Alternatives and similar repositories for taint-analysis:

Users that are interested in taint-analysis are comparing it to the libraries listed below

• vulpecker / Vulpecker
  An Automated Vulnerability Detection System
  ☆58Updated 8 years ago
• zhunki / skyfire
  ☆51Updated 6 years ago
• dbrumley / redebug
  ReDeBug Source Code.
  ☆24Updated last year
• zongpy / FuzzGuard
  The released code of FuzzGuard in USENIX Security 2020.
  ☆29Updated 4 years ago
• RiS3-Lab / FICS
  ☆51Updated 4 years ago
• Anemone95 / MLDetectVuln
  Works about detecting vulnerable using ML.
  ☆83Updated 4 years ago
• CGCL-codes / SCVDT
  Source Code Vulnerability Detection Tools（SCVDT）provides a vulnerable code database, vulnerability detection service for Java and C/C++ p…
  ☆110Updated 3 years ago
• naman / TaintAnalysis
  Interprocedural Taint Analysis using SOOT
  ☆8Updated 8 years ago
• Song-Li / ObjLupAnsys
  ObjLupAnsys is a tool to detect prototype pollution vulnerabilities in Node.js packages. This project is written in Python and JavaScript…
  ☆22Updated 3 years ago
• ucsb-seclab / diane
  DiAne is a smart fuzzer for IoT devices
  ☆40Updated 9 months ago
• twelveand0 / CarrotsBlender
  holding data and processing code for the paper 'A Large-Scale Empirical Study on Vulnerability Distribution within Projects and the Lesso…
  ☆20Updated 4 years ago
• SocietyMaster / FlowCog
  Project FlowCog (2017)
  ☆27Updated 6 years ago
• OSUSecLab / LeakScope
  Value set analysis(VSA) for revealing the possible values (strings) of the keys from mobile app
  ☆42Updated 4 years ago
• NWU-NISL-Fuzzing / COMFORT
  ☆68Updated 3 years ago
• VPRLab / BackDroid
  A search-based Android static analysis tool with much better performance than Amandroid and FlowDroid
  ☆47Updated 3 years ago
• fiberx / fiber
  Source-binary patch presence test system.
  ☆82Updated 2 years ago
• CodeShield-Security / SPDS
  Efficient and Precise Pointer-Tracking Data-Flow Framework
  ☆66Updated last month
• squizz617 / vuddy
  VUDDY: A Scalable and Accurate Vulnerable Code Clone Detector (S&P'17)
  ☆52Updated 7 months ago
• Fraunhofer-AISEC / codyze
  Codyze is a static analyzer for Java, C, C++ based on code property graphs
  ☆88Updated this week
• salmonx / seeds
  模糊测试种子库 comprehensive croups for fuzzing seeds with carfefully selected(rate=coverage/filesize)
  ☆21Updated 3 years ago
• TortoiseFuzz / TortoiseFuzz
  ☆88Updated 3 years ago
• OSUSecLab / SelectiveTaint
  ☆71Updated 3 years ago
• franchiotta / taintchecker
  Clang static checker that carries out tainting analysis.
  ☆88Updated 6 years ago
• seclab-ucr / GPT-Expr
  Assisting Static Analysis with Large Language Models: A ChatGPT Experiment
  ☆30Updated last year
• chyyuu / symexe
  symexe
  ☆95Updated 7 years ago
• Tricker-z / TPLite
  ISSTA'23 - Third-party Library Dependency for Large-scale SCA in the C/C++ Ecosystem: How Far Are We?
  ☆27Updated last year
• occia / fuzzdrivergpt
  A GPT-Based Fuzz Driver Generator
  ☆46Updated last year
• zjuchenyuan / dockerized_fuzzing
  Run fuzzing experiments in Docker
  ☆99Updated 3 years ago
• MoonLight-SteinsGate / EcoFuzz
  EcoFuzz-An adaptive energy-saving greybox fuzzer
  ☆47Updated 4 years ago
• find-sec-bugs / juliet-test-suite
  A collection of test cases in the Java language. It contains examples for 112 different CWEs.
  ☆52Updated 3 years ago