Alternatives and similar repositories for JavaScript-vulnerability-detection

Users that are interested in JavaScript-vulnerability-detection are comparing it to the libraries listed below

• cristianstaicu / SecBench.js
  ☆31Updated 8 months ago
• Song-Li / ObjLupAnsys
  ObjLupAnsys is a tool to detect prototype pollution vulnerabilities in Node.js packages. This project is written in Python and JavaScript…
  ☆24Updated 3 years ago
• Aurore54F / JStap
  Modular static malicious JavaScript detection system
  ☆70Updated 4 years ago
• ossf-cve-benchmark / ossf-cve-benchmark
  The OpenSSF CVE Benchmark consists of code and metadata for over 200 real life CVEs, as well as tooling to analyze the vulnerable codebas…
  ☆145Updated last year
• ajinabraham / libsast
  Generic SAST Library
  ☆131Updated last week
• Aurore54F / DoubleX
  Statically Detecting Vulnerable Data Flows in Browser Extensions at Scale
  ☆75Updated 3 years ago
• Song-Li / ODGen
  ODGen is a JavaScript Static Analysis tool to detect multiple types of vulnerabilities in Node.js packages.
  ☆153Updated last year
• CGCL-codes / SCVDT
  Source Code Vulnerability Detection Tools（SCVDT）provides a vulnerable code database, vulnerability detection service for Java and C/C++ p…
  ☆117Updated 4 years ago
• Aurore54F / static-pdg-js
  Static JavaScript Analysis: AST, Control Flow, Data Flow, & Pointer Analysis
  ☆26Updated 3 years ago
• dbrumley / redebug
  ReDeBug Source Code.
  ☆24Updated last year
• too4words / securibench-micro
  Securibench Micro is a benchmark for static analysis tools for security.
  ☆26Updated 6 years ago
• ClaudioRizzo / BabelView
  ☆17Updated 6 years ago
• nuprl / augur
  Performant taint analysis for Node.js
  ☆51Updated 10 months ago
• osssanitizer / maloss
  Towards Measuring Supply Chain Attacks on Package Managers for Interpreted Languages
  ☆134Updated 2 years ago
• vulpecker / Vulpecker
  An Automated Vulnerability Detection System
  ☆60Updated 8 years ago
• testable-eu / sast-testability-patterns
  Testability Pattern Catalogs for SAST
  ☆31Updated 4 months ago
• Anemone95 / MLDetectVuln
  Works about detecting vulnerable using ML.
  ☆84Updated 5 years ago
• SecuringWeb / BlackWidow
  ☆48Updated 2 years ago
• secure-software-engineering / COVA
  COVA - A static analysis tool to compute path conditions
  ☆36Updated 2 weeks ago
• JacksonGL / NPM-Vuln-PoC
  Vulnerabilities discovered in npm packages [Berkeley PL & Security Research]
  ☆42Updated last year
• githubnext / amalfi-artifact
  Artifact accompanying our ICSE '22 paper "Practical Automated Detection of Malicious npm Packages"
  ☆45Updated 3 years ago
• enferas / TestabilityTarpits
  Testability Tarpits: the Impact of Code Patterns on the Security Testing of Web Applications (NDSS 2022)
  ☆25Updated last year
• SunghoLee / HybriDroid
  Static Analysis Framework for Android Hybrid Applications
  ☆25Updated 4 years ago
• elManto / StaticAnalysisQueries
  A set of Code-ql/Joern queries to find vulnerabilities
  ☆60Updated 4 years ago
• brucespang / taint-analysis
  Static analysis to detect taint in java programs
  ☆9Updated 12 years ago
• Invizory / taintflow
  TaintFlow, a framework for JavaScript dynamic information flow analysis.
  ☆17Updated 2 years ago
• s3c2 / vfcfinder
  VFCFinder: Searching for the Missing Vulnerability Fixing Commits
  ☆29Updated last year
• Aurore54F / HideNoSeek
  Static data flow-based analysis of JavaScript files to detect syntactic clones
  ☆23Updated 5 years ago
• vuduclyunitn / software_supply_chain_papers
  This repository contains a list of papers about software supply chain
  ☆29Updated last year
• wrmelicher / ChromiumTaintTracking
  ☆19Updated 6 years ago