Alternatives and similar repositories for MiniCAT

Users that are interested in MiniCAT are comparing it to the libraries listed below

• OSUSecLab / TaintMini
  Detecting Flow of Sensitive Data in Mini-Programs with Static Taint Analysis
  ☆78Updated last year
• fullwaywang / QlRules
  Auto-generated CodeQL rules for matching CVE vulnerabilities and variants.
  ☆181Updated last year
• OSUSecLab / MiniCrawler
  A keyword based crawler for WeChat Mini-apps
  ☆49Updated 4 years ago
• LianKee / CLDroid
  A data pool-aware static analyzer to detect cross-layer threats in Android apps.
  ☆12Updated last year
• flyboss / MiniTracker
  MiniTracker: Large-Scale Sensitive Information Tracking in Mini Apps.
  ☆31Updated 10 months ago
• WindXaa / Android-security-paper
  本项目主要是对Android安全文章阅读的笔记收集整理，帮助硕博和从业人员快速阅读论文
  ☆37Updated 2 years ago
• HaHarden / CPGPractise
  Some test samples for CPG execution logic.
  ☆20Updated last year
• hac425xxx / joern-ida
  IDA Hexrays To Joern
  ☆42Updated 11 months ago
• secureweb / fuzzcache
  FuzzCache: Optimizing Web Application Fuzzing Through Software-Based Data Cache (ACM CCS 2024)
  ☆17Updated 11 months ago
• KeyMagnetProject2025 / KeyMagnet
  A semantic-based tool to detect credential leakage in mini-apps.
  ☆13Updated last year
• OSUSecLab / CMRFScanner
  This is the repository for the paper "Cross Miniapp Request Forgery"
  ☆20Updated 2 years ago
• xywang18 / Rengar
  Effective ReDoS Detection by Principled Vulnerability Modeling and Exploit Generation
  ☆14Updated 3 months ago
• Feysh-Group / corax-community
  Corax for Java: A general static analysis framework for java code checking.
  ☆253Updated 10 months ago
• soot-oss / TaintAnalysis
  Taint analysis implementation based on Heros and Soot
  ☆45Updated last year
• LFYSec / AgentFuzz
  ☆21Updated last month
• alibaba / AegiScan
  A Static Dataflow Analysis Framework for iOS Applications.
  ☆47Updated last year
• ErodedElk / Chaos-me-JavaScript-V8
  零基础入门V8引擎漏洞挖掘
  ☆279Updated last year
• Escapingbug / dotaxctf
  ☆29Updated 2 years ago
• hac425xxx / ida2codeql
  IDA Hexrays To CodeQL
  ☆49Updated 11 months ago
• SpringJasmine / Jasmine
  ☆29Updated 3 years ago
• P4nda0s / sec-agent-tutorials
  网络安全 LLM 智能体应用教程
  ☆29Updated 7 months ago
• CISPA-SysSec / atropos-legacy
  Atropos: Effective Fuzzing of Web Applications for Server-Side Vulnerabilities
  ☆72Updated last year
• antgroup / YASA-Engine
  YASA is an open-source static program analysis project. Its core innovation lies in a unified intermediate representation called UAST, d…
  ☆147Updated this week
• seclab-fudan / RecurScan
  ☆27Updated last year
• fdu-sec / NestFuzz
  A structure-aware grey box fuzzer based on modeling the input processing logic.
  ☆171Updated last year
• flankerhqd / jebmcp
  ☆144Updated last month
• VPRLab / BackDroid
  A search-based Android static analysis tool with much better performance than Amandroid and FlowDroid
  ☆50Updated 4 years ago
• chicharitomu14 / AndScanner
  This is the project for the paper “Large-scale Security Measurements on the Android Firmware Ecosystem” in ICSE2022
  ☆37Updated 10 months ago
• software-engineering-and-security / Gleipner
  A benchmark for Java gadget chain detecting algorithms.
  ☆12Updated 4 months ago
• JordyZomer / codeql-mcp
  This project runs a Model Context Protocol (MCP) server that wraps the CodeQL query server. It enables tools like [Cursor](https://cursor…
  ☆118Updated 6 months ago