yetingli / ReDoSHunter
ReDoSHunter: A Combined Static and Dynamic Approach for Regular Expression DoS Detection
☆77Updated 2 years ago
Alternatives and similar repositories for ReDoSHunter:
Users that are interested in ReDoSHunter are comparing it to the libraries listed below
- Taint analysis implementation based on Heros and Soot☆44Updated 11 months ago
- A benchmark to evaluate taint analysis☆29Updated 2 years ago
- Personal CodeQL queries☆61Updated last week
- ☆24Updated 2 years ago
- S&P2023 Paper☆39Updated 2 years ago
- Detecting Flow of Sensitive Data in Mini-Programs with Static Taint Analysis☆74Updated last year
- ☆25Updated 2 years ago
- Auto-generated CodeQL rules for matching CVE vulnerabilities and variants.☆169Updated 7 months ago
- ☆11Updated last year
- Precision-guided context sensitivity for pointer analysis☆60Updated last year
- oh my soot !☆91Updated 2 years ago
- Parser utility to generate ASTs from PHP source code suitable to be processed by Joern.☆35Updated 5 years ago
- a dataflow analysis framework implemented in Go, like soot☆35Updated 2 years ago
- Low-level RASP: Protecting Applications Implemented in High-level Programming Languages☆59Updated last year
- ObjLupAnsys is a tool to detect prototype pollution vulnerabilities in Node.js packages. This project is written in Python and JavaScript…☆23Updated 3 years ago
- WALA 学习笔记☆14Updated last year
- 《深入理解Semgrep》Finding vulnerabilities with Semgrep.☆48Updated last year
- CodeQL中文资料和常见使用解释。Chinese version of Codeql documents☆9Updated 4 years ago
- Binary rewriting approach with fork server support to fuzz Java applications with afl-fuzz.☆91Updated 6 years ago
- [NDSS 2024] ReqsMiner is an innovative fuzzing framework developed to discover previously unexamined inconsistencies in CDN forwarding re…☆20Updated 10 months ago
- My CodeQL queries collection☆96Updated last year
- GreHack 2021 CodeQL for Java workshop☆75Updated 3 years ago
- Effective ReDoS Detection by Principled Vulnerability Modeling and Exploit Generation☆13Updated 4 months ago
- Fuzzing dictionaries for afl-fuzz/LibFuzzer☆90Updated 3 years ago
- Python bindings for CodeQL CLI☆54Updated 4 years ago
- Soot-based taint analysis with internal Java fluent interface for security specifications in fluentTQL implemented with MagpieBridge to s…☆17Updated 2 months ago
- This repository has been merged into https://github.com/HXSecurity/DongTai. DongTai-engine used to analyze the method data collected by …☆20Updated 3 years ago
- A declarative static analysis tool for jvm bytecode based Datalog like CodeQL☆335Updated last year
- Testability Tarpits: the Impact of Code Patterns on the Security Testing of Web Applications (NDSS 2022)☆25Updated last year
- 静态分析笔记 Static-Analysis-Notes 程序分析笔记 资源分享☆181Updated 2 years ago