Repositories list

• SparseBoomerang

  Public
  Sparse Demand-Driven Pointer Analysis

  Java

  •

  Eclipse Public License 2.0

  •3•10•5•1•Updated Feb 19, 2025Feb 19, 2025

• FlowDroid

  Public
  FlowDroid Static Data Flow Tracker

  static-analysisflowdroiddata-flow-tracker

  Java

  •

  GNU Lesser General Public License v2.1

  •304•1.1k•231•1•Updated Feb 19, 2025Feb 19, 2025

• phasar

  Public
  A LLVM-based static analysis framework.

  ccppllvm+ 3static-analysisprogram-analysisdata-flow-analysis

  C++

  •

  Other

  •143•963•35•13•Updated Feb 18, 2025Feb 18, 2025

• secucheck-catalog

  Public
  3•0•0•0•Updated Jan 30, 2025Jan 30, 2025

• secucheck

  Public
  Soot-based taint analysis with internal Java fluent interface for security specifications in fluentTQL implemented with MagpieBridge to support multiple IDEs.

  Java

  •

  MIT License

  •7•17•6•0•Updated Jan 30, 2025Jan 30, 2025

• HeaderGen

  Public
  HeaderGen annotates Jupyter notebooks using static analysis. Improves PyCG's call graph analysis by supporting external libraries and flow-sensitivity.

  pythonstatic-analysisjupyter-notebook+ 1call-graph-analysis

  Jupyter Notebook

  •1•14•1•1•Updated Jan 30, 2025Jan 30, 2025

• SWARM-CG

  Public
  Swiss Army Knife of Call Graph Micro-Benchmark

  Python

  •1•2•1•0•Updated Jan 28, 2025Jan 28, 2025

• TypeEvalPy

  Public
  A Micro-benchmarking Framework for Python Type Inference Tools

  pythonbenchmarkstaticanalysis+ 1typeinference

  Python

  •2•32•1•1•Updated Jan 18, 2025Jan 18, 2025

• PathExpression

  Public
  An implementation of Tarjan's PathExpression algorithm

  Java

  •

  Eclipse Public License 2.0

  •2•6•0•3•Updated Dec 23, 2024Dec 23, 2024

• secucheck-core

  Public
  Taint Analysis on top of Soot.

  Java

  •

  MIT License

  •3•11•1•1•Updated Dec 6, 2024Dec 6, 2024

• boomerang

  Public
  Boomerang is a on-demand context and flow-sensitive pointer analysis for Java.

  Java

  •

  GNU Lesser General Public License v2.1

  •6•24•0•0•Updated Nov 28, 2024Nov 28, 2024

• achilles-benchmark-depscanners

  Public
  Achilles - Benchmark for assessing OSS-Vulnerability Scanners 59

  Java

  •

  GNU Lesser General Public License v3.0

  •4•7•0•11•Updated Nov 26, 2024Nov 26, 2024

• swan

  Public
  Security methods for WeAkNess detection

  Java

  •

  BSD 3-Clause "New" or "Revised" License

  •7•20•19•4•Updated Nov 22, 2024Nov 22, 2024

• upcy

  Public
  UpCy automatically finds compatible updates for Maven dependencies.

  Java

  •

  Apache License 2.0

  •1•8•1•0•Updated Oct 20, 2024Oct 20, 2024

• paper-idesolverxx

  Public
  Supplementary website for the paper "Scaling Interprocedural Static Data-Flow Analysis to Large C/C++ Applications"

  HTML

  •0•2•0•0•Updated Jul 30, 2024Jul 30, 2024

• neck

  Public
  C++

  •

  MIT License

  •3•3•0•0•Updated Jul 15, 2024Jul 15, 2024

• sootdiff

  Public
  SootDiff - Bytecode Comparison Across Different Java Compilers

  Java

  •

  MIT License

  •4•18•1•1•Updated May 24, 2024May 24, 2024

• FalseCrypt

  Public
  Java

  •1•0•0•0•Updated Mar 14, 2024Mar 14, 2024

• SparseIDE

  Public
  Sparse IDE/IFDS solver and client implementation

  GNU Lesser General Public License v2.1

  •1•2•0•0•Updated Jan 29, 2024Jan 29, 2024

• modguard

  Public
  Java

  •

  GNU Lesser General Public License v2.1

  •0•1•0•0•Updated Jun 16, 2023Jun 16, 2023

• SootFX

  Public
  A Static Code Feature Extraction Tool for Java and Android

  Java

  •

  GNU Lesser General Public License v2.1

  •4•20•0•0•Updated Jun 7, 2023Jun 7, 2023

• DroidBench

  Public
  A micro-benchmark suite to assess the stability of taint-analysis tools for Android

  Java

  •114•275•12•6•Updated Apr 17, 2023Apr 17, 2023

• COVA

  Public
  COVA - A static analysis tool to compute path conditions

  Python

  •

  GNU Lesser General Public License v2.1

  •8•32•1•1•Updated Nov 16, 2022Nov 16, 2022

• authcheck

  Public
  Analysis for access-control vulnerabilities in Java Spring Security applications.

  javasecurityauthentication+ 4authorizationspringframeworkaccess-controlsoot

  JavaScript

  •

  MIT License

  •3•14•0•2•Updated May 25, 2022May 25, 2022

• spring-petclinic-kotlin

  Public
  Vulnerable version of the Spring PetClinic application in Kotlin

  Kotlin

  •

  Apache License 2.0

  •1•2•0•0•Updated May 19, 2022May 19, 2022

• CogniCrypt-CI-Integration

  Public
  This repository contains code for a Jenkins adaptor for CogniCrypt which is based on warnings-ng-plugin https://github.com/jenkinsci/warnings-ng-plugin

  Java

  •

  MIT License

  •1•0•5•1•Updated Mar 21, 2022Mar 21, 2022

• opcua-scanner

  Public
  An opcua client scanning for servers in a network

  Java

  •3•8•0•0•Updated Dec 16, 2021Dec 16, 2021

• z3

  Public
  The Z3 Theorem Prover

  C++

  •

  Other

  •1.5k•0•0•0•Updated Oct 25, 2021Oct 25, 2021

• cards

  Public
  Component-based Assumptions and Restrictions for Dataflow Specifications

  javaeclipseeclipse-plugin+ 4eclipse-siriusxtendxtextmodel-based

  Java

  •

  MIT License

  •0•1•0•0•Updated Jul 29, 2021Jul 29, 2021

• jadx-taintdoc

  Public
  Jadx extended to ease documentation of taint flows

  Java

  •

  Other

  •1•3•0•0•Updated Jul 16, 2021Jul 16, 2021