JordyZomer / codeql-mcpLinks
This project runs a Model Context Protocol (MCP) server that wraps the CodeQL query server. It enables tools like [Cursor](https://cursor.sh/) or AI agents to interact with CodeQL through structured commands.
☆130Updated 10 months ago
Alternatives and similar repositories for codeql-mcp
Users that are interested in codeql-mcp are comparing it to the libraries listed below
Sorting:
- Auto-generated CodeQL rules for matching CVE vulnerabilities and variants.☆184Updated last year
- Artifact for ICSE 2023☆50Updated 3 years ago
- ☆27Updated 3 years ago
- YASA is an open-source static program analysis project. Its core innovation lies in a unified intermediate representation called UAST, d…☆246Updated last week
- a dataflow analysis framework implemented in Go, like soot☆39Updated 3 years ago
- Chrome V8 n-day exploits that I've written.☆202Updated 2 years ago
- attachments and (some) writeups/source code for RWCTF 6th☆125Updated 2 years ago
- The source code of [Sec'25] Make Agent Defeat Agent: Automatic Detection of Taint-Style Vulnerabilities in LLM-based Agents☆53Updated 5 months ago
- A set of Code-ql/Joern queries to find vulnerabilities☆67Updated 4 years ago
- Detecting Flow of Sensitive Data in Mini-Programs with Static Taint Analysis☆82Updated last year
- Script to setup pwn environment with Docker☆47Updated last month
- Container (Docker) escape exploits☆53Updated 4 years ago
- WALA 学习笔记☆14Updated 2 years ago
- CVE-2021-4204: Linux Kernel eBPF Local Privilege Escalation☆62Updated 3 years ago
- My CodeQL queries collection☆99Updated 2 years ago
- CVE-2022-0185 POC and Docker and Analysis write up☆38Updated 3 years ago
- CodeQL database manager☆48Updated 9 months ago
- collections of container escape techniques 🐿☆73Updated 4 years ago
- Personal CodeQL queries☆63Updated last month
- Python bindings for CodeQL CLI☆54Updated 4 years ago
- Finding Java gadget chains with CodeQL☆184Updated last year
- 存储iot设备分析工具和分析文件☆14Updated 4 years ago
- Taint analysis implementation based on Heros and Soot☆45Updated last year
- A benchmark to evaluate taint analysis☆28Updated 3 years ago
- A grey-box web application Fuzzer☆25Updated last year
- Atropos: Effective Fuzzing of Web Applications for Server-Side Vulnerabilities☆75Updated last year
- Code audit (code review) with VIM.☆17Updated last year
- ☆57Updated last year
- neo4j plugin of ByteCodeDL for the IntelliJ Platform. ByteCodeDL-Neo4j-IDEA-Plugin☆16Updated 2 years ago
- Silent Spring: Prototype Pollution Leads to Remote Code Execution in Node.js☆75Updated 2 years ago