Tools

elttam/semgrep-rules

Static analysis security rules for vulnerability detection and audit-focused code review across Java, Go, Python, C#, Kotlin, PHP, Kubernetes, and…

gwroblew/detectxsslib

C++ library for detecting cross-site scripting (XSS) vulnerabilities in URLs through pattern analysis, with server modules and command-line tools for…

uthrasri/cve-2021-21401_nanopb-c_aosp10_r33

Lightweight Protocol Buffers implementation in ANSI C for microcontrollers and memory-restricted embedded systems, enabling efficient serialization…

pazhanivel07/openjpeg-2.3.0_cve-2020-27824

CVE-2020-27824 exploit reproduction environment for OpenJPEG JPEG 2000 codec, enabling vulnerability analysis, fuzzing, and binary exploitation…

saurabh2088/expat_2_1_0_cve-2024-28757

C library for stream-oriented XML parsing, with a focus on analyzing and reproducing CVE-2024-28757 vulnerability in Expat 2.1.0.

boratanrikulu/gobee

Write your BPF programs in Go, not C. gobee transpiles a Go subset to BPF C and generates typed cilium/ebpf bindings.

renukaselvar/expat_cve-2024-28757

C library for stream-oriented XML parsing with handler registration, supporting UTF-8/UTF-16 encoding, and autoconf-based build system. Includes…

simplylu/cve-2021-42694

Generate malicious files using recently published homoglyphic-attack (CVE-2021-42694)

logsec/cve-2010-2387

Proof-of-concept exploit for CVE-2010-2387, a privilege escalation vulnerability in GNOME Display Manager (GDM). Includes C source code targeting the…

trinadh465/external_libexif_aosp10_r33_cve-2020-0198

C library for parsing, editing, and saving EXIF metadata, with a focus on addressing CVE-2020-0198 in AOSP10.

trinadh465/external_libexif_aosp10_r33_cve-2020-0181

C library for parsing, editing, and saving EXIF data, patched for CVE-2020-0181 to prevent heap buffer overflow in EXIF tag parsing.

timon-l/3007project

Secure coding project, research on CVE-2019-17498 and implement a player score function written in C.

shaikusaf/external_libexif_aosp10_cve-2020-0452

C library for parsing, editing, and saving EXIF data, with a focus on addressing CVE-2020-0452 in AOSP10. Provides API for metadata extraction and…

shaikusaf/external_expact_aosp10_r33_cve-2022-25313

C library for stream-oriented XML parsing, providing handlers for parsing structures in documents. Includes xmlwf tool and supports UTF-16 encoding.

0xxon/roca

Reimplementation of CVE-2017-15361 checker in C

semgrep/semgrep

Lightweight static analysis for many languages. Find bug variants with patterns that look like source code.

mobsf/mobsfscan

mobsfscan is a static analysis tool that can find insecure code patterns in your Android and iOS source code. Supports Java, Kotlin, Swift, and…

smackers/smack

Modular software verification toolchain that translates LLVM IR into Boogie intermediate verification language for bounded and experimental unbounded…