HexHive / CrystallizerLinks
A hybrid analysis framework to aid in uncovering deserialization vulnerabilities
☆15Updated last year
Alternatives and similar repositories for Crystallizer
Users that are interested in Crystallizer are comparing it to the libraries listed below
Sorting:
- ☆43Updated 2 years ago
- A manually vetted dataset for security vulnerability detection in Java projects☆81Updated 3 months ago
- A GPT-Based Fuzz Driver Generator☆49Updated 2 years ago
- Atropos: Effective Fuzzing of Web Applications for Server-Side Vulnerabilities☆73Updated last year
- Parsing-based Analyzer☆61Updated 6 months ago
- Holistic Concolic Execution for Dynamic Web Applications via Symbolic Interpreter Analysis (IEEE S&P 2024)☆12Updated last year
- Assisting Static Analysis with Large Language Models: A ChatGPT Experiment☆36Updated 2 years ago
- A benchmark for Java gadget chain detecting algorithms.☆14Updated 5 months ago
- MINER provided by the paper "MINER: A Hybrid Data-Driven Approach for REST API Fuzzing"☆42Updated 2 years ago
- ☆29Updated 7 months ago
- Python library for CPGQL server☆38Updated last year
- Qilin: A New Framework for Supporting Fine-Grained Context-Sensitivity in Java Pointer Analysis☆146Updated 2 months ago
- ☆27Updated last year
- A deep learning model for localizing bugs in C/C++ source code (USENIX'23)☆155Updated 2 years ago
- ☆18Updated last year
- HiddenCPG: Large-Scale Vulnerable Clone Detection Using Subgraph Isomorphism of Code Property Graphs☆43Updated 3 years ago
- ☆58Updated 2 years ago
- CKGFuzzer: LLM-Based Fuzz Driver Generation Enhanced By Code Knowledge Graph☆124Updated 10 months ago
- ☆10Updated last year
- This repo list the core literature in the field of fuzzing test, large language model, and LLM-based fuzzer. Most of papers are selected …☆54Updated last year
- LLMDFA: Analyzing Dataflow in Code with Large Language Models (NeurIPS 2024)☆159Updated last month
- Hey folks, this is a repository for papers on LLM for Vuln. Detection area☆72Updated 8 months ago
- ODGen is a JavaScript Static Analysis tool to detect multiple types of vulnerabilities in Node.js packages.☆160Updated last year
- ☆22Updated 3 years ago
- Signature-based Static Analysis for Detecting Recurring Vulnerabilities☆50Updated last year
- ☆23Updated 3 years ago
- ☆48Updated last year
- ISSTA'23 - Third-party Library Dependency for Large-scale SCA in the C/C++ Ecosystem: How Far Are We?☆29Updated 2 years ago
- ☆36Updated 5 months ago
- Witcher is the first framework for using AFL to fuzz web applications.☆102Updated 2 years ago