yijiangtian

Pinned Repositories

Benchmark
OWASP Benchmark is a test suite designed to verify the speed and accuracy of software vulnerability detection tools. A fully runnable web app written in Java, it supports analysis by Static (SAST), Dynamic (DAST), and Runtime (IAST) tools that support Java. The idea is that since it is fully runnable and all the vulnerabilities are actually exploitable, it’s a fair test for any kind of vulnerability detection tool. For more details on this project, please see the OWASP Benchmark Project home page.
Language:Java1 2 00
ck
Code metrics for Java code by means of static analysis
Language:Java1 2 00
CWE-Juliet-TestSuite-Java
The Juliet Test Suite V1.3 (find the source https://samate.nist.gov/SRD/testsuite.php )
Language:Java1 2 00
Docker
Docker 部署各类应用
Language:TSQL1 2 00
GDS-PMD-Security-Rules
Custom security ruleset for the popular Java static analysis tool PMD.
Language:Java1 2 00
infer
A static analyzer for Java, C, C++, and Objective-C
Language:OCaml2 3 00
JMetrics
A Java static analysis tool to help measure code quality.
Language:Java1 2 00
jpf-symbc
Symbolic PathFinder
Language:Java1 2 00
maple-ir
Industrial IR-based static analysis framework for Java bytecode
Language:Java1 2 00
pvs-studio-check-list
Offer an interesting project for PVS-Studio analysis.
1 2 00

yijiangtian's Repositories

yijiangtian/Benchmark
OWASP Benchmark is a test suite designed to verify the speed and accuracy of software vulnerability detection tools. A fully runnable web app written in Java, it supports analysis by Static (SAST), Dynamic (DAST), and Runtime (IAST) tools that support Java. The idea is that since it is fully runnable and all the vulnerabilities are actually exploitable, it’s a fair test for any kind of vulnerability detection tool. For more details on this project, please see the OWASP Benchmark Project home page.
Language:Java1 2 00
yijiangtian/ck
Code metrics for Java code by means of static analysis
Language:Java1 2 00
yijiangtian/Docker
Docker 部署各类应用
Language:TSQL1 2 00
yijiangtian/jpf-symbc
Symbolic PathFinder
Language:Java1 2 00
yijiangtian/maple-ir
Industrial IR-based static analysis framework for Java bytecode
Language:Java1 2 00
yijiangtian/pvs-studio-check-list
Offer an interesting project for PVS-Studio analysis.
1 2 00
yijiangtian/steady
Analyses your Java and Python applications for open-source dependencies with known vulnerabilities, using both static analysis and testing to determine code context and usage for greater accuracy. https://eclipse.github.io/steady/
Language:Java1 2 0
yijiangtian/aibolit
Static Analyzer for Java Code with Machine Learning in Mind
Language:Java
yijiangtian/antlr4-javaparser
A java parser that creates an AST using the visitor pattern.
Language:ANTLR2 0
yijiangtian/Books
运维之道
Language:Python2 0
yijiangtian/coastal
Concolic analysis tool for Java
Language:Java2 0
yijiangtian/crest
CREST is a concolic test generation tool for C.
Language:C2 0
yijiangtian/CryptoAnalysis
CogniCrypt_SAST: CrySL-to-Static Analysis Compiler
Language:Java2 0
yijiangtian/cwe_checker
cwe_checker finds vulnerable patterns in binary executables
Language:OCaml2 0
yijiangtian/DesigniteJava
Detects smells and computes metrics of Java code
Language:Java
yijiangtian/java-smt
JavaSMT - Unified Java API for SMT solvers.
Language:Java2 0
yijiangtian/JavaAnalysis
Static Java Code Analysis
Language:Java2 0
yijiangtian/jbse
A symbolic Java virtual machine for program analysis, verification and test generation
yijiangtian/JCInterpret
Java Concolic Interpreter
yijiangtian/jpeek
Java Code Static Metrics (Cohesion, Coupling, etc.)
Language:Java1
yijiangtian/manticore
Symbolic execution tool
Language:Python2 0
yijiangtian/nopol
Automatic program repair and patch generation system for Java based on dynamic analysis and code synthesis with SMT, developed at University of Lille and Inria, France.
Language:Java2 0
yijiangtian/pyauto
《python自动化运维：技术与最佳实践》书中示例及案例源码
Language:Python2 0
yijiangtian/SootTutorial
A step-by-step tutorial for Soot (a Java static analysis framework)
yijiangtian/spoon
Spoon is a metaprogramming library to analyze and transform Java source code (up to Java 15). :spoon: is made with :heart:, :beers: and :sparkles:. It parses source files to build a well-designed AST with powerful analysis and transformation API.
Language:Java2 0
yijiangtian/spoon-examples
Examples on how to use the Spoon Java source code transformation library
Language:Java2 0
yijiangtian/spotbugs
SpotBugs is FindBugs' successor. A tool for static analysis to look for bugs in Java code.
yijiangtian/tardis
The TARDIS concolic test case generator
Language:Java2 0
yijiangtian/violations-lib
Java library for parsing report files from static code analysis.
Language:Java2 0
yijiangtian/WebGoat-Lessons
7.x - The WebGoat STABLE lessons supplied by the WebGoat team.