Awesome GitHub RepositoriesConstraint-Based Value Analysis

Mythril هو محلل أمان العقود الذكية لـ Ethereum Virtual Machine يستخدم التنفيذ الرمزي لتحديد الثغرات الأمنية في كود البايت قبل النشر. يعمل كماسح ضوئي للثغرات ومدقق رسمي، حيث يعامل مدخلات البرنامج كرموز رياضية لإثبات وجود أخطاء في منطق العقد. تقوم الأداة بإجراء تحليل على مستوى كود البايت لاكتشاف العيوب التي قد تكون مخفية بواسطة المترجمات عالية المستوى. تدمج الأداة أدوات حل SMT لتحديد ما إذا كانت حالات الثغرات المحددة قابلة للوصول، وتقارن آثار التنفيذ الرمزي مقابل مكتبة من توقيعات عيوب الأمان المعروفة. يغطي المشروع نطاقاً واسعاً من قدرات تحليل الأمان، بما في ذلك اكتشاف ثغرات البلوكشين، والتدقيق الرسمي لمنطق العقد، واختبار الأمان المؤتمت. كما يوفر تكاملاً لسير عمل Git للتحقق من الكود كجزء من عملية الالتزام (commit).

Triton is a dynamic binary analysis framework designed to automate reverse engineering. It functions as a multi-architecture CPU emulator, an SMT-based symbolic execution engine, and a dynamic taint analysis tool. The framework translates raw machine instructions into abstract syntax trees, allowing it to represent binary program logic as a structured intermediate representation. This allows the system to map multiple hardware instruction sets to a single analysis framework and translate machine instructions into mathematical formulas for solving constraints. Its capabilities cover the simul

Ikos is a formal verification suite and static analysis framework designed to prove the absence of undefined behaviors and runtime errors in C and C++ source code. It functions as an abstract interpretation tool that approximates program execution to identify potential crashes and software defects. The system utilizes a compiler front-end to translate source code into a specialized abstract representation. This process decouples language parsing from the analysis logic, allowing the framework to perform deep program analysis via a formal verification system. The toolkit covers several analys

Kani is a formal verification tool and model checker for Rust. It functions as a bit-precise static analyzer that mathematically proves the correctness and memory safety of code by exhaustively analyzing program states to identify undefined behavior, panics, and logic errors. The tool identifies bugs by producing concrete counterexamples when program assertions or safety contracts are violated. It enables the definition of function contracts through preconditions and postconditions to verify that inputs and outputs match expected behavior. The system provides capabilities for Rust program an

SVF is an open-source static program analysis framework and points-to analysis library that tracks memory references, variable aliases, and data dependencies across whole programs. The platform translates compiled intermediate code formats into unified internal representations, constructing constraint graphs, call graphs, and control-flow graphs to model interprocedural execution behavior and memory state. The framework incorporates specialized engines for flow-sensitive, flow-insensitive, and context-sensitive pointer analysis alongside sparse value-flow graph generation. It features memory

This project is an open-source computer-aided design toolchain designed for the synthesis, placement, and routing of hardware designs onto programmable logic architectures. It serves as a comprehensive framework for research and development, enabling the transformation of hardware description language designs into optimized netlists and physical implementation files. By providing a modular pipeline, the system facilitates the entire flow from initial logic synthesis to the generation of configuration data for programmable hardware devices. The toolchain distinguishes itself through its focus