Alternatives and similar repositories for privado-core

Users that are interested in privado-core are comparing it to the libraries listed below

• clouditor / cloud-property-graph
  The Cloud Property Graph is based on a Code Property Graph and tries to connect static code analysis and Cloud runtime assessment.
  ☆27Updated 8 months ago
• CROSSINGTUD / CryptoAnalysis
  CogniCrypt_SAST: CrySL-to-Static Analysis Compiler
  ☆77Updated this week
• SAP / project-kb
  Home page of project "KB"
  ☆130Updated 6 months ago
• ossf-cve-benchmark / ossf-cve-benchmark
  The OpenSSF CVE Benchmark consists of code and metadata for over 200 real life CVEs, as well as tooling to analyze the vulnerable codebas…
  ☆151Updated last year
• s3c2 / vfcfinder
  VFCFinder: Searching for the Missing Vulnerability Fixing Commits
  ☆29Updated last year
• lyvd / bandit4mal
  A fork of Bandit tool with patterns to identifying malicious python code.
  ☆28Updated 3 years ago
• ShiftLeftSecurity / overflowdb
  ShiftLeft OverflowDB
  ☆130Updated 4 months ago
• Aurore54F / DoubleX
  Statically Detecting Vulnerable Data Flows in Browser Extensions at Scale
  ☆76Updated 3 years ago
• Fraunhofer-AISEC / codyze
  Codyze is a static analyzer for Java, C, C++ based on code property graphs
  ☆89Updated 8 months ago
• SAP / risk-explorer-for-software-supply-chains
  A taxonomy of attacks on software supply chains in the form of an attack tree, based on and linked to numerous real-world incidents and o…
  ☆78Updated this week
• plume-oss / plume
  Plume is a code representation benchmarking library with options to extract the AST from Java bytecode and store the result in various gr…
  ☆75Updated 11 months ago
• fasten-project / fasten
  Analyse package dependency networks at the call graph level
  ☆95Updated last year
• AppThreat / atom
  atom is a novel intermediate representation for applications and a standalone tool that is powered by chen.
  ☆72Updated this week
• trailofbits / codeql-queries
  CodeQL queries developed by Trail of Bits
  ☆123Updated 2 weeks ago
• Samsung / CredData
  CredData is a set of files including credentials in open source projects. CredData includes suspicious lines with manual review results a…
  ☆44Updated last week
• Aurore54F / JStap
  Modular static malicious JavaScript detection system
  ☆71Updated 4 years ago
• google / oss-fuzz-vulns
  OSS-Fuzz vulnerabilities for OSV.
  ☆162Updated this week
• AppThreat / chen
  Code Hierarchy Exploration Net (chen)
  ☆21Updated this week
• WM-SEMERU / ACER
  ACER is an AST-based Callgraph Generator Development Framework
  ☆38Updated last year
• TQRG / secbench
  🪐 A Database of Existing Security Vulnerabilities Patches to Enable Evaluation of Techniques (single-commit; multi-language)
  ☆41Updated 5 months ago
• facebook / sapp
  Post Processor for Facebook Static Analysis Tools.
  ☆143Updated 2 weeks ago
• find-sec-bugs / juliet-test-suite
  A collection of test cases in the Java language. It contains examples for 112 different CWEs.
  ☆57Updated 4 years ago
• ShiftLeftSecurity / codepropertygraph
  Code Property Graph: specification, query language, and utilities
  ☆536Updated this week
• Aurore54F / static-pdg-js
  Static JavaScript Analysis: AST, Control Flow, Data Flow, & Pointer Analysis
  ☆28Updated 3 years ago
• too4words / securibench-micro
  Securibench Micro is a benchmark for static analysis tools for security.
  ☆26Updated 7 years ago
• secure-software-engineering / COVA
  COVA - A static analysis tool to compute path conditions
  ☆37Updated 2 months ago
• Fraunhofer-AISEC / cpg
  A library to extract Code Property Graphs from C/C++, Java, Go, Python, Ruby and every other language through LLVM-IR.
  ☆374Updated this week
• IQTLabs / software-supply-chain-compromises
  A dataset of software supply chain compromises. Please help us maintain it!
  ☆130Updated 3 years ago
• opalj / opal
  ☆68Updated this week
• secure-software-engineering / tamiflex
  TamiFlex facilitates static analysis of programs that use reflection and custom class loaders
  ☆44Updated 4 years ago