Open-source code analysis platform for C/C++/Java/Binary/Javascript/Python/Kotlin based on code property graphs. Discord https://discord.gg/vv4MH284Hc
☆3,560Oct 10, 2026Updated this week
Alternatives and similar repositories for joern
Users that are interested in joern are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Code Property Graph: specification, query language, and utilities☆608Sep 28, 2026Updated last week
- A library to extract Code Property Graphs from C/C++, Java, Go, Python, Ruby and every other language through LLVM-IR.☆466Updated this week
- A CAT called tabby ( Code Analysis Tool )☆1,660Jan 17, 2026Updated 8 months ago
- 《深入理解CodeQL》Finding vulnerabilities with CodeQL.☆1,794Nov 21, 2023Updated 2 years ago
- An easy-to-learn/use static analysis framework for Java and Android☆1,821Sep 19, 2026Updated 3 weeks ago
- Managed Kubernetes at scale on DigitalOcean • AdDigitalOcean Kubernetes includes the control plane, bandwidth allowance, container registry, automatic updates, and more for free.
- BinAbsInspector: Vulnerability Scanner for Binaries☆1,678Jun 17, 2024Updated 2 years ago
- Static Value-Flow Analysis Framework for Source Code☆1,715Updated this week
- A robust parser for C/C++ storing abstract syntax trees, control flow graphs and program dependence graphs in a neo4j graph database.☆557May 10, 2019Updated 7 years ago
- CodeQL: the libraries and queries that power security researchers around the world, as well as code scanning in GitHub Advanced Security☆10,188Updated this week
- cwe_checker finds vulnerable patterns in binary executables☆1,360Sep 28, 2026Updated last week
- Getting started with static program analysis. 静态程序分析入门教程。☆1,768Mar 20, 2024Updated 2 years ago
- AFL++ is a state-of-the-art fuzzer, and #1 in benchmarks. It was originally based on AFL. Today it comes with qemu 5.1, collision-free co…☆6,790Updated this week
- A declarative static analysis tool for jvm bytecode based Datalog like CodeQL☆340Jan 6, 2024Updated 2 years ago
- weggli is a fast and robust semantic search tool for C and C++ codebases. It is designed to help security researchers identify interestin…☆2,503Jul 12, 2024Updated 2 years ago
- GPUs on demand by Runpod - Special Offer Available • AdRun AI, ML, and HPC workloads on powerful cloud GPUs—without limits or wasted spend. Deploy GPUs in under a minute and pay by the second.
- Recent Fuzzing Paper☆2,765Sep 30, 2026Updated last week
- Coverage-guided, in-process fuzzing for the JVM☆1,260Oct 3, 2026Updated last week
- A new version of Soot with a completely overhauled architecture☆826Updated this week
- ☆357Oct 24, 2024Updated last year
- Effective Vulnerability Identification by Learning Comprehensive Program Semantics via Graph Neural Networks☆266Jan 19, 2024Updated 2 years ago
- xAST评价体系，让安全工具不再“黑盒”. The xAST evaluation benchmark makes security tools no longer a "black box".☆495May 21, 2026Updated 4 months ago
- Source code for LLMxCPG paper☆162Mar 26, 2026Updated 6 months ago
- Framework for Automating Fuzzable Target Discovery with Static Analysis.☆548Jun 11, 2026Updated 4 months ago
- A neurosymbolic framework for vulnerability detection in code☆436Jul 2, 2026Updated 3 months ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- ShiftLeft OverflowDB☆139May 22, 2025Updated last year
- Python library for CPGQL server☆47Jun 4, 2024Updated 2 years ago
- Binary, coverage-guided fuzzer for Windows, macOS, Linux and Android☆1,384Aug 25, 2026Updated last month
- Advanced Fuzzing Library - Slot your Fuzzer together in Rust! Scales across cores and machines. For Windows, Android, MacOS, Linux, no_st…☆2,654Sep 16, 2026Updated 3 weeks ago
- A LLVM-based static analysis framework.☆1,059Sep 30, 2026Updated last week
- Zero shot vulnerability discovery using LLMs☆2,796Feb 6, 2025Updated last year
- Soot - A Java optimization framework☆3,102Sep 28, 2026Updated last week
- YASA is an open-source static program analysis project. Its core innovation lies in a unified intermediate representation called UAST, d…☆326Updated this week
- Code Property Graph (CPG) frontend for binary applications and libraries.☆98Oct 28, 2021Updated 4 years ago
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- A True Instrumentable Binary Emulation Framework☆6,123Sep 24, 2026Updated 2 weeks ago
- A powerful and user-friendly binary analysis platform!☆9,140Updated this week
- SymCC: efficient compiler-based symbolic execution☆885Mar 16, 2026Updated 6 months ago
- 一些阅读源码和Fuzzing 的经验,涵盖黑盒与白盒测试..☆1,081Aug 24, 2021Updated 5 years ago
- A byte code analyzer for finding deserialization gadget chains in Java applications☆1,090Jun 15, 2021Updated 5 years ago
- A JavaScript Engine Fuzzer☆2,350Updated this week
- A powerful static binary rewriting tool☆1,156Jun 28, 2026Updated 3 months ago