PcapPlusPlus

PcapPlusPlus is a multiplatform C++ library for capturing, parsing and crafting of network packets. It is designed to be efficient, powerful and easy to use. PcapPlusPlus enables decoding and forging capabilities for a large variety of network protocols. It also provides easy to use C++ wrappers...

QLinspector

QLinspector Finding Java/C gadget chains with CodeQL. More information in our article Installation Clone the repo $ git clone https://github.com/synacktiv/QLinspector.git Search for gadgets: $ codeql database analyze log4j --format=sarif-latest --output=log4j.sarif --search-path=./QLinspector/...

vulnhawk

AI-powered code security scanner that finds vulnerabilities Semgrep and CodeQL miss. Quick Start • GitHub Action • Comparison • Languages • FAQ The Problem Traditional SAST tools rely on pattern matching and AST rules. They excel at catching known vulnerability patterns, but they fundamentally...

TOP

TOP all Top Top TopCodeql TOP All bugbounty pentesting CVE-2022- POC Exp Things Donation Wechat Pay| AliPay| Paypal| BTC Pay| BCH Pay ---|---|---|---|--- | | paypal [email protected]| |...

Vulnhalla

Vulnhalla Automated CodeQL Analysis with LLM Classification For a detailed overview of the research and motivation behind Vulnhalla, see the official CyberArk Threat Research blog post: Vulnhalla: Picking the True Vulnerabilities from the CodeQL Haystack Vulnhalla automates the complete security...

securitylab

GitHub Security Lab This is the main git repository of GitHub Security Lab. We use it for these main purposes: We share with our community some best practices about security research and vulnerability disclosures in our docs We use issues on this repo to track CodeQL bounty requests. We use it fo...

C0deVari4nt

C0deVari4nt Descripción C0deVari4nt es una herramienta de análisis de variantes y visualización que inspecciona bases de código en busca de vulnerabilidades similares. Aprovecha CodeQL, un motor de análisis semántico de código, para consultar código basado en plantillas de consulta CodeQL...

autoharness

AutoHarness Created by Akshat Parikh What is this tool? AutoHarness is a tool that automatically generates fuzzing harnesses for you. This idea stems from a concurrent problem in fuzzing codebases today: large codebases have thousands of functions and pieces of code that can be embedded fairly de...

malwoverview

Malwoverview !Alt...

scorecard

OpenSSF Scorecard 개요 Scorecard란 무엇인가? 주요 Scorecard 사용자 프로젝트의 점수 보기 Scorecard의 공개 데이터 Scorecard 사용하기 Scorecard GitHub Action Scorecard REST API Scorecard 배지 Scorecard 명령줄 인터페이스 사전 요구 사항 설치 인증 기본 사용법 점검 사항 Checks 기본 Scorecard 점검 사항 상세 점검 문서 점수 기준, 위험 및 해결 방법 Scorecard 점검 초보자 가이드 기타 중요한 권장 사항 이중 인증...

tcpreplay

Tcpreplay Tcpreplay is a suite of GPLv3 licensed utilities for UNIX and Windows under Cygwin for editing and replaying network traffic previously captured by tools like tcpdump and Wireshark. It classifies traffic as client or server, rewrites Layer 2/3/4 headers, and replays it back onto the...

codeql

CodeQL このオープンソースリポジトリには、GitHub Advanced Security と、GitHub が世界中の顧客に提供しているその他のアプリケーションセキュリティ製品を支える、標準の CodeQL ライブラリとクエリが含まれています。 CodeQL の学習とクエリの実行方法 CodeQL 言語 に関する広範なドキュメント、Visual Studio Code 用 CodeQL 拡張機能 を使用した CodeQL の作成方法、および CodeQL CLI の使用方法についてのドキュメントが用意されています。 貢献...

codeql-cve-2022-35737

This repository does not have a README...

codeql-scanner

drupalgeddon2 The exploit python script for CVE-2018-7600...

CVE-2023-24329-codeql-test

This repository does not have a README...

codeql-buffer-overflow-variant

codeql-buffer-overflow-variant A deliberately vulnerable, 170-line C program used as a CodeQL static-analysis target. It reproduces the bug class of CVE-2020-8597 — the pppd EAP rhostname stack buffer overflow CWE-120 — in a program that shares none of pppd's function names, call depth, or dispat...

slides

Slides Conference| Year| Name| Description ---|---|---|--- Zer0Con| 2023| CodeQL + DTrace = 💧🐞 in XNU| How to find multiple memory disclosures in XNU using CodeQL...

ipmap

Inglés readme • 简体中文 readme • 正體中文 readme • Lengua española readme • Deutsche readme • Svenska readme • 한국어 readme • Français readme • हिन्दी readme • Português readme • Italian readme • Русский readme • Indonesian readme • فارسی readme • عربي readme • Türkçe readme • Polskie readme IPMap...

qlcoder

QLCoder Agentic Framework for Synthesizing CodeQL Queries Table of Contents Overview Installation Docker Recommended Native Linux Usage Quick Start Development Tooling Examples Paper Environment Contributions Team Citation Affiliated Projects Overview QLCoder is a framework for using LLMs to...

codeql-sample-polkit

-- coding: utf-8 - - The polkit pkexec bug Overview This repository examines the polkit pkexec bug using CodeQL. It has instructions for building the databases the resultant databases a sequence of queries illustrating an approach to find this bug These are done: the polkit source / database buil...