Formal Security for Web Technologies

All

27 repositories

graphjs
Public
MDG-based static vulnerability scanner specialized in analyzing npm packages and detecting taint-style and prototype pollution vulnerabilities.
javascript static-analysis vulnerability-detection
TypeScript
•1•12•0•0•Updated Apr 7, 2025Apr 7, 2025
explode-js
Public
Automated Exploit Generation for Node.js Packages
OCaml
•
MIT License
•0•2•3•0•Updated Apr 5, 2025Apr 5, 2025
explodejs-datasets
Public
JavaScript
•0•0•0•0•Updated Apr 5, 2025Apr 5, 2025
smtml
Public
An SMT solver frontend for OCaml
ocaml webassembly symbolic-execution z3 smt smt-lib alt-ergo cvc5 colibri2 bitwuzla
OCaml
•
MIT License
•8•34•16•3•Updated Apr 3, 2025Apr 3, 2025
ast-gen
Public
JavaScript
•
MIT License
•0•2•0•0•Updated Apr 2, 2025Apr 2, 2025
zeroday-results
Public
JavaScript
•0•0•0•0•Updated Mar 10, 2025Mar 10, 2025
test262
Public
JavaScript
•0•0•0•0•Updated Feb 10, 2025Feb 10, 2025
ecmasl-vim
Public
Vim Script
•
MIT License
•0•0•3•0•Updated Dec 30, 2024Dec 30, 2024
.github
Public
0•0•0•0•Updated Dec 26, 2024Dec 26, 2024
MemoryModels
Public
OCaml
•1•2•0•0•Updated Oct 24, 2024Oct 24, 2024
ocaml-cvc5
Public
OCaml bindings for the cvc5 SMT solver
ocaml cvc5
OCaml
•
GNU General Public License v3.0
•1•3•2•0•Updated Oct 23, 2024Oct 23, 2024
smt-comp
Public
SMT
•0•1•0•0•Updated Oct 22, 2024Oct 22, 2024
smt-testcomp23
Public
SMT
•0•0•1•0•Updated Oct 22, 2024Oct 22, 2024
explode-js_datasets
Public
JavaScript
•
Creative Commons Attribution Share Alike 4.0 International
•0•0•0•0•Updated Sep 24, 2024Sep 24, 2024
vulcan-dataset
Public
A improved fork of the curated dataset used in the VulcaN study. Original repository: https://github.com/VulcaN-Study/Supplementary-Material
JavaScript
•
Creative Commons Attribution Share Alike 4.0 International
•0•2•2•0•Updated Sep 24, 2024Sep 24, 2024
smt-collections-c
Public
Smtlib benchmarks collected during symbolic analysis of the Collections-C testsuite
SMT
•0•1•0•0•Updated Sep 17, 2024Sep 17, 2024
wasp
Public
WASP was superseded by: https://github.com/OCamlPro/owi
c testing webassembly symbolic-execution program-analysis
OCaml
•
MIT License
•1•14•3•0•Updated Aug 28, 2024Aug 28, 2024
wasp-private
Public archive
WebAssembly Symbolic Processor (WASP) private
WebAssembly
•
Apache License 2.0
•0•0•0•0•Updated Aug 22, 2024Aug 22, 2024
instrumentation2
Public archive
It's now part of explode-js: https://github.com/formalsec/explode-js
OCaml
•
GNU General Public License v3.0
•0•0•0•0•Updated Jul 16, 2024Jul 16, 2024
whilloc
Public
A simple "while"-like programming language that includes memory allocation support.
OCaml
•
GNU Affero General Public License v3.0
•0•7•4•0•Updated Apr 25, 2024Apr 25, 2024
encoding
Public archive
This project was renamed to Smt.ml (link below)
OCaml
•
GNU General Public License v3.0
•0•0•0•0•Updated Apr 22, 2024Apr 22, 2024
Test-Comp
Public
Test-Comp benchmarking scripts for wasp-c
Python
•2•0•0•0•Updated Mar 13, 2024Mar 13, 2024
Collections-C
Public
Gillian's Collections-C Symbolic Test Suite in Wasm
C
•
Other
•1•0•0•0•Updated Feb 6, 2024Feb 6, 2024
memory-models
Public
OCaml
•
GNU General Public License v3.0
•0•0•0•0•Updated Jan 15, 2024Jan 15, 2024
waspc
Public archive
OWI's C frontend now in https://github.com/OCamlPro/owi/pull/100
ocaml wasm symbolic-execution owi
C
•
Apache License 2.0
•2•0•4•0•Updated Jan 5, 2024Jan 5, 2024
formalsec.github.io
Public
HTML
•0•0•0•0•Updated Nov 27, 2023Nov 27, 2023
aws-cryptosdk-c
Public
C
•
Apache License 2.0
•0•0•0•0•Updated May 15, 2022May 15, 2022