🎯 Static Analysis

The items that name it 14

• https://github.com/dmdhrumilmistry/security-harness
  repo2026-09-29It is written here as Static analysis (source review, data-flow tracing, PoC/payload construction).

  Core method used by the harness; explicitly scoped to code the user owns/is authorized to test, not live third-party systems

• OWASP OSS Risk 1: Known Vulnerabilities | Blog | Endor Labs
  article2026-09-11

  Analyzing application code without running it to find paths that could lead to vulnerable code; referenced academic work: 'Detection, assessment and mitigation of vulnerabilities in open source dependencies' and 'Prazi: From Package-based to Call-based Dependency Networks'

• Pyro (@0x3b33) on X
  thread2026-09-07
• Beetle
  repo2026-07-31

  Android APK + iOS IPA decompilation, manifest/plist, certificates, entitlements, and native binaries analysis

• Dalfox
  repo2026-07-25

  Discovery technique used to analyze parameters

• Rust
  article2026-07-24

  Topic area covered for Rust security review

• Awesome AI Web3 Security
  repo2026-07-18

  Used by GPTScan (hybrid GPT+static analysis), Slither MCP, Aether (AST/static analysis, 180+ detectors)

• ZX41R/awesome-reverse-engineering-and-malware-analysis
  repo2026-07-06

  examining binaries without execution; part of malware analysis and RE tracks

• Introducing GuardDog 3.0: new YARA rules engine, risk scoring, and sandboxing
  article2026-06-26It is written here as Static analysis (no code execution).

  GuardDog performs static analysis only and does not run/execute code from scanned packages, a deliberate design choice following the Unix philosophy.

• Endor Labs: AI AppSec Agents Cost 12x More Without Pre-Computed Security Context
  article2026-06-11It is written here as Static analysis (SAST).

  Deterministic security method described as not replaceable by an AI reasoning-layer agent

• Malware Analyst Course Bundle
  course2026-05-13

  analyzing malware without execution

• Strix
  article2026-05-07It is written here as Static analysis (traditional).

  Reads source code and matches patterns against known vulnerability signatures; fast but blind to runtime behavior, multi-step attack chains, and authentication context

• IronCurtain: Secure AI Agent Runtime
  writeup2026-05-07It is written here as Static analysis (hypothesis generation).

  Orchestrator/analyst agents statically map data flow and call chains to hypothesize vulnerabilities before validation

• A Idealistic View of Malware Analysis Definitions
  article2026-01-13

  Analysis of file content without execution: parsing PE sections, imports, header information, and stored data/code