ryohare / fortify-structural-rules-guideLinks
A technique for developing Fortify structural rules and characterization rules.
☆14Updated 5 years ago
Alternatives and similar repositories for fortify-structural-rules-guide
Users that are interested in fortify-structural-rules-guide are comparing it to the libraries listed below
Sorting:
- Binary rewriting approach with fork server support to fuzz Java applications with afl-fuzz.☆91Updated 7 years ago
- Java taint propagation for java. Define tainted sources, sanitizer methods and sinks via aspects.☆28Updated 6 years ago
- Personal CodeQL queries☆64Updated last week
- Works about detecting vulnerable using ML.☆85Updated 5 years ago
- Testability Tarpits: the Impact of Code Patterns on the Security Testing of Web Applications (NDSS 2022)☆25Updated last year
- Codyze is a static analyzer for Java, C, C++ based on code property graphs☆88Updated 5 months ago
- Parser utility to generate ASTs from PHP source code suitable to be processed by Joern.☆17Updated 6 years ago
- Parser utility to generate ASTs from PHP source code suitable to be processed by Joern.☆36Updated 5 years ago
- Taint Analysis for PHP☆45Updated 9 years ago
- Soot-based taint analysis with internal Java fluent interface for security specifications in fluentTQL implemented with MagpieBridge to s…☆18Updated 5 months ago
- Collate and collect binary related materials, including papers, tools, etc. Now,there are the following categories: 1、Fuzzing☆58Updated 6 years ago
- 收集物联网安全相关资料☆41Updated 8 years ago
- A static analysis tool for Java programs, based on the theory of code property graphs.☆18Updated 2 years ago
- A static analysis API for finding deserialization attack gadgets☆38Updated 2 years ago
- ☆23Updated 6 years ago
- Peach Fuzzer 3.x☆23Updated 9 years ago
- python restful api fuzz test☆51Updated last year
- 基于JVM-Sandbox实现RASP安全监控防护☆52Updated last year
- Source-binary patch presence test system.☆27Updated 5 years ago
- ☆42Updated 5 years ago
- Study WALA and static code analysis . This project introduces the required knowledge and study roadmap.☆22Updated 4 years ago
- ☆35Updated 6 years ago
- ☆11Updated 6 years ago
- ☆19Updated 6 years ago
- ObjLupAnsys is a tool to detect prototype pollution vulnerabilities in Node.js packages. This project is written in Python and JavaScript…☆24Updated 3 years ago
- Source Code Vulnerability Detection Tools(SCVDT)provides a vulnerable code database, vulnerability detection service for Java and C/C++ p…☆117Updated 4 years ago
- These are the vulnerabilities discovered by Galaxy Lab.☆149Updated last year
- A Vulnerable Web App written by JavaScript (Vue+Egg)☆12Updated 8 months ago
- A curated list of audit rules which extract from Source Code Auditing tools.☆14Updated 5 years ago
- 物联网设备分析环境搭建与工具使用,包括脚本换阿里源、binwalk的完整安装、firmwalker和rips的使用☆45Updated 6 years ago