Alternatives and similar repositories for privado-core

Users that are interested in privado-core are comparing it to the libraries listed below

• clouditor / cloud-property-graph
  The Cloud Property Graph is based on a Code Property Graph and tries to connect static code analysis and Cloud runtime assessment.
  ☆28Updated 11 months ago
• SAP / project-kb
  Home page of project "KB"
  ☆133Updated 9 months ago
• ossf-cve-benchmark / ossf-cve-benchmark
  The OpenSSF CVE Benchmark consists of code and metadata for over 200 real life CVEs, as well as tooling to analyze the vulnerable codebas…
  ☆159Updated last year
• SAP / risk-explorer-for-software-supply-chains
  A taxonomy of attacks on software supply chains in the form of an attack tree, based on and linked to numerous real-world incidents and o…
  ☆79Updated last week
• AppThreat / atom
  atom is a novel intermediate representation for applications and a standalone tool that is powered by chen.
  ☆81Updated last week
• Aurore54F / DoubleX
  Statically Detecting Vulnerable Data Flows in Browser Extensions at Scale
  ☆78Updated 4 years ago
• CROSSINGTUD / CryptoAnalysis
  CogniCrypt_SAST: CrySL-to-Static Analysis Compiler
  ☆77Updated this week
• s3c2 / vfcfinder
  VFCFinder: Searching for the Missing Vulnerability Fixing Commits
  ☆30Updated 2 years ago
• AppThreat / chen
  Code Hierarchy Exploration Net (chen)
  ☆24Updated last week
• Fraunhofer-AISEC / codyze
  Codyze is a static analyzer for Java, C, C++ based on code property graphs
  ☆91Updated 11 months ago
• Aurore54F / HideNoSeek
  Static data flow-based analysis of JavaScript files to detect syntactic clones
  ☆23Updated 5 years ago
• ShiftLeftSecurity / codepropertygraph
  Code Property Graph: specification, query language, and utilities
  ☆555Updated last month
• ossf / fuzz-introspector
  Fuzz Introspector -- introspect, extend and optimise fuzzers
  ☆444Updated this week
• Aurore54F / static-pdg-js
  Static JavaScript Analysis: AST, Control Flow, Data Flow, & Pointer Analysis
  ☆28Updated 3 years ago
• TQRG / secbench
  🪐 A Database of Existing Security Vulnerabilities Patches to Enable Evaluation of Techniques (single-commit; multi-language)
  ☆42Updated 9 months ago
• facebook / sapp
  Post Processor for Facebook Static Analysis Tools.
  ☆140Updated this week
• trailofbits / codeql-queries
  CodeQL queries developed by Trail of Bits
  ☆138Updated this week
• bureado / awesome-software-supply-chain-security
  A compilation of resources in the software supply chain security domain, with emphasis on open source
  ☆342Updated 2 years ago
• google / oss-fuzz-vulns
  OSS-Fuzz vulnerabilities for OSV.
  ☆169Updated this week
• nuprl / augur
  Performant taint analysis for Node.js
  ☆55Updated last year
• Fraunhofer-AISEC / cpg
  A library to extract Code Property Graphs from C/C++, Java, Go, Python, Ruby and every other language through LLVM-IR.
  ☆401Updated this week
• opalj / opal
  ☆74Updated 3 weeks ago
• ShiftLeftSecurity / overflowdb
  ShiftLeft OverflowDB
  ☆132Updated 7 months ago
• Invizory / taintflow
  TaintFlow, a framework for JavaScript dynamic information flow analysis.
  ☆18Updated 2 years ago
• lyvd / bandit4mal
  A fork of Bandit tool with patterns to identifying malicious python code.
  ☆28Updated 3 years ago
• SWAT-project / SWAT
  SWAT, a dynamic symbolic execution engine for Java Applications that uses ASM for on-the-fly byte code instrumentation.
  ☆37Updated 8 months ago
• Song-Li / ODGen
  ODGen is a JavaScript Static Analysis tool to detect multiple types of vulnerabilities in Node.js packages.
  ☆161Updated last year
• Aurore54F / JStap
  Modular static malicious JavaScript detection system
  ☆75Updated 5 years ago
• SAP / project-foxhound
  A web browser with dynamic data-flow tracking enabled in the Javascript engine and DOM, based on Mozilla Firefox (https://github.com/mozi…
  ☆153Updated last week
• microsoft / OSSGadget
  Collection of tools for analyzing open source packages.
  ☆354Updated last month