SoftSec-KAIST/CodeAlchemist
CodeAlchemist: Semantics-Aware Code Generation to Find Vulnerabilities in JavaScript Engines (NDSS '19)
Employs semantics-aware assembly to generate test cases that exceed grammar-based fuzzing by leveraging AST transformations and probabilistic block reassembly. Supports multiple JS engines including V8, SpiderMonkey, ChakraCore, and JavaScriptCore through configurable preprocessing (rewrite/instrument) and tunable generation parameters (iteration limits, nesting depth, block reinvention probability). Discovered multiple JavaScriptCore CVEs and operates as a .NET-based command-line fuzzer on Linux.
242 stars. No commits in the last 6 months.
Stars
242
Forks
42
Language
F#
License
MIT
Category
Last pushed
Nov 11, 2019
Commits (30d)
0
Get this data via API
curl "https://pt-edge.onrender.com/api/v1/quality/ai-coding/SoftSec-KAIST/CodeAlchemist"
Open to everyone — 100 requests/day, no key needed. Get a free key for 1,000/day.
Higher-rated alternatives
howerj/dbcc
CAN DBC to C (and CSV, JSON and XML) compiler using the mpc parser combinator library
JhnW/devana
Python package to parse and generate C/C++ code as context aware preprocessor.
biojppm/regen
Easy C++ reflection and code generation
Samsung/UTopia
UT based automated fuzz driver generation
MASD-Project/dogen
Reference implementation of the MASD Code Generator.