Lightweight static analysis for many languages. Find bug variants with patterns that look like source code.
7 daysStars17.6k24h gain+22Score12.9
Find trending repositories by name or description.
Lightweight static analysis for many languages. Find bug variants with patterns that look like source code.
mobsfscan is a static analysis tool that can find insecure code patterns in your Android and iOS source code. Supports Java, Kotlin, Swift, and Objective C Code. mobsfscan uses MobSF static analysis rules and is powered by semgrep and libsast pattern matcher.
A collection of my Semgrep rules to facilitate vulnerability research.