multiplier

Multiplier finds more bugs faster Multiplier provides precise and comprehensive code understanding capabilities. It does so by saving build artifacts into a database, and then making them persistently accessible using a C++ or Python API. Multiplier emphasizes the ability to uniquely identify all...

wpbullet

wpBullet A static code analysis for WordPress Plugins/Themes and PHP Installation Simply clone the repository, install requirements and run the script $ git clone https://github.com/webarx-security/wpbullet wpbullet $ cd wpbullet $ pip install -r requirements.txt $ python wpbullet.py Usage...

wpbullet

wpBullet WordPressプラグイン/テーマ（およびPHP）の静的コード解析 インストール リポジトリをクローンし、依存関係をインストールしてスクリプトを実行します $ git clone https://github.com/webarx-security/wpbullet wpbullet $ cd wpbullet $ pip install -r requirements.txt $ python wpbullet.py 使い方 利用可能なオプション: root@kitploit: --path 必須 システムパスまたはダウンロードURL 例:...

autoSource

AutoSource AutoSource is an automated source code review framework integrated with SonarQube which is capable of performing static code analysis/reviews. It can be used for effectively finding the vulnerabilities at very early stage of the SDLCSoftware Development Life Cycle. The user can scan th...

bincat

Introduction What is BinCAT? BinCAT is a static Binary Code Analysis Toolkit, designed to help reverse engineers, directly from IDA or using Python for automation. It features: value analysis registers and memory taint analysis type reconstruction and propagation backward and forward analysis...

StaCoAn

StaCoAn Not maintained anymore! Will be archived soon. StaCoAn is a crossplatform tool which aids developers, bugbounty hunters and ethical hackers performing static code analysis on mobile applications. This tool will look for interesting lines in the code which can contain: Hardcoded credential...

apkvuln

ApkVuln root@kitploit: \ / \ / \ / \ / \ /\ \ \ \ /|\ \ \ | | | \ | |/ /\ \ / / | | | | | | | / \ | / ' \ V /| || | || . | // \|| |\ / /|||| With ApkVuln you will obtain the .java files of an APK and they will be analyzed in search of possible vulnerabilities in the code, for it will make...

joern

Joern クエリデータベース "Joern-Scan" これはオープンソースコード解析プラットフォーム Joern の中央クエリデータベースです。目的は2つあります: Joernをすぐに使えるコードスキャンツールにするために必要なバッテリー（機能）を提供します。 そのクエリは、独自のクエリを作成しようとしている人にとって有用な例として機能します。 JDK11上でビルド されていますが、JRE = 1.8 で動作します。...

joern

Joern Query Database "Joern-Scan" This is the central query database for the open-source code analysis platform Joern. It has two purposes: It provides the batteries required to turn Joern into a ready-to-run code scanning tool. Its queries serve as examples useful for those looking to write thei...

ppfuzz

ppfuzz Prototype Pollution Fuzzer A fast tool to scan client-side prototype pollution vulnerability written in Rust. 🦀 Installation Binary Source Dependencies Demonstration Usage Basic Options Usage Supporting Materials Contributing Attribution Acknowledments License Installation...

Weggli_rules_SSTIC2023

Here is a curated list of weggli queries You can read them and use them one by one, or launch them by batch: Usage: root@kitploit: $ bash dangerousfunctions.qry code.c $ bash mallocoverflow.qry -e cc sourcedir/ There is threee categories: 1. dangerous functions: such as strcpy, system, etc.. 2...

NuReaper

NuReaper — NuGet Package Security Scanner ⚠️ Work in Progress — The project is actively developed. Core scanning engine is functional; database persistence, caching, and full test coverage are planned for upcoming iterations. NuReaper is a .NET 8 backend API that automatically analyzes the securit...

log4jvulnerability-CVE-2021-44228

log4jvulnerability-CVE-2021-44228 An attempt to understand the log4j vulnerability by looking through the code...

cve-2017-16995

CVE-2017-16995 分析报告 本文件夹包含对 CVE-2017-16995（Linux BPF 本地提权漏洞）的逐行源代码分析。 漏洞利用程序和补丁已在内核 4.4.0.116 上测试。 致谢 特别感谢 difengtang 对本分析报告的贡献。 漏洞利用脚本由 @iBearcat 创建，地址为 https://github.com/iBearcat/CVE-2017-16995/blob/master/exploit.c。...

slythestx

🐍 Slythestx 移动安全领域的瑞士军刀蠕虫 一个在 iOS 和 Android 上进行静态代码分析与动态漏洞挖掘的统一框架。 📖 目录 概述 主要功能 架构 分析器套件 快速开始 使用方法 发布与版本管理 路线图 贡献 免责声明 许可证 ⚡ 概述 Slythestx 是一款专注于移动端的安全工具包，将静态分析（SAST）和动态分析（DAST）整合到同一界面之下。它专为安全研究人员和移动端渗透测试人员打造，帮助他们快速识别目标的技术栈、审计源码中已知的危险模式，并与真实设备交互——无需同时操作十几个独立的工具。 该引擎以容器化 Web...

static-code-analysis-helper

Static-Code-Analysis-Helper 描述 它可以检测项目文件夹中许多 Web 编程语言和框架中可能被用于攻击方法的函数。 帮助你执行静态代码分析。 注意：这里描述的许多函数可能并不会导致漏洞。 截图 编程语言 Go Python Ruby PHP JavaScript Java Rust Perl Ruby on Rails Swift Golang Scala Kotlin Julia Dart ASP.NET Core 与结果相关的攻击类型 SQLi、XSS、XXE、CSRF、SSTI、SSRF、IDOR、CORS、XSHM、LFI、DoS、DDoS、RFI、弱加...

osed-scripts

osed-scripts bespoke tooling for offensive security's Windows Usermode Exploit Dev course OSED Table of Contents Standalone Scripts egghunter.py find-gadgets.py shellcoder.py install-mona.sh attach-process.ps1 WinDbg Scripts find-ppr.py find-bad-chars.py search.py Standalone Scripts Installation:...

vulnerable-code-snippets

Vulnerable Code Snippets Vulnerabilities | Programming languages | Run a vulnerable code snippet | Installation | Update YesWeHack present code snippets containing several different vulnerabilities to practice your code analysis in a safe dockerized envoriment. The vulnerable code snippets are...

whispers

Whispers "My little birds are everywhere, even in the North, they whisper to me the strangest stories." - Lord Varys Whispers is a static code analysis tool designed for parsing various common data formats in search of hardcoded credentials and dangerous functions. Whispers can run in the CLI or...

cabir_analysis

description: Bluetooth-Worm:SymbOS/Cabir Analysis Bluetooth-Worm:SymbOS/Cabir Analysis Before you start reading , i have to do this announcement : PLEASE TAKE EVERYTHING YOUR READ WITH A PINCH OF SALT AS I'M NO WHERE A SymbianOS developer or anything familiar with SymbianOS environment But why ev...