Ecosyste.ms: Awesome

https://github.com/software-engineering-and-security/inspector-gadget

Inspector-gadget (a.k.a. PSHAPE - Practical Support for Half-Automated Program Exploitation) is an open source tool which assists analysts in exploit development. It discovers gadgets, chains gadgets together, and ensures that side effects such as register dereferences do not crash the program.

exploit gadget-chain gadgets inspector-gadget pshape register vulnerability

Last synced: 08 Nov 2024

https://github.com/software-engineering-and-security/confuzzion

Confuzzion is a Java Virtual Machine (JVM) fuzzer generating Java programs to find bugs and vulnerabilities in the Java VM.

bug code-generation crashes fuzzer java java-virtual-machine java-virtual-machine-fuzzer jvm jvm-fuzzer jvm-fuzzing security soot testing type-confusion vulnerabilities vulnerability

Last synced: 08 Nov 2024

https://github.com/software-engineering-and-security/androidsjcl-secdev23

Artifacts of our SecDev 2023 paper "An In-Depth Analysis of Android’s Java Class Library: its Evolution and Security Impact"

android class dalvik exposure jvm openjdk security tlsh vulnerability

Last synced: 13 Oct 2024

https://github.com/software-engineering-and-security/gadgecy

A tool and dataset for detecting dependencies used in known Java gadget chains.

Last synced: 08 Nov 2024

https://github.com/software-engineering-and-security/javadesatchecker.web

Web pages and other artefacts generated with javaDesatChecker

Last synced: 08 Nov 2024

https://github.com/software-engineering-and-security/java-deserialization-rce

An In-depth Study of Java Deserialization Remote-Code Execution Exploits and Vulnerabilities

Last synced: 08 Nov 2024