https://github.com/software-engineering-and-security/inspector-gadget

Inspector-gadget (a.k.a. PSHAPE - Practical Support for Half-Automated Program Exploitation) is an open source tool which assists analysts in exploit development. It discovers gadgets, chains gadgets together, and ensures that side effects such as register dereferences do not crash the program.

exploit gadget-chain gadgets inspector-gadget pshape register vulnerability

Last synced: 01 Sep 2025

https://github.com/software-engineering-and-security/confuzzion

Confuzzion is a Java Virtual Machine (JVM) fuzzer generating Java programs to find bugs and vulnerabilities in the Java VM.

bug code-generation crashes fuzzer java java-virtual-machine java-virtual-machine-fuzzer jvm jvm-fuzzer jvm-fuzzing security soot testing type-confusion vulnerabilities vulnerability

Last synced: 27 Jul 2025

https://github.com/software-engineering-and-security/gleipner

A benchmark for Java gadget chain detecting algorithms.

Last synced: 14 Apr 2025

https://github.com/software-engineering-and-security/gadgecy

A tool and dataset for detecting dependencies used in known Java gadget chains.

Last synced: 19 Jun 2026

https://github.com/software-engineering-and-security/java-deserialization-rce

An In-depth Study of Java Deserialization Remote-Code Execution Exploits and Vulnerabilities

Last synced: 02 Feb 2026

https://github.com/software-engineering-and-security/javadesatchecker.web

Web pages and other artefacts generated with javaDesatChecker

Last synced: 27 Jan 2026

https://github.com/software-engineering-and-security/cfi-practical-guideline

SoK: Preventing Real-World Exploits: A Practical Guideline and Taxonomy to LLVM's Control Flow Integrity

Last synced: 24 Feb 2026

https://github.com/software-engineering-and-security/sleepinggiants

A dataset for dependencies susceptible to hiding Java deserialization gadgets and injection framework.

Last synced: 10 Feb 2026

https://github.com/software-engineering-and-security/loom-android-malware-detection

"Loom: A Balanced String-Based Transformer for Android Malware Detection (ICICS 2026)"

Last synced: 15 Jun 2026

https://github.com/software-engineering-and-security/androidsjcl-secdev23

Artifacts of our SecDev 2023 paper "An In-Depth Analysis of Android’s Java Class Library: its Evolution and Security Impact"

android class dalvik exposure jvm openjdk security tlsh vulnerability

Last synced: 21 Feb 2026