Feysh-Group / corax-communityLinks
Corax for Java: A general static analysis framework for java code checking.
☆253Updated 10 months ago
Alternatives and similar repositories for corax-community
Users that are interested in corax-community are comparing it to the libraries listed below
Sorting:
- xAST评价体系,让安全工具不再“黑盒”. The xAST evaluation benchmark makes security tools no longer a "black box".☆432Updated 3 weeks ago
- A declarative static analysis tool for jvm bytecode based Datalog like CodeQL☆342Updated last year
- 《深入理解SAST静态应用安全测试》Static Application Security Testing.☆358Updated 3 weeks ago
- 静态分析及代码审计自动化相关资料收集☆296Updated 3 years ago
- CodeQL extractor for java, which don't need to compile java source☆347Updated 2 years ago
- 静态分析笔记 Static-Analysis-Notes 程序分析笔记 资源分享☆185Updated 2 years ago
- 自动反编译闭源应用,创建codeql数据库☆312Updated 3 years ago
- 《深入理解Semgrep》Finding vulnerabilities with Semgrep.☆56Updated 2 years ago
- ☆192Updated last week
- S&P2023 Paper☆39Updated 3 years ago
- ☆172Updated last month
- Codeql学习笔记☆890Updated 3 years ago
- GitHub项目监控 && CodeQL自动扫描 (GitHub project monitoring && CodeQL automatic analysis)☆455Updated 9 months ago
- Auto-generated CodeQL rules for matching CVE vulnerabilities and variants.☆181Updated last year
- Go相关的安全研究☆232Updated last year
- Java漏洞靶场☆369Updated last year
- A benchmark to evaluate taint analysis☆29Updated 3 years ago
- 个人使用CodeQL编写的一些规则☆175Updated 3 years ago
- 专注于JVM的运行时防御系统RASP☆288Updated last year
- 闭源系统半自动漏洞挖掘工 具,针对 jar/war/zip 进行静态代码分析,输出从source到sink的可达路径。LLM将验证路径可达性,并根据上下文给出该路径可信分数☆477Updated 4 months ago
- 安全导图☆259Updated last year
- 一个搜索网络安全领域顶会论文的小工具☆91Updated 2 months ago
- JAVA IAST Example☆49Updated 3 years ago
- SecCodeBench is a benchmark suite focusing on evaluating the security of code generated by large language models (LLMs).☆72Updated last week
- ☆174Updated 2 years ago
- CodeQL Java 全网最全的中文学习资料☆790Updated 3 years ago
- Taint analysis implementation based on Heros and Soot☆45Updated last year
- 一个利用ASM对字节码进行污点传播分析的静态代码审计应用(添加了大量代码注释,适合大家进行源码学习)。也加入了挖掘Fastjson反序列化gadget chains和SQLInject(JdbcTemplate、MyBatis、JPA、Hibernate、原生jdbc等)静…☆454Updated 3 years ago
- IoT安全教程☆294Updated 5 years ago
- Low-level RASP: Protecting Applications Implemented in High-level Programming Languages☆68Updated this week