yetingli / ReDoSHunter
ReDoSHunter: A Combined Static and Dynamic Approach for Regular Expression DoS Detection
☆78Updated 2 years ago
Alternatives and similar repositories for ReDoSHunter:
Users that are interested in ReDoSHunter are comparing it to the libraries listed below
- A benchmark to evaluate taint analysis☆30Updated 2 years ago
- Taint analysis implementation based on Heros and Soot☆44Updated 9 months ago
- ☆22Updated 2 years ago
- Parser utility to generate ASTs from PHP source code suitable to be processed by Joern.☆35Updated 4 years ago
- 《深入理解Semgrep》Finding vulnerabilities with Semgrep.☆44Updated last year
- Personal CodeQL queries☆59Updated this week
- a dataflow analysis framework implemented in Go, like soot☆33Updated 2 years ago
- Auto-generated CodeQL rules for matching CVE vulnerabilities and variants.☆161Updated 4 months ago
- Detecting Flow of Sensitive Data in Mini-Programs with Static Taint Analysis☆74Updated 10 months ago
- ObjLupAnsys is a tool to detect prototype pollution vulnerabilities in Node.js packages. This project is written in Python and JavaScript…☆22Updated 3 years ago
- Precision-guided context sensitivity for pointer analysis☆59Updated last year
- oh my soot !☆88Updated 2 years ago
- Soot-based taint analysis with internal Java fluent interface for security specifications in fluentTQL implemented with MagpieBridge to s…☆17Updated 2 weeks ago
- ☆24Updated 11 months ago
- S&P2023 Paper☆39Updated 2 years ago
- ☆10Updated last year
- Testability Tarpits: the Impact of Code Patterns on the Security Testing of Web Applications (NDSS 2022)☆25Updated last year
- ☆24Updated 2 years ago
- WALA 学习笔记☆14Updated last year
- Low-level RASP: Protecting Applications Implemented in High-level Programming Languages☆57Updated last year
- Some test samples for CPG execution logic.☆20Updated 10 months ago
- Tai-e学习记录☆13Updated 10 months ago
- A Vulnerable Web App written by JavaScript (Vue+Egg)☆12Updated 3 months ago
- ☆36Updated 2 years ago
- CodeQL中文资料和常见使用解释。Chinese version of Codeql documents☆9Updated 4 years ago
- A declarative static analysis tool for jvm bytecode based Datalog like CodeQL☆331Updated last year
- Study WALA and static code analysis . This project introduces the required knowledge and study roadmap.☆21Updated 4 years ago
- Effective ReDoS Detection by Principled Vulnerability Modeling and Exploit Generation☆12Updated 2 months ago
- 静态分析笔记 Static-Analysis-Notes 程序分析笔记 资源分享☆177Updated 2 years ago
- 基于JVM-Sandbox实现RASP安全监控防护☆52Updated last year