Repository navigation
sourcecode-analysis
- Website
- Wikipedia
😱 从源码层面，剖析挖掘互联网行业主流技术的底层实现原理，为广大开发者 “提升技术深度” 提供便利。目前开放 Spring 全家桶，Mybatis、Netty、Dubbo 框架，及 Redis、Tomcat 中间件等
Source Code Security Audit (源代码安全审计)
"Zero setup" & "Blazingly fast" general code file relationship analysis. With Python & Rust. Based on tree-sitter and git analysis. Support MCP and ready for AI🤖
Nuclei templates for source code analysis. Detects hardcoded secrets, config leaks, debug endpoints. Also helps identify OWASP Top 10 issues in code. Ideal for SAST and CI/CD integration.
PHPSCAN: Security analysis tool for PHP
《iOS开源库源码分析》http://coderyi.com/iOSSourceCodeAnalyze/
Analyzing the VSCode source code.
Codeaudit - Modern Python source code analyzer based on distrust.
Vulnerable code clone detection technique. Published in EuroS&P2020
Reversed WintaPix Malware Source code | That targets countries in the Middle East and abuse KeServiceDescriptorTable(SSDT), persistence and filesystem.
The Omniboard analyzer is a CLI tool that helps you run your Omniboard checks against your source code and then uploads results back to Omniboard for visualization per project, per check results or even using custom dashboards
Apkscan is used to analyse android application (apk) for security issues in Code level.
GeminiHacker is a Python script designed to harness the power of a generative AI model for security research, bug bounty hunting, and vulnerability scanning. This README.md file provides detailed instructions on how to install, configure, and use the script effectively.
This repository offers a set of custom Nuclei templates for source code security analysis, focusing on detecting hardcoded secrets, configuration leaks, and OWASP Top 10 vulnerabilities. Contributions are encouraged, and users can easily integrate these templates into their SAST and CI/CD processes. 🐙✨
Writing our own custom checks in the source code analyzer tool CheckStyle
A simple utilization of code2vec model in source code analysis