43 skills found · Page 1 of 2
microsoft / InfersharpInfer# is an interprocedural and scalable static code analyzer for C#. Via the capabilities of Facebook's Infer, this tool detects null dereferences, resource leaks, and thread-safety violations. It also performs taint flow tracking to detect critical security vulnerabilities like SQL injections.
trailofbits / PolytrackerAn LLVM-based instrumentation tool for universal taint tracking, dataflow analysis, and tracing.
enzet / Symbolic ExecutionHistory of symbolic execution (as well as SAT/SMT solving, fuzzing, and taint data tracking)
poppopjmp / VMDragonSlayerAutomated multi-engine framework for unpacking, analyzing, and devirtualizing binaries protected by commercial and custom Virtual Machine based protectors. Combines Dynamic Taint Tracking, Symbolic Execution, Pattern & Semantic Classification, and Machine Learning–driven prioritization to dramatically reduce manual reverse engineering time.
NSSL-SJTU / SaTCA prototype of Shared-keywords aware Taint Checking, a novel static analysis approach that tracks the data flow of the user input between front-end and back-end to precisely detect security vulnerabilities.
googleprojectzero / Bochspwn ReloadedA Bochs-based instrumentation performing kernel memory taint tracking to detect disclosure of uninitialized memory to ring 3
AngoraFuzzer / Libdft64libdft for Intel Pin 3.x and 64 bit platform. (Dynamic taint tracking, taint analysis)
wmkhoo / TaintgrindA taint-tracking plugin for the Valgrind memory checking tool
gmu-swe / PhosphorPhosphor: Dynamic Taint Tracking for the JVM
usdAG / FlowMateFlowMate, a BurpSuite extension that brings taint analysis to web applications, by tracking all parameters send to a target application and matches their occurrences in the responses.
v8blink / Chromium Based XSS Taint TrackingCyclops 是一款具有 XSS 检测功能的浏览器
microsoft / InfersharpactionAbout Infer# is an interprocedural and scalable static code analyzer for C#. Via the capabilities of Facebook's Infer, this tool detects null dereferences, resource leaks, and thread-safety violations. It also performs taint flow tracking to detect critical security vulnerabilities like SQL injections.
scotty-kdw / ARM AnalyzerBackward Taint Analysis (GUI) on Desktop : Analyzing trace log to determine exploitability by tracking data propagation
vanhauser-thc / DynTaintTracera taint tracer based on DynamoRIO, currently ARM only
cokeBeer / Goota dataflow analysis framework implemented in Go, like soot
Dynamic-Rabbits / Taint EvaluatorA suite of experiments for evaluating open-source binary taint trackers.
mimicji / FlowMatrixFLOWMATRIX: GPU-Assisted Information-Flow Analysis through Matrix-Based Representation, USENIX Security'22
wfus / WebAssembly TaintImplementing taint tracking in WebAssembly as a part of the V8 Javascript Engine.
gagliardetto / CodeboxGenerate CodeQL taint-tracking models for Go (along with tests) in a graphical UI
HXSecurity / DongTai EngineThis repository has been merged into https://github.com/HXSecurity/DongTai. DongTai-engine used to analyze the method data collected by the probe, analyze whether there are vulnerabilities in API requests through the algorithm of taint tracking, and is also responsible for timing tasks, including: expired log cleaning, probe state maintenance, data packet replay processing, etc.
