OSUSecLab / TaintMiniLinks
Detecting Flow of Sensitive Data in Mini-Programs with Static Taint Analysis
☆83Updated last year
Alternatives and similar repositories for TaintMini
Users that are interested in TaintMini are comparing it to the libraries listed below
Sorting:
- Auto-generated CodeQL rules for matching CVE vulnerabilities and variants.☆184Updated last year
- Taint analysis implementation based on Heros and Soot☆45Updated last year
- IDA Hexrays To Joern☆44Updated last year
- A Static Dataflow Analysis Framework for iOS Applications.☆51Updated last year
- Some test samples for CPG execution logic.☆20Updated last year
- A keyword based crawler for WeChat Mini-apps☆50Updated 4 years ago
- ☆30Updated 3 years ago
- WALA 学习笔记☆14Updated 2 years ago
- IDA Hexrays To CodeQL☆50Updated last year
- 本项目主要是对Android安全文章阅读的笔记收集整理，帮助硕博和从业人员快速阅读论文☆38Updated 3 years ago
- 基于IDAPython的二进制漏洞检测脚本库，对IDA生成的反汇编文件进行静态分析，并以XML形式报告可能存在的漏洞隐患点。Based on the binary vulnerability detection script library of IDAPYTHON, th…☆60Updated last year
- 静态分析笔记 Static-Analysis-Notes 程序分析笔记 资源分享☆186Updated 2 years ago
- Mini-program Cross Page Request Forgery (MiniCPRF) Analysis Tool.☆18Updated last year
- A benchmark to evaluate taint analysis☆28Updated 3 years ago
- 2021西湖论剑IoT、虚实结合赛后开放资源☆65Updated 3 years ago
- ☆30Updated last year
- A Coverage-Based fuzzing tools☆23Updated 4 years ago
- This is the project for the paper “Large-scale Security Measurements on the Android Firmware Ecosystem” in ICSE2022☆37Updated last year
- Precision-guided context sensitivity for pointer analysis☆61Updated 2 years ago
- oh my soot !☆93Updated 3 years ago
- ☆29Updated 2 years ago
- A semantic-based tool to detect credential leakage in mini-apps.☆17Updated last year
- Code audit (code review) with VIM.☆17Updated 11 months ago
- a dataflow analysis framework implemented in Go, like soot☆38Updated 3 years ago
- This is the repository for the paper "Cross Miniapp Request Forgery"☆20Updated 2 years ago
- Soot-based taint analysis with internal Java fluent interface for security specifications in fluentTQL implemented with MagpieBridge to s…☆18Updated 10 months ago
- ☆13Updated 2 weeks ago
- Artifact for ICSE 2023☆50Updated 3 years ago
- A search-based Android static analysis tool with much better performance than Amandroid and FlowDroid☆50Updated 4 years ago
- YASA-UAST is an intermediate representation structure for multi-language program analysis. The UAST-Parser parses code from different pro…☆62Updated last week