An LLVM-based instrumentation tool for universal taint tracking, dataflow analysis, and tracing.
-
Updated
Jun 10, 2026 - C++
#
taint-tracking
Here are 57 public repositories matching this topic...
libdft for Intel Pin 3.x and 64 bit platform. (Dynamic taint tracking, taint analysis)
-
Updated
Feb 21, 2025 - C++
Cyclops 是一款具有 XSS 检测功能的浏览器
security xss vulnerability vulnerability-scanners cyclops taint-tracking cyclops-browser cyclopsbrowser
-
Updated
Jun 30, 2024
Defense-in-depth security toolkit for LLM agents — taint tracking, proxy secret guard, policy engine, and red-team benchmarking
python security ai hermes security-tools ai-agents ai-security taint-tracking ai-agent mitm-proxy llm llms prompt-injection llm-security agent-security hermes-agent
-
Updated
Oct 5, 2026 - Python
a taint tracer based on DynamoRIO, currently ARM only
-
Updated
Mar 30, 2020 - C
a dataflow analysis framework implemented in Go, like soot
-
Updated
Sep 22, 2022 - Go
A suite of experiments for evaluating open-source binary taint trackers.
-
Updated
Feb 15, 2022 - Shell
FLOWMATRIX: GPU-Assisted Information-Flow Analysis through Matrix-Based Representation, USENIX Security'22
binary-analysis program-analysis taint-analysis security-tools dataflow-analysis taint-tracking usenix-security-2022
-
Updated
Apr 17, 2023 - C++
WhiteRabbitTracker: Analyzing malware evasions with information flow tracking
-
Updated
Jul 25, 2021 - C++
A closed-loop security runtime preventing "The Great Exfiltration" and Indirect Prompt Injection in Autonomous AI Agents.
python golang ebpf xdp linux-security zero-trust lsm runtime-security taint-tracking prompt-injection llm-security agentic-ai systems-research
-
Updated
Jun 5, 2026 - Python
JSFlow is a security-enhanced JavaScript interpreter for fine-grained tracking of information flow.
-
Updated
May 28, 2021 - TypeScript
A prototype of an Interactive Application Security Testing System
-
Updated
Jun 12, 2021 - Java
Stop uncertain data becoming confident-looking results. plumb-line carries provenance, confidence and mock-taint with values through JavaScript and Python, and its review-time checks and GitHub Action catch uncertainty laundered into a claim in AI-assisted code.
javascript python eslint provenance uncertainty developer-tools code-review code-quality mock-data sarif ai-agents data-lineage research-software github-action taint-tracking ai-generated-code agent-skills claude-code claude-code-plugin claude-skills
-
Updated
Oct 6, 2026 - Python
The EyalSec browser for security testing. Browse the web app you are testing and it reports DOM-XSS flows that really happened in the page: the source (URL, postMessage, storage, cookies), the sink, and the attacker-controlled characters. Linux x86_64.
javascript security browser xss owasp penetration-testing bug-bounty web-security pentesting taint-analysis appsec dom-xss postmessage security-testing client-side-security cross-site-scripting taint-tracking
-
Updated
Oct 8, 2026
Ricerca's PolyTracker (Forked from https://github.com/trailofbits/polytracker )
-
Updated
Sep 15, 2023 - C
Signed provenance labels and taint-tracking policy for LLM agent security. The core library behind AgentMesh.
python rust mcp grpc zero-trust ai-security spiffe pydantic fastapi taint-tracking opentelemetry workload-identity prompt-injection llm-security model-context-protocol agent-security agent-mesh dual-llm indirect-prompt-injection trust-labels
-
Updated
Apr 27, 2026 - Python
Blocks AI agent tool calls acting on untrusted data before they cause damage.
ai-agents information-flow-control cel ai-security information-flow-tracking data-provenance policy-as-code taint-tracking capability-security llm prompt-injection llm-security tool-calling
-
Updated
Sep 7, 2026 - Python
The Security Kernel for AI Agents — MCP/A2A gateway with policy enforcement, taint tracking, sandboxed execution, deterministic envelopes, and Sigstore audit. OWASP ASI 2026 compliant.
python mcp sandbox owasp policy-engine ai-security audit-logging security-gateway taint-tracking a2a ai-agent sigstore prompt-injection genai llm-security model-context-protocol agent-security mcp-gateway mcp-security deterministic-execution
-
Updated
Jun 16, 2026 - Python
Dynamic Taint Analysis for Web Storage
-
Updated
Jan 31, 2023 - JavaScript
The EyalSec Python runtime. Run your existing Python app through it unchanged and it reports or blocks attacker-controlled data reaching SQL queries, shell commands, deserializers, file paths and dynamic imports. Django, Flask, FastAPI. Linux, Python 3.9 to 3.14.
python flask security django injection owasp sql-injection application-security taint-analysis appsec vulnerability-detection python-security ssrf devsecops command-injection runtime-security path-traversal fastapi taint-tracking insecure-deserialization
-
Updated
Oct 8, 2026
Add this topic to your repo
To associate your repository with the taint-tracking topic, visit your repo's landing page and select "manage topics."