YASA-UAST is an intermediate representation structure for multi-language program analysis. The UAST-Parser parses code from different programming languages into a unified abstract syntax format.
☆87Jul 6, 2026Updated last month
Alternatives and similar repositories for YASA-UAST
Users that are interested in YASA-UAST are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- YASA is an open-source static program analysis project. Its core innovation lies in a unified intermediate representation called UAST, d…☆310Jul 28, 2026Updated last week
- xAST评价体系，让安全工具不再“黑盒”. The xAST evaluation benchmark makes security tools no longer a "black box".☆487May 21, 2026Updated 2 months ago
- My presentation slides☆18Oct 31, 2025Updated 9 months ago
- Effective ReDoS Detection by Principled Vulnerability Modeling and Exploit Generation☆15Jul 24, 2025Updated last year
- ☆16Aug 1, 2025Updated last year
- AI Agents on DigitalOcean Gradient AI Platform • AdBuild production-ready AI agents using customizable tools or access multiple LLMs through a single endpoint. Create custom knowledge bases or connect external data.
- ☆210Oct 27, 2025Updated 9 months ago
- The source code of [S&P'25] Detecting Taint-Style Vulnerabilities in Microservice-Structured Web Applications.☆72Nov 20, 2025Updated 8 months ago
- Hacking GraalVM Espresso - Abusing Continuation API to Make ROP-like Attack☆36Aug 27, 2025Updated 11 months ago
- 高版本Fastjson在Java原生反序列化中的利用演示☆26Jan 12, 2025Updated last year
- Tai-e的Web插件☆22Jun 11, 2024Updated 2 years ago
- Framework for building reliable LLM agents with structured specs, operator-level verification, and progressive solidification.☆67Feb 27, 2026Updated 5 months ago
- Extract entire function source code based on giving line number using Javaparser☆21Jul 15, 2025Updated last year
- A curated list of awesome resources about LLM supply chain security (including papers, security reports and CVEs)☆105Jan 20, 2025Updated last year
- 用于快速启动tabby 分析漏洞或者gadget的环境☆92Jul 14, 2025Updated last year
- Managed Kubernetes at scale on DigitalOcean • AdDigitalOcean Kubernetes includes the control plane, bandwidth allowance, container registry, automatic updates, and more for free.
- 一个IDEA插件：一键收集项目中所有jar包依赖的工具插件。遍历项目目录收集所有jar文件，复制到all-in-one文件夹，并自动添加为项目库。☆55Oct 30, 2025Updated 9 months ago
- ☆32Mar 31, 2026Updated 4 months ago
- A benchmark for Java gadget chain detecting algorithms.☆17Jun 20, 2025Updated last year
- idea插件，快速生成反序列化中常用的方法，比如setFieldValue、createTemplatesImpl等☆29Oct 2, 2024Updated last year
- Lessons for syntaxflow zero to hero☆56Sep 14, 2024Updated last year
- generate facts from bytecode (source is https://github.com/plast-lab/doop-mirror/tree/master/generators)☆22Nov 24, 2024Updated last year
- FIRE: Combining Multi-Stage Filtering with Taint Analysis for Scalable Recurring Vulnerability Detection.☆16Sep 27, 2024Updated last year
- Leveraging LLM to generate Java deserialization chains☆89Mar 12, 2026Updated 4 months ago
- Collection of CTF Web challenges I made☆53Apr 25, 2023Updated 3 years ago
- Managed Database hosting by DigitalOcean • AdPostgreSQL, MySQL, MongoDB, Kafka, Valkey, and OpenSearch available. Automatically scale up storage and focus on building your apps.
- A CAT called tabby ( Code Analysis Tool )☆1,656Jan 17, 2026Updated 6 months ago
- VulnGym: A Real-World, Project-Level Vulnerability Benchmark for White-Box Vulnerability-Hunting Agents☆217Jun 26, 2026Updated last month
- TensorFlow API analysis tool and malicious model detection tool☆41May 27, 2025Updated last year
- Security Vulnerability Repair via Concolic Execution and Code Mutations☆22Sep 12, 2024Updated last year
- 利用代理驱动绕过JDBC Attack检测☆145Jun 15, 2025Updated last year
- 闭源系统半自动漏洞挖掘工具，针对 jar/war/zip 进行静态代码分析，输出从source到sink的可达路径。LLM将验证路径可达性，并根据上下文给出该路径可信分数☆510Jan 12, 2026Updated 6 months ago
- 个人使用CodeQL编写的一些规则☆180Mar 30, 2022Updated 4 years ago
- An easy-to-learn/use static analysis framework for Java and Android☆1,799Jun 28, 2026Updated last month
- A declarative static analysis tool for jvm bytecode based Datalog like CodeQL☆341Jan 6, 2024Updated 2 years ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- Predator is a directed fuzzing-based Web application vulnerability validation prototype. It automates verifying static vulnerability repo…☆14May 19, 2025Updated last year
- Go Agent is a go application probe of DongTai IAST, which collects method invocation data during runtime of Go application by dynamic hoo…☆41Jan 9, 2025Updated last year
- Query-Based Code Analysis Engine☆357Sep 21, 2025Updated 10 months ago
- simpleIAST- 基于污点追踪的灰盒漏洞扫描工具。☆101Mar 24, 2026Updated 4 months ago
- SAST+AI的代码审计☆24Feb 28, 2026Updated 5 months ago
- ☆12Mar 5, 2026Updated 5 months ago
- 构建基于 Skill 的 Android 智能审计 Agent☆28Feb 14, 2026Updated 5 months ago