Marynk / JavaScript-vulnerability-detection

Related projects ⓘ

Alternatives and complementary repositories for JavaScript-vulnerability-detection

• Song-Li / ODGen
  ODGen is a JavaScript Static Analysis tool to detect multiple types of vulnerabilities in Node.js packages.
  ☆147Updated 9 months ago
• Song-Li / ObjLupAnsys
  ObjLupAnsys is a tool to detect prototype pollution vulnerabilities in Node.js packages. This project is written in Python and JavaScript…
  ☆22Updated 2 years ago
• cristianstaicu / SecBench.js
  ☆28Updated last month
• CGCL-codes / SCVDT
  Source Code Vulnerability Detection Tools（SCVDT）provides a vulnerable code database, vulnerability detection service for Java and C/C++ p…
  ☆110Updated 3 years ago
• githubnext / amalfi-artifact
  Artifact accompanying our ICSE '22 paper "Practical Automated Detection of Malicious npm Packages"
  ☆39Updated 2 years ago
• ymirsky / VulChecker
  A deep learning model for localizing bugs in C/C++ source code (USENIX'23)
  ☆135Updated last year
• cuhk-seclab / XSym
  ☆13Updated 2 years ago
• ClaudioRizzo / BabelView
  ☆17Updated 6 years ago
• zifeng-kang / ProbetheProto
  ☆27Updated 2 years ago
• osssanitizer / maloss
  Towards Measuring Supply Chain Attacks on Package Managers for Interpreted Languages
  ☆121Updated 2 years ago
• Aurore54F / DoubleX
  Statically Detecting Vulnerable Data Flows in Browser Extensions at Scale
  ☆66Updated 2 years ago
• VPRLab / BackDroid
  A search-based Android static analysis tool with much better performance than Amandroid and FlowDroid
  ☆47Updated 3 years ago
• brucespang / taint-analysis
  Static analysis to detect taint in java programs
  ☆9Updated 11 years ago
• Aurore54F / static-pdg-js
  Static JavaScript Analysis: AST, Control Flow, Data Flow, & Pointer Analysis
  ☆22Updated 2 years ago
• OSUSecLab / LeakScope
  Value set analysis(VSA) for revealing the possible values (strings) of the keys from mobile app
  ☆41Updated 4 years ago
• WOOSEUNGHOON / Centris-public
  ☆50Updated 10 months ago
• Tricker-z / TPLite
  ISSTA'23 - Third-party Library Dependency for Large-scale SCA in the C/C++ Ecosystem: How Far Are We?
  ☆27Updated last year
• zjuchenyuan / dockerized_fuzzing
  Run fuzzing experiments in Docker
  ☆98Updated 3 years ago
• RiS3-Lab / FICS
  ☆50Updated 3 years ago
• Invizory / taintflow
  TaintFlow, a framework for JavaScript dynamic information flow analysis.
  ☆17Updated last year
• too4words / securibench-micro
  Securibench Micro is a benchmark for static analysis tools for security.
  ☆26Updated 6 years ago
• WOOSEUNGHOON / MOVERY-public
  ☆23Updated last year
• dbrumley / redebug
  ReDeBug Source Code.
  ☆24Updated 10 months ago
• vulpecker / Vulpecker
  An Automated Vulnerability Detection System
  ☆56Updated 8 years ago
• elManto / StaticAnalysisQueries
  A set of Code-ql/Joern queries to find vulnerabilities
  ☆54Updated 3 years ago
• js2wasm-obfuscator / translator
  ☆28Updated 2 years ago
• Anemone95 / MLDetectVuln
  Works about detecting vulnerable using ML.
  ☆83Updated 4 years ago
• lxyeternal / pypi_malregistry
  The repository has collected about 10,000 malicious pypi packages. This dataset is the work of the ASE 2023 paper "An Empirical Study of…
  ☆59Updated 3 weeks ago
• WSP-LAB / HiddenCPG
  HiddenCPG: Large-Scale Vulnerable Clone Detection Using Subgraph Isomorphism of Code Property Graphs
  ☆39Updated 2 years ago
• mrash / afl-cve
  A collection of vulnerabilities discovered by the AFL fuzzer (afl-fuzz)
  ☆89Updated 7 years ago