A new version of Soot with a completely overhauled architecture
☆774Feb 27, 2026Updated this week
Alternatives and similar repositories for SootUp
Users that are interested in SootUp are comparing it to the libraries listed below
Sorting:
- Soot - A Java optimization framework☆3,072Feb 23, 2026Updated last week
- An easy-to-learn/use static analysis framework for Java☆1,765Feb 16, 2026Updated 2 weeks ago
- A step-by-step tutorial for Soot (a Java static analysis framework)☆449Dec 23, 2022Updated 3 years ago
- IFDS/IDE Solver for Soot and other frameworks☆255Feb 13, 2026Updated 2 weeks ago
- The official repo of Doop, the declarative pointer analysis framework.☆204Updated this week
- FlowDroid Static Data Flow Tracker☆1,232Updated this week
- A declarative static analysis tool for jvm bytecode based Datalog like CodeQL☆345Jan 6, 2024Updated 2 years ago
- T.J. Watson Libraries for Analysis, with front ends for Java, Android, and JavaScript, and many common static program analyses.☆837Updated this week
- A CAT called tabby ( Code Analysis Tool )☆1,637Jan 17, 2026Updated last month
- Taint analysis implementation based on Heros and Soot☆45May 6, 2024Updated last year
- Efficient and Precise Pointer-Tracking Data-Flow Framework☆68Dec 10, 2024Updated last year
- Tai-e assignments for static program analysis☆1,219Aug 28, 2025Updated 6 months ago
- Qilin: A New Framework for Supporting Fine-Grained Context-Sensitivity in Java Pointer Analysis☆146Jan 22, 2026Updated last month
- A benchmark to evaluate taint analysis☆28Jun 20, 2022Updated 3 years ago
- Example code to help getting start with SootUp☆14Aug 7, 2025Updated 6 months ago
- oh my soot !☆93Aug 10, 2022Updated 3 years ago
- generate facts from bytecode (source is https://github.com/plast-lab/doop-mirror/tree/master/generators)☆23Nov 24, 2024Updated last year
- xAST评价体系，让安全工具不再“黑盒”. The xAST evaluation benchmark makes security tools no longer a "black box".☆463Jan 15, 2026Updated last month
- Getting started with static program analysis. 静态程序分析入门教程。☆1,766Mar 20, 2024Updated last year
- Detecting Flow of Sensitive Data in Mini-Programs with Static Taint Analysis☆82Mar 19, 2024Updated last year
- A neo4j procedure for tabby☆137May 17, 2025Updated 9 months ago
- Open-source code analysis platform for C/C++/Java/Binary/Javascript/Python/Kotlin based on code property graphs. Discord https://discord.…☆2,959Feb 26, 2026Updated last week
- Coverage-guided, in-process fuzzing for the JVM☆1,199Updated this week
- 带你畅游《软件分析》☆277Aug 1, 2022Updated 3 years ago
- ☆30Aug 30, 2022Updated 3 years ago
- Industrial IR-based static analysis framework for Java bytecode☆181Jun 13, 2025Updated 8 months ago
- Appshark is a static taint analysis platform to scan vulnerabilities in an Android app.☆1,726Dec 1, 2025Updated 3 months ago
- ☆206Oct 27, 2025Updated 4 months ago
- Corax for Java: A general static analysis framework for java code checking.☆254Dec 3, 2024Updated last year
- CodeQL extractor for java, which don't need to compile java source☆348Nov 25, 2022Updated 3 years ago
- Low-level RASP: Protecting Applications Implemented in High-level Programming Languages☆69Oct 19, 2025Updated 4 months ago
- cve-2022-34169 延伸出的Jdk Xalan的payload自动生成工具，可根据不同的Jdk生成出其所对应的xslt文件☆93Jan 17, 2023Updated 3 years ago
- Bypass JVM Class ByteCode Verifier , 对抗反编译器☆116Sep 21, 2023Updated 2 years ago
- A byte code analyzer for finding deserialization gadget chains in Java applications☆1,079Jun 15, 2021Updated 4 years ago
- Mirror of R8 with some minor improvements☆17Nov 25, 2023Updated 2 years ago
- Plume is a code representation benchmarking library with options to extract the AST from Java bytecode and store the result in various gr…☆77Oct 14, 2024Updated last year
- 一个利用ASM对字节码进行污点传播分析的静态代码审计应用（添加了大量代码注释，适合大家进行源码学习）。也加入了挖掘Fastjson反序列化gadget chains和SQLInject（JdbcTemplate、MyBatis、JPA、Hibernate、原生jdbc等）静…☆458Mar 24, 2022Updated 3 years ago
- ☆41Mar 10, 2021Updated 4 years ago
- ☆146Jan 16, 2023Updated 3 years ago