tiandiyixian's repositories
bblfshd
A self-hosted server for source code parsing
cdt-gdb-vscode
CDT GDB Visual Studio Code Extension
codepulse
Code Pulse is a real-time code coverage tool for penetration testing activities
cve-bin-tool
This tool scans for a number of common, vulnerable components (openssl, libpng, libxml2, expat and a few others) to let you know if your system includes common libraries with known vulnerabilities.
cve-search
cve-search - a tool to perform local searches for known vulnerabilities
dependency-finder
A suite of tools for analyzing compiled Java code.
depends
Depends is a fast, comprehensive code dependency analysis tool
DetExploit
OSS Vulnerability Scanner for Windows Platform
go-flags
go command line option parser
Go-SCP
Go programming language secure coding practices guide
go-tools
Staticcheck – a collection of static analysis tools for working with Go code
gumtree-spoon-ast-diff
Computes the AST difference (aka edit script) between two Spoon Java source code abstract syntax trees
IncA
Incremental Program Analysis Framework
jvm-sandbox-repeater
A Java server-side recording and playback solution based on JVM-Sandbox
maven-dependency-tree-parser
This library contains a set of parsers that parse the output of the maven command "mvn dependency:tree", and a set of utilities to create HTML representations of the parsed tree.
piof-iast
PHP Open Iast Agent
pyre-security-configs
A repository to contain source/sink definitions for Pyre to use
python_sec
python安全和代码审计相关资料收集 resource collection of python security and code review
reviewdog
:dog: Automated code review tool integrated with any code analysis tools regardless of programming language
SCALe
SCALe (Source Code Analysis Lab) is a static analysis aggregator/correlator which enables a source code analyst to combine static analysis results from multiple tools into one interface, and also provides mappings for diagnostics from the tools to the SEI CERT Secure Coding standards.
Security_Codes
安全开发代码归档:包括但不限于渗透测试,资产收集,大规模漏洞扫描器,网络安全相关资料文档与工具整理
sentinel
Automated security testing framework for web applications
sonar-java-custom-rules
sonar自定义插件开发(基于阿里开发手册)
spoon-examples
Examples on how to use the Spoon Java source code transformation library
swan
A Swift Program Analysis Framework
taintflow
TaintFlow, a framework for JavaScript dynamic information flow analysis.
tutorials
The "REST With Spring" Course:
vera
A programmable tool for verification, analysis and transformation of C++ source code
vulnerability-assessment-tool
Analyses your Java and Python applications for open-source dependencies with known vulnerabilities, using both static analysis and testing to determine code context and usage for greater accuracy. https://sap.github.io/vulnerability-assessment-tool/