fullwaywang / QlRulesLinks
Auto-generated CodeQL rules for matching CVE vulnerabilities and variants.
☆184Updated last year
Alternatives and similar repositories for QlRules
Users that are interested in QlRules are comparing it to the libraries listed below
Sorting:
- 静态分析笔记 Static-Analysis-Notes 程序分析笔记 资源分享☆186Updated 3 years ago
- Detecting Flow of Sensitive Data in Mini-Programs with Static Taint Analysis☆82Updated last year
- Taint analysis implementation based on Heros and Soot☆45Updated last year
- Some test samples for CPG execution logic.☆20Updated last year
- This project runs a Model Context Protocol (MCP) server that wraps the CodeQL query server. It enables tools like [Cursor](https://cursor…☆128Updated 10 months ago
- ☆27Updated last year
- ☆64Updated 4 years ago
- Atropos: Effective Fuzzing of Web Applications for Server-Side Vulnerabilities☆75Updated last year
- 更好的包装pwntools，提高编写pwn题exp效率的工具☆27Updated 4 years ago
- 存储iot设备分析工具和分析文件☆14Updated 4 years ago
- 静态分析及代码审计自动化相关资料收集☆298Updated 3 years ago
- A set of Code-ql/Joern queries to find vulnerabilities☆67Updated 4 years ago
- Artifact for ICSE 2023☆50Updated 3 years ago
- A structure-aware grey box fuzzer based on modeling the input processing logic.☆173Updated last year
- 智能家居安全相关参考。The related reference of smart home security including: paper, website, topic of Mi IoT.☆78Updated 3 years ago
- 2021西湖论剑IoT、虚实结合赛后开放资源☆65Updated 3 years ago
- 一些阅读源码和Fuzzing 的经验,涵盖黑盒与白盒测试..☆61Updated 4 years ago
- attachments and (some) writeups/source code for RWCTF 6th☆125Updated 2 years ago
- writeups for XNUCA2020Qualifier☆70Updated 5 years ago
- A benchmark to evaluate taint analysis☆28Updated 3 years ago
- ☆27Updated 3 years ago
- A declarative static analysis tool for jvm bytecode based Datalog like CodeQL☆342Updated 2 years ago
- ☆22Updated 3 years ago
- ☆72Updated 2 years ago
- Corax for Java: A general static analysis framework for java code checking.☆254Updated last year
- a dataflow analysis framework implemented in Go, like soot☆39Updated 3 years ago
- 《深入理解Semgrep》Finding vulnerabilities with Semgrep.☆58Updated 2 years ago
- ☆30Updated 3 years ago
- My PWN 练习题，异构PWN技能栈，适合IoT安全研究者。☆48Updated 4 years ago
- attachments and (some) writeups/source code for RWCTF 5th☆59Updated 3 years ago