soot-oss / TaintAnalysis

Related projects ⓘ

Alternatives and complementary repositories for TaintAnalysis

• Anemone95 / taint-benchmark
  A benchmark to evaluate taint analysis
  ☆30Updated 2 years ago
• SpringJasmine / Jasmine
  ☆20Updated 2 years ago
• OSUSecLab / TaintMini
  Detecting Flow of Sensitive Data in Mini-Programs with Static Taint Analysis
  ☆73Updated 8 months ago
• cokeBeer / goot
  a dataflow analysis framework implemented in Go, like soot
  ☆29Updated 2 years ago
• fullwaywang / QlRules
  Auto-generated CodeQL rules for matching CVE vulnerabilities and variants.
  ☆152Updated 2 months ago
• ODDFuzz / ODDFuzz
  S&P2023 Paper
  ☆39Updated 2 years ago
• PL-Ninja / MySootScript
  oh my soot !
  ☆87Updated 2 years ago
• seclab-fudan / RecurScan
  ☆22Updated 9 months ago
• SummerSec / Static-Analysis
  静态分析笔记 Static-Analysis-Notes 程序分析笔记 资源分享
  ☆171Updated last year
• Marcono1234 / codeql-java-queries
  Personal CodeQL queries
  ☆58Updated last week
• BytecodeDL / ByteCodeDL
  A declarative static analysis tool for jvm bytecode based Datalog like CodeQL
  ☆327Updated 10 months ago
• HaHarden / CPGPractise
  Some test samples for CPG execution logic.
  ☆18Updated 7 months ago
• cuhk-seclab / TChecker
  ☆36Updated last year
• fynch3r / WALAStudy
  WALA 学习笔记
  ☆13Updated last year
• silverbullettt / zipper
  Precision-guided context sensitivity for pointer analysis
  ☆57Updated last year
• CISPA-SysSec / atropos-legacy
  Atropos: Effective Fuzzing of Web Applications for Server-Side Vulnerabilities
  ☆54Updated 3 months ago
• elManto / StaticAnalysisQueries
  A set of Code-ql/Joern queries to find vulnerabilities
  ☆56Updated 3 years ago
• pascal-lab / java-benchmarks
  ☆10Updated last year
• CodeShield-Security / SPDS
  Efficient and Precise Pointer-Tracking Data-Flow Framework
  ☆66Updated 8 months ago
• twosmi1e / Static-Analysis-and-Automated-Code-Audit
  静态分析及代码审计自动化相关资料收集
  ☆284Updated 2 years ago
• NeSE-Team / XNUCA2020Qualifier
  writeups for XNUCA2020Qualifier
  ☆70Updated 3 years ago
• h2-stack / LL-RASP
  Low-level RASP: Protecting Applications Implemented in High-level Programming Languages
  ☆56Updated last year
• enferas / TestabilityTarpits
  Testability Tarpits: the Impact of Code Patterns on the Security Testing of Web Applications (NDSS 2022)
  ☆23Updated 9 months ago
• ASTTeam / Semgrep
  《深入理解Semgrep》Finding vulnerabilities with Semgrep.
  ☆40Updated last year
• Leo0426 / WALA-improve
  Study WALA and static code analysis . This project introduces the required knowledge and study roadmap.
  ☆20Updated 3 years ago
• GCMiner / GCMiner
  Artifact for ICSE 2023
  ☆46Updated 2 years ago
• Feysh-Group / corax-community
  Corax for Java: A general static analysis framework for java code checking.
  ☆233Updated last month
• duowen1 / Container-escape-exps
  Container (Docker) escape exploits
  ☆50Updated 2 years ago
• hac425xxx / joern-ida
  IDA Hexrays To Joern
  ☆30Updated 2 weeks ago
• QilinPTA / Qilin
  Qilin: A New Framework for Supporting Fine-Grained Context-Sensitivity in Java Pointer Analysis
  ☆123Updated 3 months ago