mole

Mole Mole is a Binary Ninja plugin designed to identify interesting execution paths in binaries. It performs backward slicing on variables using Binary Ninja 's Medium Level Intermediate Language MLIL in Static Single Assignment SSA form, forming the basis for a static taint analysis. In Mole , a...

lava

LAVA: Large Scale Automated Vulnerability Addition Evaluating and improving bug-finding tools is currently difficult due to a shortage of ground truth corpora i.e., software that has known bugs with triggering inputs. LAVA attempts to solve this problem by automatically injecting bugs into...

maat

About Maat is an open-source Dynamic Symbolic Execution and Binary Analysis framework. It provides various functionalities such as symbolic execution, taint analysis, constraint solving, binary loading, environment simulation, and leverages Ghidra's sleigh library for assembly lifting:...

appshark

Document Index 1.overview 2.startup 3.how to write rules 4.how to find compliance problems use appshark 5.a path traversal game 6.argument 7.engine config 8.result 9.faq AppShark Appshark is a static taint analysis platform to scan vulnerabilities in an Android app. Prerequisites Appshark require...

ioctlance

IOCTLance Description Presented at CODE BLUE 2023, this project titled Enhanced Vulnerability Hunting in WDM Drivers with Symbolic Execution and Taint Analysis introduces IOCTLance, a tool that enhances its capacity to detect various vulnerability types in Windows Driver Model WDM drivers. In a...

smalien

Smalien Smalien is an information flow analysis and information leakage detection tool for Android application analysts. Smalien performs static taint analysis of Android applications on a Linux machine as well as dynamic taint analysis, detection of information leakage due to implicit informatio...

Tai-e

Tai-e ✨News Release v0.5.4: Tai-e ships with a new frontend, providing faster and more reliable conversion from Java programs to Tai-e IR. Android app analysis is supported through a PacDroid-powered plugin integrated with pointer analysis. Spring DI and WEC analysis is supported through the Spri...

Argus

Argus This repo contains the code for our USENIX Security '23 paper "ARGUS: A Framework for Staged Static Taint Analysis of GitHub Workflows and Actions". Argus is a comprehensive security analysis tool specifically designed for GitHub Actions. Built with an aim to enhance the security of CI/CD...

DECAF

DECAF DECAF short for Dynamic Executable Code Analysis Framework is a binary analysis platform based on QEMU. DECAF++ DECAF++, the new version of DECAF, taint analysis is around 2X faster making it the fastest, to the best of our knowledge, whole-system dynamic taint analysis framework. This...

bincat

Introduction What is BinCAT? BinCAT is a static Binary Code Analysis Toolkit, designed to help reverse engineers, directly from IDA or using Python for automation. It features: value analysis registers and memory taint analysis type reconstruction and propagation backward and forward analysis...

Triton

Triton is a dynamic binary analysis library. It provides internal components that allow you to build your program analysis tools, automate reverse engineering, perform software verification or just emulate code. Dynamic symbolic execution Dynamic taint analysis AST representation of the x86 ,...

testing-handbook

Trail of Bits Testing Handbook The Trail of Bits Testing Handbook is a resource for developers and security professionals on configuring, optimizing, and automating many static and dynamic analysis tools we use at Trail of Bits. Preview Testing Handbook: https://appsec.guide 🌐 Why is this needed?...

Ponce

Ponce Ponce pronounced 'poN θe pon-they is an IDA Pro plugin that provides users the ability to perform taint analysis and symbolic execution over binaries in an easy and intuitive fashion. With Ponce you are one click away from getting all the power from cutting edge symbolic execution. Entirely...

BootStomp

BootStomp BootStomp is a boot-loader bug finder. It looks for two different class of bugs: memory corruption and state storage vulnerabilities. For more info please refer to the BootStomp paper at https://seclab.cs.ucsb.edu/academic/publishing/bootstomp-security-bootloaders-mobile-devices-2017 To...

caracal

Caracal Caracal est un outil d'analyse statique basé sur la représentation SIERRA pour les contrats intelligents Starknet. Fonctionnalités Détecteurs pour repérer du code Cairo vulnérable Imprimantes pour rapporter des informations Analyse de flux de données contaminé taint analysis Cadre d'analy...

caracal

Caracal Caracal is a static analyzer tool over the SIERRA representation for Starknet smart contracts. Features Detectors to detect vulnerable Cairo code Printers to report information Taint analysis Data flow analysis framework Easy to run in Scarb projects Installation Precompiled binaries...

ioctlance

IOCTLance Description Présenté à CODE BLUE 2023, ce projet intitulé Enhanced Vulnerability Hunting in WDM Drivers with Symbolic Execution and Taint Analysis introduit IOCTLance, un outil qui améliore sa capacité à détecter divers types de vulnérabilités dans les pilotes Windows Driver Model WDM...

opentaint

Le moteur open source d'analyse de taint pour l'ère de l'IA Analyse de taint formelle pour la sécurité applicative — trouve ce que les moteurs de correspondance de motifs AST manquent, permet aux agents LLM d'appliquer les vulnérabilités en tant que règles, passe à l'échelle là où aucun des deux ...

gosec

gosec - Vérificateur de sécurité Go Inspecte le code source à la recherche de problèmes de sécurité en analysant l'AST Go et la représentation de code SSA. Liens rapides Action GitHub Installation locale Démarrage rapide Modèles d'utilisation courants Sélection des règles Formats de sortie...

appshark

Index des documents 1.aperçu 2.démarrage 3.comment écrire des règles 4.comment trouver des problèmes de conformité avec appshark 5.un jeu de traversée de chemin 6.argument 7.configuration du moteur 8.résultat 9.faq AppShark Appshark est une plateforme d'analyse statique de flux de données pour...