Pinned Repositories
aap
Automatic Analysis of Patches / Análisis Automático de Parches
analysis-net
Static analysis framework for .NET programs.
AnalyzeToolExtended
A tool that automates the performance assessment of static analysis tools.
Android_Code_Arbiter
针对Android Studio的源码扫描工具
antiplag
作业查重软件，它实现了程序代码、文档文本、图片之间的相似度检查。a code-similarity, text-similarity and image-similarity computation software for the codes, documents and images of assignment.
ANTLR3-ObjC2.0-Runtime
Objective C 2.0 Runtime for Antlr3
ApplicationInspector
A source code analyzer built for surfacing features of interest and other characteristics to answer the question 'what's in it' using static analysis with a json based rules engine. Ideal for scanning components before use or detecting feature level changes.
ArchUnit
A Java architecture test library, to specify and assert architecture rules in plain Java
progpilot
A static analysis tool for security
WebTaint
WebTaint is a dynamic taint tracker created to secure Java-based web applications.
tiandiyixian's Repositories
tiandiyixian/bblfshd
A self-hosted server for source code parsing
tiandiyixian/golangci-lint
Linters Runner for Go. 5x faster than gometalinter. Nice colored output. Can report only new issues. Fewer false-positives. Yaml/toml config.
tiandiyixian/huhuhu
tiandiyixian/nist-data-mirror
A simple Java command-line utility to mirror the CVE XML and JSON data from NIST.
tiandiyixian/astor
automatic program repair for Java with generate-and-validate techniques: jGenProg (2014) - jMutRepair (2016) - jKali (2016) - DeepRepair (2017) - Cardumen (2018)
tiandiyixian/ossa
Open-Source Security Architecture | 开源安全架构
tiandiyixian/CppStyle
An Eclipse plugin that integrates clang-format and cpplint (cpplint.py)
tiandiyixian/ql
The standard QL libraries and queries that power LGTM.com and other Semmle Products
tiandiyixian/spoon
Spoon is a library to analyze, transform, rewrite, transpile Java source code (incl Java 9 & Java 10). It parses source files to build a well-designed AST with powerful analysis and transformation API. Made at Inria with :heart:, :beers: and :sparkles:.
tiandiyixian/symbiotic
Symbiotic is a tool for finding bugs in computer programs based on instrumentation, program slicing and KLEE
tiandiyixian/libdft64
libdft for Intel Pin 3.x and 64 bit platform. (Dynamic taint tracking, taint analysis)
tiandiyixian/Scanners-Box
The toolbox of open source scanners(abbr - scanbox) - 安全行业从业者自研开源扫描器合辑
tiandiyixian/findbugs-violations
tiandiyixian/WPDS
Efficient and Precise Pointer-Tracking Data-Flow Framework
tiandiyixian/pyre-check
Performant type-checking for python.
tiandiyixian/detect-secrets
An enterprise friendly way of detecting and preventing secrets in code.
tiandiyixian/cwe_checker
cwe_checker is a BAP plugin to find vulnerable patterns in binary executables
tiandiyixian/Fortify-2
源代码漏洞の审计
tiandiyixian/piof
PIOF - PHP Instrumentation Open Framework - A dynamic and modular instrumentation framework for PHP language.
tiandiyixian/progex
PROGEX (Program Graph Extractor); a cross platform tool for extracting graphical program representations from software source code
tiandiyixian/sonar-esql-plugin
Sonar plugin to analyze ESQL-sourcecode of IBM Integration Bus projects
tiandiyixian/JavaID
java source code static code analysis and danger function identify prog
tiandiyixian/pronto
Quick automated code review of your changes
tiandiyixian/node-rasp
An extended Node.js runtime with additional security mechanisms built-in. Protects your Node.js applications from injection attacks such as SQL and NoSQL injection as well as path traversal attacks.
tiandiyixian/Saluki
Research on Saluki - software for finding taint style vulnerabilities in a binary code
tiandiyixian/ml-vulnerability-scanner
Convolution neural network based ml model to predict vulnerability type of the given source code
tiandiyixian/icsmaster
ICS/SCADA Security Resource（整合工控安全相关资源）
tiandiyixian/Paper
Web Security Technology & Vulnerability Analysis Whitepapers
tiandiyixian/cstyle
C/C++ Style Checker
tiandiyixian/GSIL
GitHub Sensitive Information Leakage（GitHub敏感信息泄露监控）