OSUSecLab / TaintMiniLinks
Detecting Flow of Sensitive Data in Mini-Programs with Static Taint Analysis
☆80Updated last year
Alternatives and similar repositories for TaintMini
Users that are interested in TaintMini are comparing it to the libraries listed below
Sorting:
- Auto-generated CodeQL rules for matching CVE vulnerabilities and variants.☆182Updated last year
- Taint analysis implementation based on Heros and Soot☆45Updated last year
- IDA Hexrays To Joern☆43Updated last year
- A Static Dataflow Analysis Framework for iOS Applications.☆47Updated last year
- Some test samples for CPG execution logic.☆20Updated last year
- 基于IDAPython的二进制漏洞检测脚本库,对IDA生成的反汇编文件进行静态分析,并以XML形式报告可能存在的漏洞隐患点。Based on the binary vulnerability detection script library of IDAPYTHON, th…☆59Updated last year
- A keyword based crawler for WeChat Mini-apps☆50Updated 4 years ago
- 本项目主要是对Android安全文章阅读的笔记收集整理,帮助硕博和从业人员快速阅读论文☆37Updated 2 years ago
- 2021西湖论剑IoT、虚实结合赛后开放资源☆65Updated 3 years ago
- 更好的包装pwntools,提高编写pwn题exp效率的工具☆27Updated 4 years ago
- 静态分析笔记 Static-Analysis-Notes 程序分析笔记 资源分享☆186Updated 2 years ago
- ☆29Updated 3 years ago
- WALA 学习笔记☆14Updated 2 years ago
- A benchmark to evaluate taint analysis☆28Updated 3 years ago
- Code audit (code review) with VIM.☆17Updated 10 months ago
- IDA Hexrays To CodeQL☆49Updated last year
- This is the project for the paper “Large-scale Security Measurements on the Android Firmware Ecosystem” in ICSE2022☆37Updated 11 months ago
- Mini-program Cross Page Request Forgery (MiniCPRF) Analysis Tool.☆17Updated last year
- A set of Code-ql/Joern queries to find vulnerabilities☆65Updated 4 years ago
- 存储iot设备分析工具和分析文件☆14Updated 4 years ago
- This project runs a Model Context Protocol (MCP) server that wraps the CodeQL query server. It enables tools like [Cursor](https://cursor…☆119Updated 7 months ago
- A Coverage-Based fuzzing tools☆23Updated 4 years ago
- ☆66Updated 4 years ago
- ☆13Updated 2 weeks ago
- ☆29Updated 2 years ago
- writeups for XNUCA2020Qualifier☆70Updated 4 years ago
- ☆64Updated 3 years ago
- Debug pwn in docker, no need for virtual machines☆37Updated last month
- A search-based Android static analysis tool with much better performance than Amandroid and FlowDroid☆50Updated 4 years ago
- huaweictf2020-xctf高校网络安全挑战赛☆17Updated 4 years ago