trailofbits / not-going-anywhere
A set of vulnerable Golang programs
☆175Updated last year
Related projects ⓘ
Alternatives and complementary repositories for not-going-anywhere
- Semgrep queries developed by Trail of Bits.☆330Updated last week
- Static code analysis tool to find unsafe usages in Go packages and their dependencies☆41Updated 4 years ago
- Go rules for semgrep and go-ruleguard☆460Updated this week
- fzgo is a prototype of "make fuzzing a first class citizen" in the go command. Supports rich signatures & generating fuzz functions.☆112Updated 2 years ago
- A library for detecting certain improper uses of the "Defer, Panic, and Recover" pattern in Go programs☆97Updated 4 years ago
- A Server Side Request Forgery (SSRF) protection library. Made with 🖤 by Doyensec LLC.☆93Updated 6 months ago
- ☆194Updated 2 years ago
- Auto-gen Go fuzzing wrappers from normal code. Finds buggy call sequences, including data races & deadlocks. Supports rich signature type…☆105Updated 3 months ago
- A quick and dirty Golang security talk☆27Updated 4 years ago
- 🚰 Static taint analysis for Go programs.☆57Updated 3 months ago
- Fuzzing Go crypto☆73Updated 5 years ago
- ☆72Updated 5 years ago
- Go Fuzzit Example☆37Updated 4 years ago
- A collection of public security audits.☆205Updated 4 years ago
- Automatic fuzz targets generation for Golang packages☆53Updated 4 months ago
- Go Vet-style linter to find incorrect uses of reflect.SliceHeader and reflect.StringHeader, and unsafe casts between structs with archite…☆42Updated last year
- Go Taint CHeck Analyser☆44Updated 5 years ago
- Corpus for github.com/dvyukov/go-fuzz examples☆191Updated 3 years ago
- My Go security projects☆50Updated 4 years ago
- ☆19Updated 2 months ago
- Trail of Bits Testing Handbook☆58Updated last month
- Tough Fuzzer is an obstacle course for go-fuzz composed of a series of small code samples which encapsulate the most common obstacles to …☆18Updated 3 years ago
- Go API to interact with radare2☆31Updated last year
- ☆94Updated 3 months ago
- A kernelspace syscall interceptor and randomized faulter☆350Updated this week
- The Python Version of our Not Go-ing Anywhere Vulnerable Application☆10Updated 10 months ago
- Coverage-Guided Greybox Distributed Fuzzer☆128Updated 3 months ago
- Go library for sarif - Static Analysis Results Interchange Format☆66Updated 3 months ago
- Bypasses restrictions on reflect☆73Updated 3 years ago
- ☆22Updated 2 years ago