17 repositorios
Awesome GitHub RepositoriesSecurity Analysis Tools
Static and dynamic analysis tools for identifying vulnerabilities in smart contracts.
Explore 17 awesome GitHub repositories matching part of an awesome list · Security Analysis Tools. Refine with filters or upvote what's useful.
Awesome Security Analysis Tools GitHub Repositories
Encuentra los mejores repositorios con IA.Buscaremos los repositorios que mejor coincidan usando IA.
- crytic/slither
crytic/slither
6,141Ver en GitHubStatic analysis framework for Solidity code.
Pythonethereumsoliditystatic-analysis - consensys/mythril
ConsenSys/mythril
4,251Ver en GitHubMythril es un analizador de seguridad de contratos inteligentes para Ethereum Virtual Machine que utiliza ejecución simbólica para identificar vulnerabilidades en el bytecode antes del despliegue. Funciona como un escáner de vulnerabilidades y auditor formal, tratando las entradas del programa como símbolos matemáticos para probar la presencia de errores en la lógica del contrato. La herramienta realiza un análisis a nivel de bytecode para detectar fallos que pueden estar ocultos por compiladores de alto nivel. Integra solvers SMT para determinar si estados de vulnerabilidad específicos son alcanzables y compara trazas de ejecución simbólica contra una biblioteca de firmas de fallos de seguridad conocidos. El proyecto cubre una amplia gama de capacidades de análisis de seguridad, incluyendo detección de vulnerabilidades en blockchain, auditoría formal de lógica de contratos y pruebas de seguridad automatizadas. También proporciona integración para flujos de trabajo de Git para validar el código como parte de un proceso de commit.
Open-source EVM bytecode security analysis tool.
Python - trailofbits/manticore
trailofbits/manticore
3,855Ver en GitHubManticore is a symbolic execution engine designed for the analysis of binary executables and smart contracts. It functions as an automated vulnerability scanner and verification platform that systematically traverses program execution paths to identify security flaws, validate business invariants, and ensure software properties hold true under all possible input conditions. The engine distinguishes itself through a unified instruction set abstraction that enables consistent analysis across diverse architectures and contract formats. It provides a programmatic interface for deep customization,
Symbolic execution tool for smart contracts and binaries.
Python - sigp/solidity-security-blog
sigp/solidity-security-blog
1,524Ver en GitHubComprehensive list of known attack vectors and common anti-patterns
Curated list of attack vectors and anti-patterns.
- melonproject/oyente
melonproject/oyente
1,340Ver en GitHubAn Analysis Tool for Smart Contracts
Alternative static smart contract security analysis.
JavaScript - securing/dumpsterdiver
securing/DumpsterDiver
1,033Ver en GitHubTool to search secrets in various filetypes.
Automated scanning for hardcoded secrets and sensitive credentials in data.
Python - raineorshine/solgraph
raineorshine/solgraph
1,028Ver en GitHubVisualize Solidity control flow for smart contract security analysis. :dollar: ⇆ :dollar:
Visualize Solidity control flow for security analysis.
JavaScriptethereumsolidity - crytic/ethersplay
crytic/ethersplay
EVM dissassembler
EVM disassembler for smart contract inspection.
Python - sec-bit/awesome-buggy-erc20-tokens
sec-bit/awesome-buggy-erc20-tokens
A Collection of Vulnerabilities in ERC20 Smart Contracts With Tokens Affected
Collection of known vulnerabilities in token contracts.
Python - factionsecurity/faction
factionsecurity/faction
Faction is now an OWASP Project! You can find more information here
Framework for automating penetration testing reports and vulnerability tracking.
Java - pessimistic-io/slitherin
pessimistic-io/slitherin
Slither Detectors by Pessimistic.io
Plugin providing additional security detectors for static analysis.
Python - ic3hydra/hydra
IC3Hydra/Hydra
Framework for cryptoeconomic contract security, decentralized security bounties. Live on Ethereum.
Framework for cryptoeconomic contract security and bounties.
Haskell - sri-csl/solidity
SRI-CSL/solidity
This is solc-verify, a modular verifier for Solidity.
Modular verifier for smart contract correctness.
C++ - runtimeverification/kontrol
runtimeverification/kontrol
Formal verification of contracts using property-based testing.
- sec-bit/adelaide
sec-bit/adelaide
The SECBIT Static Analysis Extension to Solidity Compiler
Static analysis extension for the Solidity compiler.
C++
