Alternatives and similar repositories for Semgrep:

Users that are interested in Semgrep are comparing it to the libraries listed below

• Conanjun / codeql_chinese
  CodeQL中文资料和常见使用解释。Chinese version of Codeql documents
  ☆9Updated 4 years ago
• ASTTeam / DAST
  《深入理解DAST动态应用程序安全测试》Dynamic Application Security Testing.
  ☆49Updated 2 years ago
• h2-stack / LL-RASP
  Low-level RASP: Protecting Applications Implemented in High-level Programming Languages
  ☆58Updated last year
• ODDFuzz / ODDFuzz
  S&P2023 Paper
  ☆39Updated 2 years ago
• 78778443 / swallow
  代码审计自动化系统,底层架构为蜻蜓编排系统,墨菲SCA,fortify,SemGrep,hema
  ☆27Updated last week
• iiiusky / java_iast_example
  JAVA IAST Example
  ☆48Updated 3 years ago
• wh1t3p1g / tabby-path-finder
  A neo4j procedure for tabby
  ☆117Updated 9 months ago
• lcark / Tai-e-demo
  用来将Tai-e改造为开箱即用的静态代码安全分析框架的一些demo
  ☆36Updated 11 months ago
• haby0 / mark
  notes
  ☆27Updated 2 years ago
• cokeBeer / go-cves
  收录go语言编写的项目、框架和组件出现的cve，或者一些相关的利用方式的文章
  ☆38Updated 2 years ago
• cokeBeer / go-sec-code
  Go-sec-code is a project for learning Go vulnerability code.
  ☆37Updated 2 years ago
• waderwu / My-CTF-Challenges
  Collection of CTF Web challenges I made
  ☆52Updated last year
• rmb122 / easyrasp
  简单实现的 Java RASP
  ☆35Updated 4 years ago
• xiaopan233 / Java_agent_without_file
  Java agent without file 无文件的Java agent
  ☆78Updated 2 years ago
• dsogroup / DevSecOps
  开发和安全和运营：DevSecOps-Software development (Dev) and Security (Sec) and IT operations (Ops).
  ☆23Updated 11 months ago
• HackJava / Spring
  《Spring漏洞研究》
  ☆46Updated 2 years ago
• ttonys / CodeQLAnalyseJar
  CodeQL分析闭源Jar包脚本，基于Apache Ant构建CodeQL数据库
  ☆34Updated 2 years ago
• BytecodeDL / graphdb-intellij-plugin
  neo4j plugin of ByteCodeDL for the IntelliJ Platform. ByteCodeDL-Neo4j-IDEA-Plugin
  ☆16Updated last year
• changheluor007 / JSPKiller
  基于污点分析的JSP Webshell检测工具，模拟JVM的栈帧操作进行数据流分析，可以检测出各种变形的JSP Webshell
  ☆21Updated 3 years ago
• tongasdp / tongasdp-test
  TongASDP漏洞测试环境
  ☆34Updated 2 years ago
• waderwu / nativeRasp
  nativeRasp that can hook native methods
  ☆23Updated last year
• ice-doom / CodeQLRule
  个人使用CodeQL编写的一些规则
  ☆176Updated 2 years ago
• iiiusky / java_rasp_example
  ☆28Updated 4 years ago
• yaklang / syntaxflow
  Lessons for syntaxflow zero to hero
  ☆48Updated 6 months ago
• hldfight / Tai-e-WebPlugin
  Tai-e的Web插件
  ☆22Updated 9 months ago
• ATNX / javaweb-rasp
  ☆36Updated 3 years ago
• jimocode / CodeInspector
  基于Java ASM技术和GadgetInspector的原理，尝试实现一个自动Java代码审计工具。目前做到了可控参数分析和数据流跟踪分析
  ☆36Updated 3 years ago
• Anemone95 / taint-benchmark
  A benchmark to evaluate taint analysis
  ☆30Updated 2 years ago
• SummerSec / SPATool
  静态程序分析工具 主要生成方法的CFG和.java文件的AST
  ☆128Updated last year