Alternatives and similar repositories for dynamic-analysis

Users that are interested in dynamic-analysis are comparing it to the libraries listed below

• cpuu / awesome-fuzzing
  A curated list of awesome Fuzzing(or Fuzz Testing) for software security
  ☆947Updated 2 years ago
• david-a-wheeler / flawfinder
  a static analysis tool for finding vulnerabilities in C/C++ source code
  ☆556Updated last year
• uds-se / fuzzingbook
  Project page for "The Fuzzing Book"
  ☆1,227Updated 2 months ago
• google / fuzzbench
  FuzzBench - Fuzzer benchmarking as a service.
  ☆1,174Updated last week
• google / clusterfuzzlite
  ClusterFuzzLite - Simple continuous fuzzing that runs in CI.
  ☆516Updated last month
• ShiftLeftSecurity / codepropertygraph
  Code Property Graph: specification, query language, and utilities
  ☆556Updated last month
• semgrep / semgrep-rules
  Semgrep Community Edition rules, maintained by Semgrep and the community. Free to use under the Semgrep Rules License.
  ☆1,056Updated this week
• joernio / joern
  Open-source code analysis platform for C/C++/Java/Binary/Javascript/Python/Kotlin based on code property graphs. Discord https://discord.…
  ☆2,839Updated this week
• secure-software-engineering / phasar
  A LLVM-based static analysis framework.
  ☆1,027Updated 2 weeks ago
• ksluckow / awesome-symbolic-execution
  A curated list of awesome symbolic execution resources including essential research papers, lectures, videos, and tools.
  ☆1,459Updated 7 months ago
• microsoft / sarif-tutorials
  User-friendly documentation for the SARIF file format.
  ☆336Updated 2 years ago
• trailofbits / it-depends
  A tool to automatically build a dependency graph and Software Bill of Materials (SBOM) for packages and arbitrary source code repositorie…
  ☆381Updated this week
• SAP / project-kb
  Home page of project "KB"
  ☆133Updated 9 months ago
• ossf / fuzz-introspector
  Fuzz Introspector -- introspect, extend and optimise fuzzers
  ☆444Updated last week
• dspinellis / awesome-msr
  A curated repository of software engineering repository mining data sets
  ☆462Updated 2 months ago
• google / fuzzer-test-suite
  Set of tests for fuzzing engines
  ☆1,459Updated 4 years ago
• CodeIntelligenceTesting / jazzer
  Coverage-guided, in-process fuzzing for the JVM
  ☆1,187Updated this week
• fkie-cad / cwe_checker
  cwe_checker finds vulnerable patterns in binary executables
  ☆1,313Updated 9 months ago
• OWASP-Benchmark / BenchmarkJava
  OWASP Benchmark is a test suite designed to verify the speed and accuracy of software vulnerability detection tools. A fully runnable web…
  ☆767Updated this week
• Fraunhofer-AISEC / cpg
  A library to extract Code Property Graphs from C/C++, Java, Go, Python, Ruby and every other language through LLVM-IR.
  ☆401Updated this week
• uds-se / debuggingbook
  Project page for "The Debugging Book"
  ☆269Updated 2 months ago
• microsoft / OSSGadget
  Collection of tools for analyzing open source packages.
  ☆354Updated last month
• google / fuzzing
  Tutorials, examples, discussions, research proposals, and other resources related to fuzzing
  ☆3,744Updated last year
• magnologan / awesome-sca
  A comprehensive list of software composition analysis tools.
  ☆160Updated 3 months ago
• tthtlc / awesome-source-analysis
  Source code understanding via Machine Learning techniques
  ☆138Updated this week
• trailofbits / polytracker
  An LLVM-based instrumentation tool for universal taint tracking, dataflow analysis, and tracing.
  ☆587Updated 9 months ago
• AngoraFuzzer / Angora
  Angora is a mutation-based fuzzer. The main goal of Angora is to increase branch coverage by solving path constraints without symbolic e…
  ☆952Updated 3 years ago
• bureado / awesome-software-supply-chain-security
  A compilation of resources in the software supply chain security domain, with emphasis on open source
  ☆342Updated 2 years ago
• microsoft / sarif-tools
  A set of Python command line tools for working with SARIF files produced by code analysis tools
  ☆139Updated 4 months ago
• ShiftLeftSecurity / sast-scan
  Scan is a free & Open Source DevSecOps tool for performing static analysis based security testing of your applications and its dependenci…
  ☆862Updated 2 years ago