代码审计 / SAST

59 条

静态分析、依赖漏洞与供应链安全。

#仓库Stars
51jar-analyzer/jar-analyzer
Jar Analyzer - 一个 JAR 包 GUI 分析工具,内置 AI 助手协助分析,支持 JAR DIFF 分析,方法调用关系搜索,方法调用链 DFS 算法分析,模拟 JVM 的污点分析验证 DFS 结果,字符串搜索,Java Web 组件入口分析,CFG 程序分析,JVM 栈帧分析,自定义表达式搜索等
2.2k
52glebm/i18n-tasks
Manage translation and localization with static analysis, for Ruby i18n
2.2k
53pascal-lab/Tai-e
An easy-to-learn/use static analysis framework for Java and Android
1.8k
54kulikov0/whitelist-bypass
Tunneling data over webrtc to bypass censorship
1.8k
55bytedance/appshark
Appshark is a static taint analysis platform to scan vulnerabilities in an Android app.
1.8k
56SVF-tools/SVF
Static Value-Flow Analysis Framework for Source Code
1.7k
57doxx/darkflare
DarkFlare Firewall Piercing (TCP over CDN)
1.6k
58agentgg-dev/agentgg
Open source agentic SAST. The engine behind hundreds of disclosed zero-days. 100+ AI security agents, any repo or PR diff, bring your own model.
460
59WSTxda/Clippy
Copy links from the sharing menu with automatic removal of shorteners and trackers.
443