Alternatives and similar repositories for TaintAnalysis

Users that are interested in TaintAnalysis are comparing it to the libraries listed below

• SpringJasmine / Jasmine
  ☆30Updated 3 years ago
• Anemone95 / taint-benchmark
  A benchmark to evaluate taint analysis
  ☆28Updated 3 years ago
• HaHarden / CPGPractise
  Some test samples for CPG execution logic.
  ☆20Updated last year
• OSUSecLab / TaintMini
  Detecting Flow of Sensitive Data in Mini-Programs with Static Taint Analysis
  ☆82Updated last year
• fullwaywang / QlRules
  Auto-generated CodeQL rules for matching CVE vulnerabilities and variants.
  ☆184Updated last year
• SummerSec / Static-Analysis
  静态分析笔记 Static-Analysis-Notes 程序分析笔记 资源分享
  ☆186Updated 3 years ago
• BytecodeDL / ByteCodeDL
  A declarative static analysis tool for jvm bytecode based Datalog like CodeQL
  ☆342Updated 2 years ago
• cokeBeer / goot
  a dataflow analysis framework implemented in Go, like soot
  ☆39Updated 3 years ago
• fynch3r / WALAStudy
  WALA 学习笔记
  ☆14Updated 2 years ago
• PL-Ninja / MySootScript
  oh my soot !
  ☆93Updated 3 years ago
• silverbullettt / zipper
  Precision-guided context sensitivity for pointer analysis
  ☆61Updated 2 years ago
• pascal-lab / java-benchmarks
  ☆12Updated 2 years ago
• seclab-fudan / RecurScan
  ☆27Updated last year
• ODDFuzz / ODDFuzz
  S&P2023 Paper
  ☆39Updated 3 years ago
• twosmi1e / Static-Analysis-and-Automated-Code-Audit
  静态分析及代码审计自动化相关资料收集
  ☆298Updated 3 years ago
• CodeShield-Security / SPDS
  Efficient and Precise Pointer-Tracking Data-Flow Framework
  ☆68Updated last year
• QilinPTA / Qilin
  Qilin: A New Framework for Supporting Fine-Grained Context-Sensitivity in Java Pointer Analysis
  ☆146Updated last week
• JordyZomer / codeql-mcp
  This project runs a Model Context Protocol (MCP) server that wraps the CodeQL query server. It enables tools like [Cursor](https://cursor…
  ☆128Updated 10 months ago
• Feysh-Group / corax-community
  Corax for Java: A general static analysis framework for java code checking.
  ☆254Updated last year
• yetingli / ReDoSHunter
  ReDoSHunter: A Combined Static and Dynamic Approach for Regular Expression DoS Detection
  ☆81Updated 3 years ago
• secure-software-engineering / secucheck
  Soot-based taint analysis with internal Java fluent interface for security specifications in fluentTQL implemented with MagpieBridge to s…
  ☆18Updated last year
• JacyCui / static-analysis
  静态分析基础教程
  ☆177Updated last month
• CISPA-SysSec / atropos-legacy
  Atropos: Effective Fuzzing of Web Applications for Server-Side Vulnerabilities
  ☆75Updated last year
• ASTTeam / Semgrep
  《深入理解Semgrep》Finding vulnerabilities with Semgrep.
  ☆58Updated 2 years ago
• cuhk-seclab / TChecker
  ☆41Updated 3 years ago
• software-engineering-and-security / Gleipner
  A benchmark for Java gadget chain detecting algorithms.
  ☆15Updated 7 months ago
• xywang18 / Rengar
  Effective ReDoS Detection by Principled Vulnerability Modeling and Exploit Generation
  ☆14Updated 6 months ago
• Marcono1234 / codeql-java-queries
  Personal CodeQL queries
  ☆63Updated last month
• NeSE-Team / XNUCA2020Qualifier
  writeups for XNUCA2020Qualifier
  ☆70Updated 5 years ago
• mo-xiaoxi / HDiff
  ☆27Updated 3 years ago