a static analysis tool for finding vulnerabilities in C/C++ source code
☆583May 17, 2026Updated 3 months ago
Alternatives and similar repositories for flawfinder
Users that are interested in flawfinder are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- static analysis of C/C++ code☆6,748Updated this week
- A collection of my Semgrep rules to facilitate vulnerability research.☆875Updated this week
- Splint - annotation-assisted static program checker☆332Jul 19, 2026Updated last month
- cwe_checker finds vulnerable patterns in binary executables☆1,356Aug 20, 2026Updated 3 weeks ago
- CodeChecker is an analyzer tooling, defect database and viewer extension for static and dynamic analyzer tools.☆2,616Updated this week
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- ☆100Nov 10, 2021Updated 4 years ago
- Static code analysis test source code☆37Aug 30, 2023Updated 3 years ago
- ☆17Aug 5, 2020Updated 6 years ago
- ⚙️ A curated list of static analysis (SAST) tools and linters for all programming languages, config files, build tools, and more. The foc…☆14,782Updated this week
- Open-source code analysis platform for C/C++/Java/Binary/Javascript/Python/Kotlin based on code property graphs. Discord https://discord.…☆3,495Updated this week
- Flint++ is cross-platform, zero-dependency port of flint, a lint program for C++ developed and used at Facebook.☆265Sep 25, 2019Updated 6 years ago
- A C/C++ Code Vulnerability Dataset with Code Changes and CVE Summaries☆368Mar 25, 2021Updated 5 years ago
- BinAbsInspector: Vulnerability Scanner for Binaries☆1,676Jun 17, 2024Updated 2 years ago
- A Coverage-Based fuzzing tools☆23Aug 9, 2021Updated 5 years ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- EMBA - The firmware security analyzer☆3,664Updated this week
- Lightweight static analysis for many languages. Find bug variants with patterns that look like source code.☆16,666Updated this week
- ☆15Jan 24, 2023Updated 3 years ago
- ThreatBox is a standard and controlled Linux based attack platform. I've used a version of this for years. It started as a collection of …☆77Nov 19, 2024Updated last year
- A collection of my weggli patterns to facilitate vulnerability research.☆161Aug 2, 2026Updated last month
- Karonte is a static analysis tool to detect multi-binary vulnerabilities in embedded firmware☆431Sep 18, 2021Updated 4 years ago
- Analyse binaries for missing security features, information disclosure and more...☆88Aug 7, 2023Updated 3 years ago
- Fuzzware's main repository. Start here to install.☆385Jun 27, 2026Updated 2 months ago
- A LLVM-based static analysis framework.☆1,057Sep 8, 2026Updated last week
- Managed Database hosting by DigitalOcean • AdPostgreSQL, MySQL, MongoDB, Kafka, Valkey, and OpenSearch available. Automatically scale up storage and focus on building your apps.
- A set of Code-ql/Joern queries to find vulnerabilities☆67May 22, 2021Updated 5 years ago
- Fuzzing IoT Devices Using the Router TL-WR902AC as Example☆132Nov 15, 2025Updated 10 months ago
- Metrix++ is an extendable tool for code metrics collection and analysis.☆92Mar 29, 2024Updated 2 years ago
- Static Value-Flow Analysis Framework for Source Code☆1,708Updated this week
- An LLVM-based instrumentation tool for universal taint tracking, dataflow analysis, and tracing.☆599Jun 10, 2026Updated 3 months ago
- Binary code-coverage fuzzer for macOS, based on libFuzzer and LLVM☆182Aug 9, 2026Updated last month
- Evolving fuzzers with large language models☆17Dec 14, 2023Updated 2 years ago
- Firmware Analysis and Comparison Tool☆1,464Updated this week
- Code and artifacts related to the Asia CCS 2022 paper☆38Nov 8, 2021Updated 4 years ago
- Managed Database hosting by DigitalOcean • AdPostgreSQL, MySQL, MongoDB, Kafka, Valkey, and OpenSearch available. Automatically scale up storage and focus on building your apps.
- A collection of my Ghidra scripts to facilitate reverse engineering and vulnerability research.☆303Aug 2, 2026Updated last month
- Companion to the "Introduction to VirtualBox security research" Blog Post☆35Apr 26, 2022Updated 4 years ago
- A Binary Ninja plugin for vulnerability research.☆300Jun 19, 2026Updated 2 months ago
- ☆231Jul 25, 2024Updated 2 years ago
- The fuzzer afl++ is afl with community patches, qemu 5.1 upgrade, collision-free coverage, enhanced laf-intel & redqueen, AFLfast++ power…☆6,756Updated this week
- ☆10Sep 24, 2019Updated 6 years ago
- A fork and successor of the Sulley Fuzzing Framework☆2,359Aug 6, 2026Updated last month