Alternatives and similar repositories for CoCo

Users that are interested in CoCo are comparing it to the libraries listed below

• fast-sp-2023 / fast
  ☆30Updated 8 months ago
• OwenSanzas / LLM-For-Software-Security
  Hey folks, this is a repository for papers on LLM for Vuln. Detection area
  ☆72Updated 9 months ago
• seclab-fudan / TEFuzz
  ☆16Updated 2 years ago
• enferas / TestabilityTarpits
  Testability Tarpits: the Impact of Code Patterns on the Security Testing of Web Applications (NDSS 2022)
  ☆25Updated last year
• OSUSecLab / TaintMini
  Detecting Flow of Sensitive Data in Mini-Programs with Static Taint Analysis
  ☆82Updated last year
• secure-software-engineering / secucheck
  Soot-based taint analysis with internal Java fluent interface for security specifications in fluentTQL implemented with MagpieBridge to s…
  ☆18Updated 11 months ago
• aseec-lab / llms-for-code-analysis
  ☆34Updated last year
• seclab-ucr / GPT-Expr
  Assisting Static Analysis with Large Language Models: A ChatGPT Experiment
  ☆36Updated 2 years ago
• cuhk-seclab / TChecker
  ☆41Updated 2 years ago
• plume-oss / plume
  Plume is a code representation benchmarking library with options to extract the AST from Java bytecode and store the result in various gr…
  ☆75Updated last year
• seclab-fudan / RecurScan
  ☆27Updated last year
• elManto / StaticAnalysisQueries
  A set of Code-ql/Joern queries to find vulnerabilities
  ☆66Updated 4 years ago
• CISPA-SysSec / atropos-legacy
  Atropos: Effective Fuzzing of Web Applications for Server-Side Vulnerabilities
  ☆73Updated last year
• yetingli / ReDoSHunter
  ReDoSHunter: A Combined Static and Dynamic Approach for Regular Expression DoS Detection
  ☆81Updated 3 years ago
• puzhuoliu / Awesome-Concurrency-Vulnerability-Paper
  Papers on concurrency vulnerability analysis, including multithreaded programs, multi-tasking programs and interrupt driven programs.
  ☆14Updated 3 years ago
• Song-Li / ODGen
  ODGen is a JavaScript Static Analysis tool to detect multiple types of vulnerabilities in Node.js packages.
  ☆161Updated last year
• secure-software-engineering / COVA
  COVA - A static analysis tool to compute path conditions
  ☆40Updated 5 months ago
• secureweb / fuzzcache
  ☆18Updated last year
• Song-Li / ObjLupAnsys
  ObjLupAnsys is a tool to detect prototype pollution vulnerabilities in Node.js packages. This project is written in Python and JavaScript…
  ☆26Updated 4 years ago
• testable-eu / sast-testability-patterns
  Testability Pattern Catalogs for SAST
  ☆31Updated 10 months ago
• Aurore54F / static-pdg-js
  Static JavaScript Analysis: AST, Control Flow, Data Flow, & Pointer Analysis
  ☆28Updated 3 years ago
• fullwaywang / QlRules
  Auto-generated CodeQL rules for matching CVE vulnerabilities and variants.
  ☆184Updated last year
• Aurore54F / HideNoSeek
  Static data flow-based analysis of JavaScript files to detect syntactic clones
  ☆23Updated 5 years ago
• occia / fuzzdrivergpt
  A GPT-Based Fuzz Driver Generator
  ☆49Updated 2 years ago
• xywang18 / Rengar
  Effective ReDoS Detection by Principled Vulnerability Modeling and Exploit Generation
  ☆14Updated 5 months ago
• s3c2 / llm-vulnerable-functions
  Pairing Security Advisories with Vulnerable Functions Using Open-Source LLMs - DIMVA '24
  ☆16Updated last year
• malteskoruppa / phpjoern
  Parser utility to generate ASTs from PHP source code suitable to be processed by Joern.
  ☆37Updated 5 years ago
• awen-li / PolyCruise
  A Cross-Language Dynamic Information Flow Analysis.
  ☆26Updated 3 years ago
• kaichenorg / vulrule
  漏洞规则库是一个致力于帮助开发者识别和避免常见安全漏洞的开源项目。我们收集、整理和分析各类编程语言和常用库中的安全漏洞模式，并提供相应的防范措施和最佳实践。
  ☆38Updated 4 months ago
• silverbullettt / zipper
  Precision-guided context sensitivity for pointer analysis
  ☆61Updated 2 years ago