor. A tool for static analysis to look for bugs in Java code.
chriswhocodes / jitwatch
Log analyser / visualiser for Java HotSpot JIT compiler. Inspect inlining decisions, hot methods, bytecode, and assembly. View results in the JavaFX user interface.
soot-oss / soot
Soot - A Java optimization framework
dedicatedcode / reitti
Reitti is a comprehensive personal location tracking and analysis application that helps you understand your movement patterns and significant places. The name "Reitti" comes from Finnish, meaning "route" or "path".
ta4j / ta4j
A Java library for technical analysis.
find-sec-bugs / find-sec-bugs
The SpotBugs plugin for security audits of Java web applications and Android applications. (Also work with Kotlin, Groovy and Scala projects)
apache / sedona
A cluster computing framework for processing large-scale geospatial data
bit4woo / domain_hunter_pro
domain_hunter的高级版本，SRC挖洞、HW打点之必备！自动化资产收集；快速Title获取；外部工具联动；等等
jplag / JPlag
State-of-the-Art Source Code Plagiarism & Collusion Detection. Check for plagiarism in a set of programs.
INRIA / spoon
Spoon is a metaprogramming library to analyze and transform Java source code. :spoon: is made with :heart:, :beers: and :sparkles:. It parses source files to build a well-designed AST with powerful analysis and transformation API.
hcoles / pitest
State of the art mutation testing system for the JVM
datageartech / datagear
DataGear数据可视化分析平台，自由制作任何数据看板
batfish / batfish
Batfish is a network configuration analysis tool that can find bugs and guarantee the correctness of (planned or current) network configurations. It enables network engineers to rapidly and safely evolve their network, without fear of outages or security breaches.
qupath / qupath
QuPath - Open-source bioimage analysis for research
secure-software-engineering / FlowDroid
FlowDroid Static Data Flow Tracker
potato-security / PotatoTool
这款工具是一款功能强大的网络安全综合工具，旨在为安全从业者、红蓝对抗人员和网络安全爱好者提供全面的网络安全解决方案。它集成了多种实用功能，包括解密、分析、扫描、溯源等，为用户提供了便捷的操作界面和丰富的功能选择。This tool offers robust network security solutions for professionals and enthusiasts. With features like decryption, analysis, scanning, and traceability, it provides a user-friendly interface and diverse functionality.
SonarSource / sonar-java
:coffee: SonarSource Static Analyzer for Java Code Quality and Security
jspecify / jspecify
An artifact of fully-specified annotations to power static-analysis checks, beginning with nullness analysis.
nielsbasjes / yauaa
Yet Another UserAgent Analyzer
linkedin / coral
Coral is a translation, analysis, and query rewrite engine for SQL and other relational languages.
wala / WALA
T.J. Watson Libraries for Analysis, with front ends for Java, Android, and JavaScript, and many common static program analyses.
OWASP-Benchmark / BenchmarkJava
OWASP Benchmark is a test suite designed to verify the speed and accuracy of software vulnerability detection tools. A fully runnable web app written in Java, it supports analysis by Static (SAST), Dynamic (DAST), and Runtime (IAST) tools that support Java. The idea is that since it is fully runnable and all the vulnerabilities are actually exploitable, it’s a fair test for any kind of vulnerability detection tool. For more details on this project, please see the OWASP Benchmark Project home page.
soot-oss / SootUp
A new version of Soot with a completely overhauled architecture
Esri / geometry-api-java
The Esri Geometry API for Java enables developers to write custom applications for analysis of spatial data. This API is used in the Esri GIS Tools for Hadoop and other 3rd-party data processing solutions.
databufflabs / databuff
DataBuff is an AI-native APM built on Opentelemetry，with multi-agent troubleshooting out of the box.
dependency-check / dependency-check-sonar-plugin
Integrates Dependency-Check reports into SonarQube
SonarSource / sonarqube-mcp-server
Official SonarQube MCP Server for code quality and security in AI agents
s-andrews / FastQC
A quality control analysis tool for high throughput sequencing data
refactorfirst / RefactorFirst
Identifies and prioritizes Class and Package Cycles and Anti-pattens in Java & Kotlin codebases you should refactor first.
struppigel / PortEx
Java library to analyse Portable Executable files with a special focus on malware analysis and PE malformation robustness
quick-perf / quickperf
QuickPerf is a testing library for Java to quickly evaluate and improve some performance-related properties
bengtmartensson / IrScrutinizer
IrScrutinizer is a program for IR signal analysis, decoding, generation and much more.
Nisaka520 / JevIntent
微信（FkWeChat 插件）：长按消息分析意图 / 情绪 / 回复姿态，只在本机弹提示，对方无感知
YeamimHossainSajid / CodeMonk
CodeMonk 🥋 —>An open-source AI powered code intelligence platform that helps developers understand, explore, and navigate complex codebases using modern Spring Boot, Spring AI, RAG, knowledge graphs, and intelligent code analysis
DeepSQLAI / deepsql
The database agent for Postgres and MySQL - Point it at PostgreSQL or MySQL and ask questions in plain English — schema exploration, query generation, slow query analysis, index recommendations, generated dashboards. Self-hosted and air-gapped.