Song-Li / ODGen
ODGen is a JavaScript Static Analysis tool to detect multiple types of vulnerabilities in Node.js packages.
☆147Updated 9 months ago
Related projects ⓘ
Alternatives and complementary repositories for ODGen
- ObjLupAnsys is a tool to detect prototype pollution vulnerabilities in Node.js packages. This project is written in Python and JavaScript…☆22Updated 2 years ago
- ☆28Updated last month
- ☆27Updated 2 years ago
- MINER provided by the paper "MINER: A Hybrid Data-Driven Approach for REST API Fuzzing"☆37Updated last year
- FUGIO: Automatic Exploit Generation for PHP Object Injection Vulnerabilities☆90Updated 11 months ago
- Testability Pattern Catalogs for SAST☆29Updated 8 months ago
- Witcher is the first framework for using AFL to fuzz web applications.☆77Updated 11 months ago
- ☆23Updated 9 months ago
- A set of Code-ql/Joern queries to find vulnerabilities☆56Updated 3 years ago
- JAW: A Graph-based Security Analysis Framework for Client-side JavaScript☆99Updated last week
- Towards Measuring Supply Chain Attacks on Package Managers for Interpreted Languages☆122Updated 2 years ago
- ☆44Updated last year
- A GPT-Based Fuzz Driver Generator☆46Updated last year
- A deep learning model for localizing bugs in C/C++ source code (USENIX'23)☆137Updated last year
- HiddenCPG: Large-Scale Vulnerable Clone Detection Using Subgraph Isomorphism of Code Property Graphs☆40Updated 2 years ago
- Efficient and Precise Pointer-Tracking Data-Flow Framework☆66Updated 8 months ago
- A browser fuzzer augmented by API mod-ref relations☆31Updated 8 months ago
- FirmSec Dataset☆30Updated 2 years ago
- ☆104Updated 10 months ago
- ISSTA'23 - Third-party Library Dependency for Large-scale SCA in the C/C++ Ecosystem: How Far Are We?☆27Updated last year
- Artifact for ICSE 2023☆45Updated 2 years ago
- [CCS'24] An LLM-based, fully automated fuzzing tool for option combination testing.☆51Updated 3 weeks ago
- a blackbox network fuzzer for IoT devices☆51Updated 2 months ago
- ☆13Updated 2 years ago
- Run fuzzing experiments in Docker☆98Updated 3 years ago
- ☆36Updated last year
- Source Code Vulnerability Detection Tools（SCVDT）provides a vulnerable code database, vulnerability detection service for Java and C/C++ p…☆110Updated 3 years ago
- This repo list the core literature in the field of fuzzing test, large language model, and LLM-based fuzzer. Most of papers are selected …☆39Updated 9 months ago
- Statically Detecting Vulnerable Data Flows in Browser Extensions at Scale☆67Updated 2 years ago
- ☆22Updated 9 months ago