neuroo

wassail

wassail (WebAssembly static analyzer and inspection library) is a toolkit to perform both lightweight and heavyweight static analysis of WebAssembly modules.

jazzer.js

Coverage-guided, in-process fuzzing for Node.js

clam

Static Analyzer for LLVM bitcode based on Abstract Interpretation

cclyzerpp

cclyzer++ is a precise and scalable pointer analysis for LLVM code.

tree-sitter-codeviews

Extract and combine multiple source code views using tree-sitter

MATE

MATE is a suite of tools for interactive program analysis with a focus on hunting for bugs in C and C++ code using Code Property Graphs.

MICSAS

MISIM: A Neural Code Semantics Similarity System Using the Context-Aware Semantics Structure

stack-graphs

Rust implementation of stack graphs

raksha

cwe_checker

cwe_checker finds vulnerable patterns in binary executables

h4cker

This repository is primarily maintained by Omar Santos (@santosomar) and includes thousands of resources related to ethical hacking, bug bounties, digital forensics and incident response (DFIR), artificial intelligence security, vulnerability research, exploit development, reverse engineering, and more.

dafny

Dafny is a verification-aware programming language

PoC

Proofs-of-concept

weggli

weggli is a fast and robust semantic search tool for C and C++ codebases. It is designed to help security researchers identify interesting functionality in large codebases.

dogecoin

very currency

django-zen-queries

Explicit control over database query execution in Django applications

scc

Sloc, Cloc and Code: scc is a very fast accurate code counter with complexity calculations and COCOMO estimates written in pure Go

Awesome-Hacking

A collection of various awesome lists for hackers, pentesters and security researchers

language-server-protocol

Defines a common protocol for language servers.

deno

A modern runtime for JavaScript and TypeScript.

code2seq

Code for the model presented in the paper: "code2seq: Generating Sequences from Structured Representations of Code"

css-exfiltration

infercode

[ICSE 2021] - InferCode: Self-Supervised Learning of Code Representations by Predicting Subtrees

wasmer

🚀 The leading Wasm Runtime supporting WASIX, WASI and Emscripten

PayloadsAllTheThings

A list of useful payloads and bypass for Web Application Security and Pentest/CTF

wtf

wtf is a distributed, code-coverage guided, customizable, cross-platform snapshot-based fuzzer designed for attacking user and / or kernel-mode targets running on Microsoft Windows and Linux user-mode (experimental!).

investigations

Indicators from Amnesty International's investigations

Crypto-API-Rules

This repository contains all CrySL rules currently used in the crypto assistant CogniCrypt.

CryptoAnalysis

CogniCrypt_SAST: CrySL-to-Static Analysis Compiler

bex

A rust crate for boolean expressions (expression trees, decision diagrams, etc.)