MATE MATE is a suite of tools for interactive program analysis with a focus on hunting for bugs in C and C++ code. MATE unifies application-specific and low-level vulnerability analysis...
Programming / Smartphone PenTest
by do son · Published October 14, 2022 · Last modified September 24, 2023
What is Tai-e? Tai-e (Chinese: 太阿; pronunciation: [ˈtaɪə:]) is a new static analysis framework for Java (please see our technical report for details), which features arguably the “best” designs from both the...
Makes A software supply chain framework powered by Nix. Ever needed to run applications locally to try out your code? Execute CI/CD pipelines locally to make sure jobs are being passed....
Every single business certainly needs to rely heavily on technology nowadays. There are various different pieces of software that are important for certain companies and if you check out a...
Programming / Vulnerability Analysis / Web Vulnerability Analysis
by do son · Published December 17, 2021
SWAN This branch contains the new generation of the SWAN framework. The SWAN version described in our ESEC/FSE 2020 paper is located on this branch. This paper no longer represents the current state of...
Mininode Mininode is a CLI tool to reduce the attack surface of the Node.js applications by using static analysis of source code. It supports two modes of reduction (1) coarse,...
Programming / Vulnerability Analysis / Web Vulnerability Analysis
by do son · Published September 23, 2021 · Last modified May 1, 2024
shisho Shisho is a lightweight static code analyzer designed for developers and security teams. The key motivation of Shisho is providing a means of Security-as-Code for Code. It allows us to analyze...
Programming / Web Vulnerability Analysis
by do son · Published August 27, 2021 · Last modified September 22, 2022
GoKart – Go Security Static Analysis GoKart is a static analysis tool for Go that finds vulnerabilities using the SSA (single static assignment) form of Go source code. It is...
PackageDNA This tool gives developers, researchers, and companies the ability to analyze software packages of different programming languages that are being or will be used in their codes, providing information...
What is Bughound? Bughound is an open-source static code analysis tool that analyzes your code and sends the results to Elasticsearch and Kibana to get useful insights about the potential...
Programming / Web Vulnerability Analysis
by do son · Published June 26, 2021 · Last modified March 23, 2023
Salus: Guardian of Code Safety and Security Salus (Security Automation as a Lightweight Universal Scanner), named after the Roman goddess of protection, is a tool for coordinating the execution of security...
Programming / Vulnerability Analysis
by do son · Published June 5, 2021 · Last modified April 9, 2023
joern Joern is a platform for robust analysis of C/C++ code. It generates code property graphs, a graph representation of code for cross-language code analysis. Code property graphs are stored...
Programming / Vulnerability Analysis / Web Vulnerability Analysis
by do son · Published February 13, 2021 · Last modified June 8, 2022
What is Horusec? Horusec is an open-source tool that performs a static code analysis to identify security flaws during the development process. Currently, the languages for analysis are C#, Java,...
threatspec Threatspec is an open-source project that aims to close the gap between development and security by bringing the threat modeling process further into the development process. This is achieved...
Programming / Web Vulnerability Analysis
by do son · Published November 1, 2020 · Last modified February 15, 2023
sast-scan Scan is a free open-source security tool for modern DevOps teams. With an integrated multi-scanner based design, Scan can detect various kinds of security flaws in your application and infrastructure...
Support Securityonline.info site. Thanks!
