31 Repositories
Java static-analyzer Libraries
Redstone analyzer and debugger
Minecraft Multimeter Mod Install and use This mod runs on Fabric, so make sure you have that installed. Download the Fabric API if you don't have it a
BinAbsInspector: Vulnerability Scanner for Binaries
What is BinAbsInspector? BinAbsInspector (Binary Abstract Inspector) is a static analyzer for automated reverse engineering and scanning vulnerabiliti
XR3Player - The MOST ADVANCED JavaFX Media Player
Support me joining PI Network app with invitation code AlexKent I am in search for developers to keep on where i left XR3Player :) XR3Player ( Downloa
The MeterRegistryHolder class is designed to hold MeterRegistry as a static field.
MeterRegistryHolder The MeterRegistryHolder class is designed to hold MeterRegistry as a static field. Goal The goal is to simplify using MeterRegistr
Java - Packet Analyzer Application based on Java, Networking and Swing UI
Network-Packet-Tracer-using-Java Java - Packet Analyzer / Sniffing System Application based on Java, Networking and Swing UI Java - Packet Analyzer Ap
Java自动代码审计工具，尤其针对Spring框架，核心原理是模拟JVM栈帧进行分析，无需提供源码，通过一个JAR包即可
Java自动代码审计工具，尤其针对Spring框架，核心原理是模拟JVM栈帧进行分析，无需提供源码，通过一个JAR包即可
The modern Java bytecode editor
Recaf An easy to use modern Java bytecode editor that abstracts away the complexities of Java programs. Recaf abstracts away: Constant pool Stack fram
Java based open source static site/blog generator for developers & designers.
JBake JBake is a Java based open source static site/blog generator for developers. Documentation Full documentation is available on jbake.org. Contrib
Bank Statement Analyzer Application that currently runs in terminal with the commands: javac Application.java java Application [file-name].csv GUI coming soon...
Bank Statement Analyzer Application that currently runs in terminal with the commands: javac Application.java java Application [file-name].csv GUI coming soon...
mobsfscan is a static analysis tool that can find insecure code patterns in your Android and iOS source code.
mobsfscan is a static analysis tool that can find insecure code patterns in your Android and iOS source code. Supports Java, Kotlin, Swift, and Objective C Code. mobsfscan uses MobSF static analysis rules and is powered by semgrep and libsast pattern matcher.
Code metrics for Java code by means of static analysis
CK CK calculates class-level and method-level code metrics in Java projects by means of static analysis (i.e. no need for compiled code). Currently, i
Policeman's Forbidden API Checker
Policeman's Forbidden API Checker Allows to parse Java byte code to find invocations of method/class/field signatures and fail build (Apache Ant, Apac
Java bytecode static analyzer
This project is abandoned and unlikely will be supported in future HuntBugs 0.0.11 New Java bytecode static analyzer tool based on Procyon Compiler To
Java library for parsing report files from static code analysis.
Violations Lib This is a Java library for parsing report files like static code analysis. Example of supported reports are available here. A number of
The IK Analysis plugin integrates Lucene IK analyzer into elasticsearch, support customized dictionary.
IK Analysis for Elasticsearch The IK Analysis plugin integrates Lucene IK analyzer (http://code.google.com/p/ik-analyzer/) into elasticsearch, support
ReDoSHunter: A Combined Static and Dynamic Approach for Regular Expression DoS Detection
ReDoSHunter ReDoSHunter is a combined static and dynamic approach for regular expression DoS detection. LATEST NOTE (updated at 2021.09.13): ReDoSHunt
Burp plugin for the 1Password session protocol for use by security researchers. https://bugcrowd.com/agilebits
1Password session analyzer plugin for Burp Suite This repository contains a Burp plugin that adds a special message editor view to Burp to analyze and
Tackle Data-intensive Validity Analyzer
Tackle-DiVA (Data-intensive Validity Analyzer) Tackle-DiVA is a command-line tool for data-centric application analysis. It imports a set of target ap
Continuous Inspection
SonarQube Continuous Inspection SonarQube provides the capability to not only show health of an application but also to highlight issues newly introdu
Catch common Java mistakes as compile-time errors
Error Prone Error Prone is a static analysis tool for Java that catches common programming mistakes at compile-time. public class ShortSet { public
Detect uses of legacy Java APIs
Modernizer Maven Plugin Modernizer Maven Plugin detects uses of legacy APIs which modern Java versions supersede. These modern APIs are often more per
A static site for the Jenkins automation server
jenkins.io This repository is what powers the Jenkins website. This uses Awestruct with Asciidoctor under the hood to provide a very useful and compel
The fast scanner generator for Java™ with full Unicode support
JFlex JFlex is a lexical analyzer generator (also known as scanner generator) for Java. JFlex takes as input a specification with a set of regular exp
SpotBugs is FindBugs' successor. A tool for static analysis to look for bugs in Java code.
SpotBugs is the spiritual successor of FindBugs, carrying on from the point where it left off with support of its community. SpotBugs is licensed unde
Spoon is a metaprogramming library to analyze and transform Java source code (up to Java 15). :spoon: is made with :heart:, :beers: and :sparkles:. It parses source files to build a well-designed AST with powerful analysis and transformation API.
Spoon Spoon is an open-source library to analyze, rewrite, transform, transpile Java source code. It parses source files to build a well-designed AST
:coffee: SonarSource Static Analyzer for Java Code Quality and Security
Code Quality and Security for Java This SonarSource project is a code analyzer for Java projects. Information about the analysis of Java features is a
An extensible multilanguage static code analyzer.
PMD About PMD is a source code analyzer. It finds common programming flaws like unused variables, empty catch blocks, unnecessary object creation, and
A tool to help eliminate NullPointerExceptions (NPEs) in your Java code with low build-time overhead
NullAway: Fast Annotation-Based Null Checking for Java NullAway is a tool to help eliminate NullPointerExceptions (NPEs) in your Java code. To use Nul
A static analyzer for Java, C, C++, and Objective-C
Infer Infer is a static analysis tool for Java, C++, Objective-C, and C. Infer is written in OCaml. Installation Read our Getting Started page for det
Catch common Java mistakes as compile-time errors
Error Prone Error Prone is a static analysis tool for Java that catches common programming mistakes at compile-time. public class ShortSet { public
Checkstyle is a development tool to help programmers write Java code that adheres to a coding standard. By default it supports the Google Java Style Guide and Sun Code Conventions, but is highly configurable. It can be invoked with an ANT task and a command line program.
Checkstyle is a tool for checking Java source code for adherence to a Code Standard or set of validation rules (best practices). Members chat: Contrib