Alternatives and similar repositories for JStap

Users that are interested in JStap are comparing it to the libraries listed below

• Aurore54F / JaSt
  Syntactic detection of malicious (obfuscated) JavaScript files
  ☆83Updated 5 years ago
• Song-Li / ODGen
  ODGen is a JavaScript Static Analysis tool to detect multiple types of vulnerabilities in Node.js packages.
  ☆160Updated last year
• Aurore54F / DoubleX
  Statically Detecting Vulnerable Data Flows in Browser Extensions at Scale
  ☆78Updated 4 years ago
• Aurore54F / HideNoSeek
  Static data flow-based analysis of JavaScript files to detect syntactic clones
  ☆23Updated 5 years ago
• Aurore54F / static-pdg-js
  Static JavaScript Analysis: AST, Control Flow, Data Flow, & Pointer Analysis
  ☆28Updated 3 years ago
• cristianstaicu / SecBench.js
  ☆36Updated last year
• osssanitizer / maloss
  Towards Measuring Supply Chain Attacks on Package Managers for Interpreted Languages
  ☆135Updated 3 years ago
• SAP / project-kb
  Home page of project "KB"
  ☆130Updated 8 months ago
• fast-sp-2023 / fast
  ☆29Updated 7 months ago
• testable-eu / sast-testability-patterns
  Testability Pattern Catalogs for SAST
  ☆31Updated 9 months ago
• CGCL-codes / SCVDT
  Source Code Vulnerability Detection Tools（SCVDT）provides a vulnerable code database, vulnerability detection service for Java and C/C++ p…
  ☆118Updated 4 years ago
• wrmelicher / ChromiumTaintTracking
  ☆19Updated 7 years ago
• Song-Li / ObjLupAnsys
  ObjLupAnsys is a tool to detect prototype pollution vulnerabilities in Node.js packages. This project is written in Python and JavaScript…
  ☆25Updated 4 years ago
• find-sec-bugs / juliet-test-suite
  A collection of test cases in the Java language. It contains examples for 112 different CWEs.
  ☆59Updated 4 years ago
• NUS-Curiosity / VulZoo
  VulZoo: A Comprehensive Vulnerability Intelligence Dataset | ASE 2024 Demo
  ☆65Updated 8 months ago
• s3c2 / vfcfinder
  VFCFinder: Searching for the Missing Vulnerability Fixing Commits
  ☆30Updated 2 years ago
• js2wasm-obfuscator / translator
  ☆30Updated 4 years ago
• lxyeternal / pypi_malregistry
  The repository has collected about 10,000 malicious pypi packages. This dataset is the work of the ASE 2023 paper "An Empirical Study of…
  ☆111Updated last month
• TQRG / secbench
  🪐 A Database of Existing Security Vulnerabilities Patches to Enable Evaluation of Techniques (single-commit; multi-language)
  ☆42Updated 7 months ago
• dbrumley / redebug
  ReDeBug Source Code.
  ☆24Updated last year
• squizz617 / vuddy
  VUDDY: A Scalable and Accurate Vulnerable Code Clone Detector (S&P'17)
  ☆51Updated 10 months ago
• SoheilKhodayari / JAW
  JAW: A Graph-based Security Analysis Framework for Client-side JavaScript
  ☆114Updated 3 months ago
• githubnext / amalfi-artifact
  Artifact accompanying our ICSE '22 paper "Practical Automated Detection of Malicious npm Packages"
  ☆47Updated 3 years ago
• vuduclyunitn / software_supply_chain_papers
  This repository contains a list of papers about software supply chain
  ☆29Updated last year
• Fraunhofer-AISEC / codyze
  Codyze is a static analyzer for Java, C, C++ based on code property graphs
  ☆90Updated 10 months ago
• pixelindigo / yurascanner
  YuraScanner
  ☆67Updated 9 months ago
• vulpecker / Vulpecker
  An Automated Vulnerability Detection System
  ☆59Updated 9 years ago
• s3c2 / llm-vulnerable-functions
  Pairing Security Advisories with Vulnerable Functions Using Open-Source LLMs - DIMVA '24
  ☆16Updated last year
• yingdongucas / inconsistency_detection
  Towards the Detection of Inconsistencies in Public Security Vulnerability Reports
  ☆75Updated 3 years ago
• nuprl / augur
  Performant taint analysis for Node.js
  ☆55Updated last year