OSUSecLab / TaintMiniLinks
Detecting Flow of Sensitive Data in Mini-Programs with Static Taint Analysis
☆76Updated last year
Alternatives and similar repositories for TaintMini
Users that are interested in TaintMini are comparing it to the libraries listed below
Sorting:
- Auto-generated CodeQL rules for matching CVE vulnerabilities and variants.☆176Updated 9 months ago
- Taint analysis implementation based on Heros and Soot☆45Updated last year
- A Static Dataflow Analysis Framework for iOS Applications.☆46Updated last year
- Some test samples for CPG execution logic.☆20Updated last year
- WALA 学习笔记☆14Updated last year
- IDA Hexrays To Joern☆40Updated 8 months ago
- A keyword based crawler for WeChat Mini-apps☆46Updated 4 years ago
- ☆27Updated 2 years ago
- A benchmark to evaluate taint analysis☆29Updated 3 years ago
- 本项目主要是对Android安全文章阅读的笔记收集整理,帮助硕博和从业人员快速阅读论文☆38Updated 2 years ago
- Precision-guided context sensitivity for pointer analysis☆61Updated 2 years ago
- A set of Code-ql/Joern queries to find vulnerabilities☆63Updated 4 years ago
- 2021西湖论剑IoT、虚实结合赛后开放资源☆65Updated 3 years ago
- IDA Hexrays To CodeQL☆44Updated 8 months ago
- 更好的包装pwntools,提高编写pwn题exp效率的工具☆28Updated 4 years ago
- 静态分析笔记 Static-Analysis-Notes 程序分析笔记 资源分享☆185Updated 2 years ago
- This project runs a Model Context Protocol (MCP) server that wraps the CodeQL query server. It enables tools like [Cursor](https://cursor…☆95Updated 3 months ago
- ☆26Updated last year
- 基于IDAPython的二进制漏洞检测脚本库,对IDA生成的反汇编文件进行静态分析,并以XML形式报告可能存在的漏洞隐患点。Based on the binary vulnerability detection script library of IDAPYTHON, th…☆58Updated last year
- Code audit (code review) with VIM.☆16Updated 6 months ago
- ☆12Updated 3 weeks ago
- This is the repository for the paper "Cross Miniapp Request Forgery"☆19Updated last year
- a dataflow analysis framework implemented in Go, like soot☆35Updated 2 years ago
- Soot-based taint analysis with internal Java fluent interface for security specifications in fluentTQL implemented with MagpieBridge to s…☆18Updated 5 months ago
- A Coverage-Based fuzzing tools☆23Updated 3 years ago
- This is the project for the paper “Large-scale Security Measurements on the Android Firmware Ecosystem” in ICSE2022☆37Updated 7 months ago
- Mini-program Cross Page Request Forgery (MiniCPRF) Analysis Tool.☆17Updated 8 months ago
- 存储iot设备分析工具和分析文件☆14Updated 4 years ago
- A search-based Android static analysis tool with much better performance than Amandroid and FlowDroid☆50Updated 4 years ago
- Artifact for ICSE 2023☆49Updated 2 years ago