Awesome GitHub RepositoriesSource Code Analysis

CLI-Anything is a framework for converting software interfaces into standardized command-line tools that autonomous AI agents can discover and execute. It functions as a software interface generator that analyzes source code to transform application features into structured command groups and executable packages. The project provides a centralized registry and manager for discovering, installing, and updating command-line toolkits. It employs a specific metadata standard using markdown and YAML to provide agents with the usage examples and documentation necessary to call commands. The system

gosec is a static analysis security tool designed to scan Go source code for vulnerabilities and common coding flaws. It functions as a security analyzer that inspects the abstract syntax tree to identify insecure function calls, API usage, and potential security risks. The tool distinguishes itself by mapping detected vulnerabilities to Common Weakness Enumeration identifiers for standardized reporting and integrating with external AI models to suggest code fixes for identified issues. Its capabilities cover the detection of injection vulnerabilities, hardcoded credentials, weak cryptograph

axe-core is an automated accessibility testing engine and compliance auditor designed to scan web and mobile interfaces for violations of industry accessibility standards. It functions as a programmatic scanner and linter that analyzes HTML and source code to identify barriers and verify compliance with accessibility guidelines. The project distinguishes itself by combining a DOM-based rule engine with computer vision and machine learning to detect complex violations that evade traditional analysis, such as visual heading discrepancies and informative images. It provides specialized capabilit

JavaParser is a library that parses Java source code up to version 12 into an Abstract Syntax Tree (AST), enabling programmatic analysis, transformation, and generation of Java code. It serves as a parser, code analyzer, code generator, comment parser, and symbol resolver, providing a unified toolkit for working with Java source at the AST level. The library distinguishes itself through several integrated capabilities that go beyond basic parsing. It includes a symbol resolution engine that resolves type and symbol references across files for accurate semantic analysis, and an error-recovery

LinkFinder هي أداة استطلاع أمني وتحليل ثابت مصممة لاكتشاف نقاط نهاية JavaScript. تستخرج الروابط المطلقة والنسبية والمعلمات من ملفات JavaScript لرسم خريطة لسطح الهجوم لتطبيقات الويب وتحديد مسارات API المخفية. تعمل الأداة من خلال تحليل الكود الثابت ومطابقة أنماط التعبير العادي للعثور على نقاط النهاية دون تنفيذ الكود المصدري. تتضمن معالج بيانات لاستيراد الملفات المصدرة من Burp Suite، مما يتيح التحليل الدفعي لأصول JavaScript متعددة في تنفيذ واحد. يوفر النظام إمكانيات للتحليل على مستوى النطاق والتصفية الخاصة بالنطاق للتركيز على الأهداف المحددة. كما يتميز بإشعارات اكتشاف الكلمات الرئيسية لتنبيه المستخدمين عند ظهور سلاسل نصية معينة في النتائج، ويدعم تصدير البيانات المكتشفة بتنسيقات نص عادي أو HTML.

SecretFinder - A python script for find sensitive data (apikeys, accesstoken,jwt,..) and search anything on javascript files

OSINT dating tool for web pages