Trending repositories for topic static-analysis
Static analyzer for C/C++ based on the theory of Abstract Interpretation.
An extremely fast Python linter and code formatter, written in Rust.
🔍 A Hex Editor for Reverse Engineers, Programmers and people who value their retinas when working at 3 AM.
A comprehensive collection of cheatsheets for reverse engineering, binary analysis, and assembly programming tools. This repository serves as a one-stop reference for security researchers, reverse eng...
Mobile Security Framework (MobSF) is an automated, all-in-one mobile application (Android/iOS/Windows) pen-testing, malware analysis and security assessment framework capable of performing static and ...
⚡A CLI tool for code structural search, lint and rewriting. Written in Rust
Program for determining types of files for Windows, Linux and MacOS.
CLI tool and library for generating a Software Bill of Materials from container images and filesystems
Lightweight static analysis for many languages. Find bug variants with patterns that look like source code.
🐶 Automated code review tool integrated with any code analysis tools regardless of programming language
Prevent cloud misconfigurations and find vulnerabilities during build-time in infrastructure as code, container images and open source packages with Checkov by Bridgecrew.
Validate and visualize dependencies. Your rules. JavaScript, TypeScript, CoffeeScript. ES6, CommonJS, AMD.
Jar Analyzer - 一个JAR包分析工具，批量分析，SCA漏洞分析，方法调用关系搜索，字符串搜索，Spring组件分析，信息泄露检查，CFG程序分析，JVM栈帧分析，进阶表达式搜索，字节码指令级的动态调试分析，反编译JAR包一键导出，一键提取序列化数据恶意代码，一键分析BCEL字节码
A comprehensive collection of cheatsheets for reverse engineering, binary analysis, and assembly programming tools. This repository serves as a one-stop reference for security researchers, reverse eng...
Static analyzer for C/C++ based on the theory of Abstract Interpretation.
Jar Analyzer - 一个JAR包分析工具，批量分析，SCA漏洞分析，方法调用关系搜索，字符串搜索，Spring组件分析，信息泄露检查，CFG程序分析，JVM栈帧分析，进阶表达式搜索，字节码指令级的动态调试分析，反编译JAR包一键导出，一键提取序列化数据恶意代码，一键分析BCEL字节码
PHP_CodeSniffer tokenizes PHP files and detects violations of a defined set of coding standards.
All-in-one devtool to automatically analyze, search and visualize project modules and dependencies from JavaScript, TypeScript (JSX/TSX) and Node.js (ES6, CommonJS)
Corax for Java: A general static analysis framework for java code checking.
⚡A CLI tool for code structural search, lint and rewriting. Written in Rust
CLI tool and library for generating a Software Bill of Materials from container images and filesystems
Program for determining types of files for Windows, Linux and MacOS.
Scans your project to determine what components you use
An extremely fast Python linter and code formatter, written in Rust.
🔍 A Hex Editor for Reverse Engineers, Programmers and people who value their retinas when working at 3 AM.
Static analyzer for C/C++ based on the theory of Abstract Interpretation.
A comprehensive collection of cheatsheets for reverse engineering, binary analysis, and assembly programming tools. This repository serves as a one-stop reference for security researchers, reverse eng...
⚡A CLI tool for code structural search, lint and rewriting. Written in Rust
Mobile Security Framework (MobSF) is an automated, all-in-one mobile application (Android/iOS/Windows) pen-testing, malware analysis and security assessment framework capable of performing static and ...
Program for determining types of files for Windows, Linux and MacOS.
CLI tool and library for generating a Software Bill of Materials from container images and filesystems
⚙️ A curated list of static analysis (SAST) tools and linters for all programming languages, config files, build tools, and more. The focus is on tools which improve code quality.
🐶 Automated code review tool integrated with any code analysis tools regardless of programming language
Validate and visualize dependencies. Your rules. JavaScript, TypeScript, CoffeeScript. ES6, CommonJS, AMD.
Lightweight static analysis for many languages. Find bug variants with patterns that look like source code.
PHP Static Analysis Tool - discover bugs in your code without running it!
Jar Analyzer - 一个JAR包分析工具，批量分析，SCA漏洞分析，方法调用关系搜索，字符串搜索，Spring组件分析，信息泄露检查，CFG程序分析，JVM栈帧分析，进阶表达式搜索，字节码指令级的动态调试分析，反编译JAR包一键导出，一键提取序列化数据恶意代码，一键分析BCEL字节码
A comprehensive collection of cheatsheets for reverse engineering, binary analysis, and assembly programming tools. This repository serves as a one-stop reference for security researchers, reverse eng...
Static analyzer for C/C++ based on the theory of Abstract Interpretation.
A library for extracting and analyzing definition/reference graphs from your codebase. Powered by tree-sitter and LSIF/SCIP.
💀 PHP unused code detection via PHPStan extension. Detects dead cycles, supports libs like Symfony, Doctrine, PHPUnit etc. Can automatically remove dead PHP code.
View8 - Decompiles serialized V8 objects back into high-level readable code.
A program slicer for Java, based on the system dependence graph (SDG).
Interface with the rustc compiler for the purpose of program verification
Jar Analyzer - 一个JAR包分析工具，批量分析，SCA漏洞分析，方法调用关系搜索，字符串搜索，Spring组件分析，信息泄露检查，CFG程序分析，JVM栈帧分析，进阶表达式搜索，字节码指令级的动态调试分析，反编译JAR包一键导出，一键提取序列化数据恶意代码，一键分析BCEL字节码
PHP_CodeSniffer tokenizes PHP files and detects violations of a defined set of coding standards.
Wake is a Python-based Solidity development and testing framework with built-in vulnerability detectors
All-in-one devtool to automatically analyze, search and visualize project modules and dependencies from JavaScript, TypeScript (JSX/TSX) and Node.js (ES6, CommonJS)
⚡A CLI tool for code structural search, lint and rewriting. Written in Rust
A comprehensive collection of cheatsheets for reverse engineering, binary analysis, and assembly programming tools. This repository serves as a one-stop reference for security researchers, reverse eng...
An extremely fast Python linter and code formatter, written in Rust.
🔍 A Hex Editor for Reverse Engineers, Programmers and people who value their retinas when working at 3 AM.
Static analyzer for C/C++ based on the theory of Abstract Interpretation.
A comprehensive collection of cheatsheets for reverse engineering, binary analysis, and assembly programming tools. This repository serves as a one-stop reference for security researchers, reverse eng...
Program for determining types of files for Windows, Linux and MacOS.
Mobile Security Framework (MobSF) is an automated, all-in-one mobile application (Android/iOS/Windows) pen-testing, malware analysis and security assessment framework capable of performing static and ...
⚡A CLI tool for code structural search, lint and rewriting. Written in Rust
Validate and visualize dependencies. Your rules. JavaScript, TypeScript, CoffeeScript. ES6, CommonJS, AMD.
Lightweight static analysis for many languages. Find bug variants with patterns that look like source code.
CLI tool and library for generating a Software Bill of Materials from container images and filesystems
PHP Static Analysis Tool - discover bugs in your code without running it!
Jar Analyzer - 一个JAR包分析工具，批量分析，SCA漏洞分析，方法调用关系搜索，字符串搜索，Spring组件分析，信息泄露检查，CFG程序分析，JVM栈帧分析，进阶表达式搜索，字节码指令级的动态调试分析，反编译JAR包一键导出，一键提取序列化数据恶意代码，一键分析BCEL字节码
Static analysis tool to detect potential nil panics in Go code
A comprehensive collection of cheatsheets for reverse engineering, binary analysis, and assembly programming tools. This repository serves as a one-stop reference for security researchers, reverse eng...
💀 PHP unused code detection via PHPStan extension. Detects dead cycles, supports libs like Symfony, Doctrine, PHPUnit etc. Can automatically remove dead PHP code.
Static analyzer for C/C++ based on the theory of Abstract Interpretation.
Interface with the rustc compiler for the purpose of program verification
Jar Analyzer - 一个JAR包分析工具，批量分析，SCA漏洞分析，方法调用关系搜索，字符串搜索，Spring组件分析，信息泄露检查，CFG程序分析，JVM栈帧分析，进阶表达式搜索，字节码指令级的动态调试分析，反编译JAR包一键导出，一键提取序列化数据恶意代码，一键分析BCEL字节码
A library for extracting and analyzing definition/reference graphs from your codebase. Powered by tree-sitter and LSIF/SCIP.
Find leaking classes that you never use... and get rid of them.
View8 - Decompiles serialized V8 objects back into high-level readable code.
A lightweight memory allocator for hardware-accelerated machine learning
JavaScript Reverse Engineering Toolkit (JSRETK) - Experimental tools for analyzing (minified/obfuscated) JavaScript
Wake is a Python-based Solidity development and testing framework with built-in vulnerability detectors
A comprehensive collection of cheatsheets for reverse engineering, binary analysis, and assembly programming tools. This repository serves as a one-stop reference for security researchers, reverse eng...
A linter with superpowers! 🔥 Use LLMs to enforce best practices across your codebase.
💀 PHP unused code detection via PHPStan extension. Detects dead cycles, supports libs like Symfony, Doctrine, PHPUnit etc. Can automatically remove dead PHP code.
A collection of my weggli patterns to facilitate vulnerability research.
Static code analyser for backdoors and malicious code in git repos using OpenAI compatible LLM APIs
SherlockElf is a powerful tool designed for both static and dynamic analysis of Android ELF binaries and dynamic iOS Macho-O binaries (experimental).
AI-driven Static Analyzer. Supports Rust and Smart contracts: Solana based on Rust, Ethereum based on Solidity.
A tool for analyzing and visualizing complex software architecture hierarchies
A code quality control tool for PHP that will give you an idea of the composition of comments in the codebase, and help improve documentation
🔍 A Hex Editor for Reverse Engineers, Programmers and people who value their retinas when working at 3 AM.
An extremely fast Python linter and code formatter, written in Rust.
⚡A CLI tool for code structural search, lint and rewriting. Written in Rust
Mobile Security Framework (MobSF) is an automated, all-in-one mobile application (Android/iOS/Windows) pen-testing, malware analysis and security assessment framework capable of performing static and ...
Static analysis tool to detect potential nil panics in Go code
A vulnerability scanner for container images and filesystems
Program for determining types of files for Windows, Linux and MacOS.
Lightweight static analysis for many languages. Find bug variants with patterns that look like source code.
A fast, feature-rich static code analyzer & language server for Python
CLI tool and library for generating a Software Bill of Materials from container images and filesystems
Dockerfile linter, validate inline bash, written in Haskell
🐶 Automated code review tool integrated with any code analysis tools regardless of programming language
⚙️ A curated list of static analysis (SAST) tools and linters for all programming languages, config files, build tools, and more. The focus is on tools which improve code quality.
Prevent cloud misconfigurations and find vulnerabilities during build-time in infrastructure as code, container images and open source packages with Checkov by Bridgecrew.
💀 PHP unused code detection via PHPStan extension. Detects dead cycles, supports libs like Symfony, Doctrine, PHPUnit etc. Can automatically remove dead PHP code.
A comprehensive collection of cheatsheets for reverse engineering, binary analysis, and assembly programming tools. This repository serves as a one-stop reference for security researchers, reverse eng...
Static code analyser for backdoors and malicious code in git repos using OpenAI compatible LLM APIs
SherlockElf is a powerful tool designed for both static and dynamic analysis of Android ELF binaries and dynamic iOS Macho-O binaries (experimental).
PHP_CodeSniffer tokenizes PHP files and detects violations of a defined set of coding standards.
🤝 A friendly error formatter extension for PHPStan that provides more readable and informative output, including code snippets and color highlighting.
A code quality control tool for PHP that will give you an idea of the composition of comments in the codebase, and help improve documentation
apkInspector is a tool designed to provide detailed insights into the zip structure of APK files, offering the capability to extract content and decode the AndroidManifest.xml file.
Elevate your 🐍 code with optimal data structure recommendations from pyggester.
A tool for analyzing and visualizing complex software architecture hierarchies
Performant static analyzer for PHP, which is extremely easy to use. It helps you catch common mistakes in your PHP code.
View8 - Decompiles serialized V8 objects back into high-level readable code.