17 repository-uri
Awesome GitHub RepositoriesSecurity Analysis Tools
Static and dynamic analysis tools for identifying vulnerabilities in smart contracts.
Explore 17 awesome GitHub repositories matching part of an awesome list · Security Analysis Tools. Refine with filters or upvote what's useful.
Awesome Security Analysis Tools GitHub Repositories
Găsește cele mai bune repo-uri cu AI.Vom căuta cele mai potrivite repository-uri folosind AI.
- crytic/slither
crytic/slither
6,141Vezi pe GitHubStatic analysis framework for Solidity code.
Pythonethereumsoliditystatic-analysis - consensys/mythril
ConsenSys/mythril
4,251Vezi pe GitHubMythril este un analizor de securitate pentru smart contracte în Ethereum Virtual Machine care utilizează execuția simbolică pentru a identifica vulnerabilitățile în bytecode înainte de deployment. Funcționează ca un scaner de vulnerabilități și auditor formal, tratând input-urile programului ca simboluri matematice pentru a demonstra prezența bug-urilor în logica contractului. Instrumentul efectuează o analiză la nivel de bytecode pentru a detecta defecte care pot fi ascunse de compilatoarele de nivel înalt. Acesta integrează SMT solvers pentru a determina dacă stările specifice de vulnerabilitate sunt accesibile și compară urmele de execuție simbolică cu o bibliotecă de semnături cunoscute ale defectelor de securitate. Proiectul acoperă o gamă largă de capabilități de analiză a securității, inclusiv detectarea vulnerabilităților blockchain, auditarea formală a logicii contractelor și testarea automată a securității. De asemenea, oferă integrare pentru workflow-urile Git pentru a valida codul ca parte a procesului de commit.
Open-source EVM bytecode security analysis tool.
Python - trailofbits/manticore
trailofbits/manticore
3,855Vezi pe GitHubManticore is a symbolic execution engine designed for the analysis of binary executables and smart contracts. It functions as an automated vulnerability scanner and verification platform that systematically traverses program execution paths to identify security flaws, validate business invariants, and ensure software properties hold true under all possible input conditions. The engine distinguishes itself through a unified instruction set abstraction that enables consistent analysis across diverse architectures and contract formats. It provides a programmatic interface for deep customization,
Symbolic execution tool for smart contracts and binaries.
Python - sigp/solidity-security-blog
sigp/solidity-security-blog
1,524Vezi pe GitHubComprehensive list of known attack vectors and common anti-patterns
Curated list of attack vectors and anti-patterns.
- melonproject/oyente
melonproject/oyente
1,340Vezi pe GitHubAn Analysis Tool for Smart Contracts
Alternative static smart contract security analysis.
JavaScript - securing/dumpsterdiver
securing/DumpsterDiver
1,033Vezi pe GitHubTool to search secrets in various filetypes.
Automated scanning for hardcoded secrets and sensitive credentials in data.
Python - raineorshine/solgraph
raineorshine/solgraph
1,028Vezi pe GitHubVisualize Solidity control flow for smart contract security analysis. :dollar: ⇆ :dollar:
Visualize Solidity control flow for security analysis.
JavaScriptethereumsolidity - crytic/ethersplay
crytic/ethersplay
EVM dissassembler
EVM disassembler for smart contract inspection.
Python - sec-bit/awesome-buggy-erc20-tokens
sec-bit/awesome-buggy-erc20-tokens
A Collection of Vulnerabilities in ERC20 Smart Contracts With Tokens Affected
Collection of known vulnerabilities in token contracts.
Python - factionsecurity/faction
factionsecurity/faction
Faction is now an OWASP Project! You can find more information here
Framework for automating penetration testing reports and vulnerability tracking.
Java - pessimistic-io/slitherin
pessimistic-io/slitherin
Slither Detectors by Pessimistic.io
Plugin providing additional security detectors for static analysis.
Python - ic3hydra/hydra
IC3Hydra/Hydra
Framework for cryptoeconomic contract security, decentralized security bounties. Live on Ethereum.
Framework for cryptoeconomic contract security and bounties.
Haskell - sri-csl/solidity
SRI-CSL/solidity
This is solc-verify, a modular verifier for Solidity.
Modular verifier for smart contract correctness.
C++ - runtimeverification/kontrol
runtimeverification/kontrol
Formal verification of contracts using property-based testing.
- sec-bit/adelaide
sec-bit/adelaide
The SECBIT Static Analysis Extension to Solidity Compiler
Static analysis extension for the Solidity compiler.
C++
