Alternatives and similar repositories for codebadger

Users that are interested in codebadger are comparing it to the libraries listed below

• software-engineering-and-security / Gleipner
  A benchmark for Java gadget chain detecting algorithms.
  ☆14Updated 5 months ago
• SpringJasmine / Jasmine
  ☆29Updated 3 years ago
• mo-xiaoxi / HDiff
  ☆25Updated 3 years ago
• LFYSec / AgentFuzz
  ☆26Updated 3 months ago
• secureweb / symphp
  Holistic Concolic Execution for Dynamic Web Applications via Symbolic Interpreter Analysis (IEEE S&P 2024)
  ☆12Updated last year
• GCMiner / GCMiner
  Artifact for ICSE 2023
  ☆50Updated 3 years ago
• fast-sp-2023 / fast
  ☆29Updated 7 months ago
• secure-software-engineering / secucheck
  Soot-based taint analysis with internal Java fluent interface for security specifications in fluentTQL implemented with MagpieBridge to s…
  ☆18Updated 10 months ago
• pixelindigo / yurascanner
  YuraScanner
  ☆67Updated 9 months ago
• seclab-fudan / RecurScan
  ☆27Updated last year
• cuhk-seclab / TChecker
  ☆43Updated 2 years ago
• cokeBeer / goot
  a dataflow analysis framework implemented in Go, like soot
  ☆38Updated 3 years ago
• enferas / TestabilityTarpits
  Testability Tarpits: the Impact of Code Patterns on the Security Testing of Web Applications (NDSS 2022)
  ☆25Updated last year
• JordyZomer / codeql-mcp
  This project runs a Model Context Protocol (MCP) server that wraps the CodeQL query server. It enables tools like [Cursor](https://cursor…
  ☆121Updated 8 months ago
• Anemone95 / taint-benchmark
  A benchmark to evaluate taint analysis
  ☆28Updated 3 years ago
• Konano / ReqsMiner
  [NDSS 2024] ReqsMiner is an innovative fuzzing framework developed to discover previously unexamined inconsistencies in CDN forwarding re…
  ☆23Updated last year
• testable-eu / sast-testability-patterns
  Testability Pattern Catalogs for SAST
  ☆31Updated 9 months ago
• xywang18 / Rengar
  Effective ReDoS Detection by Principled Vulnerability Modeling and Exploit Generation
  ☆14Updated 4 months ago
• antgroup / YASA-Engine
  YASA is an open-source static program analysis project. Its core innovation lies in a unified intermediate representation called UAST, d…
  ☆201Updated last week
• fullwaywang / QlRules
  Auto-generated CodeQL rules for matching CVE vulnerabilities and variants.
  ☆183Updated last year
• Song-Li / ObjLupAnsys
  ObjLupAnsys is a tool to detect prototype pollution vulnerabilities in Node.js packages. This project is written in Python and JavaScript…
  ☆25Updated 4 years ago
• soot-oss / TaintAnalysis
  Taint analysis implementation based on Heros and Soot
  ☆45Updated last year
• seclab-fudan / TEFuzz
  ☆16Updated 2 years ago
• GitHubSecurityLab / codeql-zero-to-hero
  CodeQL zero to hero blog post series challenges
  ☆159Updated 2 months ago
• CISPA-SysSec / atropos-legacy
  Atropos: Effective Fuzzing of Web Applications for Server-Side Vulnerabilities
  ☆73Updated last year
• Song-Li / ODGen
  ODGen is a JavaScript Static Analysis tool to detect multiple types of vulnerabilities in Node.js packages.
  ☆160Updated last year
• malteskoruppa / phpjoern
  Parser utility to generate ASTs from PHP source code suitable to be processed by Joern.
  ☆37Updated 5 years ago
• SecuringWeb / BlackWidow
  ☆58Updated 2 years ago
• HaHarden / CPGPractise
  Some test samples for CPG execution logic.
  ☆20Updated last year
• iris-sast / iris
  A neurosymbolic framework for vulnerability detection in code
  ☆279Updated last week