NicolaasWeideman / RegexStaticAnalysisLinks
A tool to perform static analysis on regexes to determine whether they are vulnerable to ReDoS.
☆110Updated 3 years ago
Alternatives and similar repositories for RegexStaticAnalysis
Users that are interested in RegexStaticAnalysis are comparing it to the libraries listed below
Sorting:
- ☆146Updated 2 years ago
- Generic SAST Library☆132Updated last month
- Codyze is a static analyzer for Java, C, C++ based on code property graphs☆88Updated 5 months ago
- An automated tool for the detection of regexes' slow-matching vulnerabilities.☆155Updated 3 years ago
- Instrumentation framework for Node.js compliant to ECMAScript 2020 based on GraalVM.☆57Updated 5 months ago
- Testability Pattern Catalogs for SAST☆31Updated 4 months ago
- Vulnerabilities discovered in npm packages [Berkeley PL & Security Research]☆42Updated last year
- A Node.js vulnerability finding tool.☆95Updated 4 years ago
- JAW: A Graph-based Security Analysis Framework for Client-side JavaScript☆108Updated 7 months ago
- Binary rewriting approach with fork server support to fuzz Java applications with afl-fuzz.☆91Updated 7 years ago
- Testability Tarpits: the Impact of Code Patterns on the Security Testing of Web Applications (NDSS 2022)☆25Updated last year
- Parser utility to generate ASTs from PHP source code suitable to be processed by Joern.☆36Updated 5 years ago
- Soot-based taint analysis with internal Java fluent interface for security specifications in fluentTQL implemented with MagpieBridge to s…☆18Updated 5 months ago
- Creates a CFG from JavaScript source code.☆69Updated 10 months ago
- Detect vulnerable regexes in your project. REDOS, catastrophic backtracking.☆330Updated 3 years ago
- This is the repository for JÄk. I created it as prototype during my masterthesis.☆30Updated 7 years ago
- Performant taint analysis for Node.js☆54Updated 11 months ago
- A static analysis API for finding deserialization attack gadgets☆38Updated 2 years ago
- An example repository that demonstrates how the build custom CodeQL bundles that include query customizations through the `Customizations…☆25Updated 3 years ago
- ☆365Updated 4 months ago
- Phosphor: Dynamic Taint Tracking for the JVM☆177Updated 3 weeks ago
- Type Analyzer for JavaScript☆196Updated 5 months ago
- Collection of python helper API's for interacting with LGTM.com in ways the official API doesn't support.☆24Updated 3 years ago
- GitHub Satellite 2020 workshops on finding security vulnerabilities with CodeQL for Java/JavaScript.☆210Updated 9 months ago
- ObjLupAnsys is a tool to detect prototype pollution vulnerabilities in Node.js packages. This project is written in Python and JavaScript…☆24Updated 3 years ago
- Run CodeQL queries at scale using Multi-Repository Variant Analysis (MRVA)☆59Updated 3 months ago
- Parser utility to generate ASTs from PHP source code suitable to be processed by Joern.☆17Updated 6 years ago
- ☆28Updated 2 years ago
- TaintFlow, a framework for JavaScript dynamic information flow analysis.☆17Updated 2 years ago
- Intentionally vulnerable Go web app.☆43Updated last month