static-analysis

There are 215 repositories under static-analysis topic.

ImHex
WerWolv / ImHex
🔍 A Hex Editor for Reverse Engineers, Programmers and people who value their retinas when working at 3 AM.
analyzer binary-analysis c-plus-plus cpp cybersecurity dark-mode dcode-2025 dear-imgui disassembler forensics hacking hacktoberfest hex-editor ips mathematical-evaluator multi-platform pattern-language reverse-engineering static-analysis windows
Language:C++ 50992
astral-sh / ruff
An extremely fast Python linter and code formatter, written in Rust.
linter pep8 python python3 ruff rust rustpython static-analysis static-code-analysis style-guide styleguide
Language:Rust 43627
koalaman / shellcheck
ShellCheck, a static analysis tool for shell scripts
bash developer-tools haskell linter shell static-analysis
Language:Haskell 38400
Mobile-Security-Framework-MobSF
MobSF / Mobile-Security-Framework-MobSF
Mobile Security Framework (MobSF) is an automated, all-in-one mobile application (Android/iOS/Windows) pen-testing, malware analysis and security assessment framework capable of performing static and dynamic analysis.
android-security api-testing apk cwe devsecops dynamic-analysis ios-security malware-analysis mastg masvs mobile-security mobsf mstg owasp rest runtime-security static-analysis web-security windows-mobile-security
Language:JavaScript 19751
realm / SwiftLint
A tool to enforce Swift style and conventions.
code-quality hacktoberfest linter linting static-analysis swift
Language:Swift 19268
nikic / PHP-Parser
A PHP parser written in PHP
ast parser php static-analysis
Language:PHP 17359
facebook / infer
A static analyzer for Java, C, C++, and Objective-C
c code-quality cpp java objective-c static-analysis static-code-analysis
Language:OCaml 15427
Konloch / bytecode-viewer
A Java 8+ Jar & Android APK Reverse Engineering Suite (Decompiler, Editor, Debugger & More)
android apk baksmali bytecode bytecode-viewer cfr compiler decompiler dex2jar fernflower hacktoberfest java java-decompiler jsp krakatau procyon recompiler smali static-analysis war
Language:Java 15289
static-analysis
analysis-tools-dev / static-analysis
⚙️ A curated list of static analysis (SAST) tools and linters for all programming languages, config files, build tools, and more. The focus is on tools which improve code quality.
analysis awesome-list code-quality hacktoberfest linter sast static-analysis static-analyzers static-code-analysis
Language:Rust 14184
phpstan / phpstan
PHP Static Analysis Tool - discover bugs in your code without running it!
php php7 phpstan static-analysis static-analyzer static-code-analysis testing
Language:PHP 13700
PHP-CS-Fixer
PHP-CS-Fixer / PHP-CS-Fixer
A tool to automatically fix PHP Coding Standards issues
php static-analysis code-style code-standards
Language:PHP 13378
semgrep
semgrep / semgrep
Lightweight static analysis for many languages. Find bug variants with patterns that look like source code.
c go java javascript python r2c ruby sast semgrep static-analysis static-code-analysis typescript
Language:OCaml 13274
rshipp / awesome-malware-analysis
Defund the Police.
analysis-framework automated-analysis awesome awesome-list chinese chinese-translation domain-analysis drop-ice dynamic-analysis list malware-analysis malware-collection malware-research malware-samples network-traffic static-analysis threat-intelligence threat-sharing threatintel
13142
ttroy50 / cmake-examples
Useful CMake Examples
cmake cpp tutorial clang cppcheck static-analysis clang-format unit-testing google-test catch boost cpack ctest
Language:CMake 13004
OWASP / mastg
The OWASP Mobile Application Security Testing Guide (MASTG) is a comprehensive manual for mobile app security testing and reverse engineering. It describes technical processes for verifying the OWASP Mobile Security Weakness Enumeration (MASWE) weaknesses, which are in alignment with the OWASP MASVS.
mobile-app pentesting android-application ios-app runtime-analysis network-analysis static-analysis reverse-engineering dynamic-analysis mobile-security android ios hacking reverse-enginnering mstg testing-cryptography compliancy-checklist mast mastg
Language:Python 12541
hadolint / hadolint
Dockerfile linter, validate inline bash, written in Haskell
dockerfile linter shellcheck haskell dockerfile-linter docker static-analysis
Language:Haskell 11633
ast-grep
ast-grep / ast-grep
⚡A CLI tool for code structural search, lint and rewriting. Written in Rust
ast babel codemod codereview command-line command-line-tool grep linter refactoring rust search static-analysis structural-search tree-sitter typescript
Language:Rust 11056
grype
anchore / grype
A vulnerability scanner for container images and filesystems
containers security vulnerability docker golang go static-analysis container-image tool oci cyclonedx vulnerabilities hacktoberfest openvex vex
Language:Go 10975
quay / clair
Vulnerability Static Analysis for Containers
containers static-analysis go kubernetes docker oci oci-image vulnerabilities clair
Language:Go 10843
squizlabs / PHP_CodeSniffer
PHP_CodeSniffer tokenizes PHP files and detects violations of a defined set of coding standards.
automation cli coding-standards php qa static-analysis
Language:PHP 10769
SonarSource / sonarqube
Continuous Inspection
code-quality sonarqube static-analysis
Language:Java 10022
Detect-It-Easy
horsicq / Detect-It-Easy
Program for determining types of files for Windows, Linux and MacOS.
debugger detect unpacker disassembler reverse-engineering elf packer detector binary-analysis program-analysis static-analysis entropy malware-analysis malware-research macho mach-o hacktoberfest pentest scanner hacktoberfest2023
Language:JavaScript 9589
reviewdog
reviewdog / reviewdog
🐶 Automated code review tool integrated with any code analysis tools regardless of programming language
bitbucket ci cli code-quality code-review codereview github gitlab go lint linter static-analysis static-code-analysis
Language:Go 8815
checkstyle
checkstyle / checkstyle
Checkstyle is a development tool to help programmers write Java code that adheres to a coding standard. By default it supports the Google Java Style Guide and Sun Code Conventions, but is highly configurable. It can be invoked with an ANT task and a command line program.
code-quality command-line-tool hacktoberfest java static-analysis static-code-analysis
Language:Java 8738
Scanners-Box
We5ter / Scanners-Box
A powerful and open-source toolkit for hackers and security automation - 安全行业从业者自研开源扫描器合辑
apk-analysis binary-analysis code-analyzer devsecops exploitation-framework hacker-tools information-security malware-analysis penetration-testing pentesting-tools privacy-compliance redteam-tools security-audit security-automation smart-contracts static-analysis vulnerability-scanners wifi-hacking wifi-security
8681
securego / gosec
Go security checker
golang security security-automation security-tools static-analysis static-code-analysis
Language:Go 8519
bridgecrewio / checkov
Prevent cloud misconfigurations and find vulnerabilities during build-time in infrastructure as code, container images and open source packages with Checkov by Bridgecrew.
terraform static-analysis aws gcp azure aws-security cloudformation scans compliance kubernetes infrastructure-as-code devops hacktoberfest
Language:Python 8205
syft
anchore / syft
CLI tool and library for generating a Software Bill of Materials from container images and filesystems
containers cyclonedx docker go golang hacktoberfest oci sbom spdx static-analysis tool
Language:Go 7911
brakeman
presidentbeef / brakeman
A static analysis security vulnerability scanner for Ruby on Rails applications
brakeman rails ruby security security-audit security-tools security-vulnerability static-analysis vulnerabilities
Language:Ruby 7161
facebook / pyre-check
Performant type-checking for python.
python typechecker type-check static-analysis ocaml code-quality abstract-interpretation security program-analysis taint-analysis control-flow-analysis
Language:OCaml 7107
google / error-prone
Catch common Java mistakes as compile-time errors
java static-analysis
Language:Java 7080
tfsec
aquasecurity / tfsec
Tfsec is now part of Trivy
aws azure ci compliance devops devsecops digitalocean go google-cloud-platform hacktoberfest infrastructure-as-code linter misconfiguration scanner security static-analysis terraform terraform-security vulnerability-scanners
Language:Go 6914
Recaf
Col-E / Recaf
The modern Java bytecode editor
java bytecode bytecode-engineering reverse-engineering jvm-bytecode decompile decompiler agent asm javafx-application javafx static-analysis bytecode-manipulation java-decompiler
Language:Java 6777
detekt
detekt / detekt
Static code analysis for Kotlin
analysis code-quality codesmells gradle-plugin hacktoberfest kotlin lint linter static static-analysis
Language:Kotlin 6739
go-tools
dominikh / go-tools
Staticcheck - The advanced Go linter
linters static-analysis linter staticcheck sponsor
Language:Go 6625
ondrajz / go-callvis
Visualize call graph of a Go program using Graphviz
awesome-go callgraph golang golang-tools graphviz static-analysis visualization
Language:Go 6409