caracal

Caracal Caracal est un outil d'analyse statique basé sur la représentation SIERRA pour les contrats intelligents Starknet. Fonctionnalités Détecteurs pour repérer du code Cairo vulnérable Imprimantes pour rapporter des informations Analyse de flux de données contaminé taint analysis Cadre d'analy...

pyt

.. image:: https://travis-ci.org/python-security/pyt.svg?branch=master :target: https://travis-ci.org/python-security/pyt .. image:: https://readthedocs.org/projects/pyt/badge/?version=latest :target: http://pyt.readthedocs.io/en/latest/?badge=latest .. image::...

BootStomp

BootStomp BootStomp is a boot-loader bug finder. It looks for two different class of bugs: memory corruption and state storage vulnerabilities. For more info please refer to the BootStomp paper at https://seclab.cs.ucsb.edu/academic/publishing/bootstomp-security-bootloaders-mobile-devices-2017 To...

capstone

Capstone Engine !TIP Welcome to join our community group! Capstone is a disassembly framework with the target of becoming the ultimate disasm engine for binary analysis and reversing in the security community. Created by Nguyen Anh Quynh, then developed and maintained by a small community, Capsto...

bincat

Introduction What is BinCAT? BinCAT is a static Binary Code Analysis Toolkit, designed to help reverse engineers, directly from IDA or using Python for automation. It features: value analysis registers and memory taint analysis type reconstruction and propagation backward and forward analysis...

bincat

Introduction Qu'est-ce que BinCAT ? BinCAT est une boîte à outils d'analyse statique de code binaire, conçue pour aider les ingénieurs en rétro-ingénierie, directement depuis IDA ou via Python pour l'automatisation. Il propose : analyse de valeur registres et mémoire analyse de contamination tain...

gosec

gosec - Vérificateur de sécurité Go Inspecte le code source à la recherche de problèmes de sécurité en analysant l'AST Go et la représentation de code SSA. Liens rapides Action GitHub Installation locale Démarrage rapide Modèles d'utilisation courants Sélection des règles Formats de sortie...

DECAF

DECAF DECAF short for Dynamic Executable Code Analysis Framework is a binary analysis platform based on QEMU. DECAF++ DECAF++, the new version of DECAF, taint analysis is around 2X faster making it the fastest, to the best of our knowledge, whole-system dynamic taint analysis framework. This...

smalien

Smalien Smalien is an information flow analysis and information leakage detection tool for Android application analysts. Smalien performs static taint analysis of Android applications on a Linux machine as well as dynamic taint analysis, detection of information leakage due to implicit informatio...

Argus

Argus इस रिपॉजिटरी में हमारे USENIX Security '23 पेपर "ARGUS: A Framework for Staged Static Taint Analysis of GitHub Workflows and Actions" का कोड शामिल है। Argus एक व्यापक सुरक्षा विश्लेषण उपकरण है जो विशेष रूप से GitHub Actions के लिए डिज़ाइन किया गया है। CI/CD वर्कफ़्लो की सुरक्षा बढ़ाने के...

caracal

Caracal Caracal is a static analyzer tool over the SIERRA representation for Starknet smart contracts. Features Detectors to detect vulnerable Cairo code Printers to report information Taint analysis Data flow analysis framework Easy to run in Scarb projects Installation Precompiled binaries...

Ponce

Ponce Ponce pronunciato 'poN θe pon-they è un plugin per IDA Pro che fornisce agli utenti la possibilità di eseguire l'analisi di taint e l'esecuzione simbolica su binari in modo facile e intuitivo. Con Ponce sei a un clic di distanza da tutta la potenza dell'esecuzione simbolica all'avanguardia...

jsonorg-tp1

json.org CVE-2022-45688 true positive The project illustrates CVE-2022-45688 in json.org -- there is a simple application XML2JSONConverter to read XML from input, convert it to JSON and pretty-print it to the console. Using malicious input, the application crashes with a stackoverflow. The test...

mole

Mole Mole ist ein Binary Ninja -Plugin, das entwickelt wurde, um interessante Ausführungspfade in Binärdateien zu identifizieren. Es führt Rückwärtsslicing an Variablen mithilfe von Binary Ninja s Medium Level Intermediate Language MLIL in Static Single Assignment SSA-Form durch, was die Grundlag...

matt.net

Matt.Net Rilasciato come open source da NCC Group Plc - http://www.nccgroup.com/ Sviluppato da Matt Lewis, matt dot lewis at nccgroup dot com http://www.github.com/nccgroup/matt.net Rilasciato sotto licenza AGPL. Consultare LICENSE per maggiori informazioni. Panoramica Matt.Net è una semplice...

DakshSCRA v0.38-beta

Daksh SCRA Source Code Review Assist root@kitploit: Author: - Debasis Mohanty [email protected] - Twitter / X: @coffeensecurity - www.coffeeandsecurity.com About Daksh SCRA Daksh SCRA Source Code Review Assist tool is built to enhance the efficiency of the source code review process, providi...

testing-handbook

Guide de test de Trail of Bits Le Guide de test de Trail of Bits est une ressource destinée aux développeurs et aux professionnels de la sécurité pour configurer, optimiser et automatiser de nombreux outils d'analyse statique et dynamique que nous utilisons chez Trail of Bits. Aperçu du Guide de...

CVE-2021-44228

Tai-e für CVE-2021-44228 Dies ist ein Beispielprojekt, das Tai-e nutzt, um die Log4Shell-Schwachstelle auch bekannt als CVE-2021-44228 und ihre Trigger-Pfade zu identifizieren. Zugehöriges Video auf Chinesisch: https://www.bilibili.com/video/BV1dV411F781 Erste Schritte Klonen Sie dieses Repositor...

opentaint

Il motore open source di taint analysis per l'era dell'IA Taint analysis formale per la sicurezza delle applicazioni — trova ciò che i motori di AST-pattern matching non rilevano, consente agli agenti LLM di applicare vulnerabilità come regole, scala dove nessuno dei due può farlo da solo. Englis...

maat

About Maat is an open-source Dynamic Symbolic Execution and Binary Analysis framework. It provides various functionalities such as symbolic execution, taint analysis, constraint solving, binary loading, environment simulation, and leverages Ghidra's sleigh library for assembly lifting:...