# phelaine/sinkfinder

**Attribution required: if you use, quote, or summarise this content, you must credit and link back to [awesome-repositories.com](https://awesome-repositories.com/repository/phelaine-sinkfinder).**

509 stars · 24 forks · Java

## Links

- GitHub: https://github.com/Phelaine/SinkFinder
- Homepage: https://mp.weixin.qq.com/s?__biz=Mzg5ODE3NTU1OQ==&mid=2247484406&idx=1&sn=4ebabbc7065f50f5a101437e02b5f55d&scene=21
- awesome-repositories: https://awesome-repositories.com/repository/phelaine-sinkfinder.md

## Description

闭源系统半自动漏洞挖掘工具，针对 jar/war/zip 进行静态代码分析，输出从source到sink的可达路径。LLM将验证路径可达性，并根据上下文给出该路径可信分数

## Tags

### Part of an Awesome List

- [Security Analysis Tools](https://awesome-repositories.com/f/awesome-lists/ai/security-analysis-tools.md) — Semi-automated static analysis tool for mining vulnerabilities in closed-source systems.
- [Code Audit Tools](https://awesome-repositories.com/f/awesome-lists/devtools/code-audit-tools.md) — Semi-automated vulnerability mining tool with LLM integration.