Finds vulnerabilities in C/C++ source code
Flawfinder is a program that examines C source code and reports possible security weaknesses (``flaws'') sorted by risk level. It's very useful for quickly finding and removing some security problems before a program is widely released.
Python package to retrieve and manage data of the IMDb
IMDbPY is a Python package useful to retrieve and manage the data of the IMDb movie database about movies, people, characters and companies. Platform-independent, it can retrieve data from both the IMDb's web server and a local copy of the whole db.
Robust, Lightweight, Cross-platform, Template Software. STLSoft is a collection of STL and standard library extensions, and facades over operating-system and 3rd-party APIs.
SLOCCount is an easy-to-use tool that counts Source Lines of Code (SLOC). It auto-determines the language(s) (inc. C, C++, Ada, Assembly, shell, COBOL, C#, Fortran, Haskell, Java, LISP/Scheme, Perl, PHP, Python, Ruby, SQL). It also estimates cost & time.
X11::GUITest, is a Perl package, used for controlling applications by means of user emulation. This can be used to interact (SendKeys, ClickMouseButton, FindWindowLike, etc.) with applications running under an X Windows environment. Including applications built (GTK+, Qt, Motif, etc.) upon X11 / Xlib. You may find that this mechanism is easier to use then that provided by xautomation or xdotool.
Software Unit Tests (Language Independent Approach)
Automation of Unit and System Tests. Tests can be implemented in any language and on many platforms. The flexible approach enables the inclusion of many types of tests, such as memory leak checks (using valgrind), coding rule checks, complexity checks, etc. Tests are run by a simple call to hwut in a base directory of a project. In particular for C, HWUT supports make file generation using 'sos' and 'sols' modes. Remote control-able function stubs may be generated using the 'stub' mode. Test cases can be generated using the 'gen' mode, and state machine walkers by the 'sm_walker' mode. Over the last decade HWUT has matured towards a full fledged unit test tool for a wide variety of applications.
AceUnit (Advanced C and Embedded Unit): a comfortable C code unit test framework. AceUnit is JUnit 4.x style, easy, modular and flexible. AceUnit can be used in resource constraint environments, e.g. embedded software development.
A model-based test automation framework for GUI applications
This framework supports a wide variety of model-based GUI testing techniques. The innovation lies in the architecture of GUITAR, which uses plug-ins to support flexibility and extensibility. Software developers and quality assurance engineers may use this architecture to create new toolchains, new workflows based on the toolchains, and plug in a variety of measurement tools to conduct GUI testing. More detail is presented in this publication: GUITAR: An Innovative Tool for Automated Testing of GUI-driven Software. Bao N. Nguyen, Bryan Robbins, Ishan Banerjee, and Atif Memon. Automated Software Engineering Journal. p.21, 1. 2014
Open Source Application Server Appliance based on Open Source GlassFish
Unit Test for C is a very useful and powerful software development tool for C and C++ programmers. It is designed to provide a great deal of functionality in a very small package and functions nearly identically on Windows and UNIX systems.
banshee-- A toolkit for building constraint-based program analyses
Code Distance Visualizer is a static program analyzer. It learns patterns in user defined faulty and correct code instances and using visualization indicates which fragments in a program’s source code are the most similar to these instances.
Automatic correction of software bugs and grammar mistakes
Automatic correction of software bugs announced in compilers (clang, gcc) / Static Code Analysis tools (cppcheck, FindBugs) and grammar/style errors like in LanguageTool. Usage: use tool (e.g. cppcheck) and store results in a text file. Afterwards call: autoreplacerplus mytextfile
A simple and incredibly powerful tool for scripting and fuzzing arbitrary network protocols written using the Chicken Scheme-to-C compiler.
An Extensible memory leakage detection system which can be turn on/off just including or not a C header
A Python programming environment providing memory sizing, profiling and analysis, and a specification language that can formally specify aspects of Python programs and generate tests and documentation from a common source.
The Heap Checker is a library for debugging and developing robust and efficient dynamic memory management and string manipulation in C programs.
Little Software Stats is the first free and open source program that allows software developers to keep track of how their software is being used. It is coded in PHP/MySQL which allows it to run on most web servers.
This package will allow people to check, change, update the license of their projects. It will conform to all new licenses available.
Proshee is a Prolog type-inference system written in Prolog but depending on the banshee project in C (banshee.sourceforge.net). At present it manages very simple type-inference, but it has some problems with lists that need to be overcome.
Simple Fuzzer is a simple fuzzing framework which allows rapid development of protocol fuzzers for blackbox testing. It can fuzz across networks using TCP/UDP, IP4/IP6, and can be extended via plugins to perform in-depth fuzzing.
THP is a vulnerability assessment and penetration testing framework and CLI. It's aim is to help the security professional in it's everyday work.
http_test library for HP Load Runner web scripts
http_test library simplifies creation of web based HP Load Runner scripts by supporting number of features like: specifying global settings and transactions from files, automatic transaction naming, easy handling of the http headers, text traps and assertions, automatic relogin in case authentication token gets obsolete, and many others. Read the guide attached to this project for reference.
A GUI comparison tool that automates diffs detection between versions. You can record and play scenarios on two different releases of the same app (in sequential or parallel mode); jDiffChaser compares both screens and shows you the differences.
xContract is suite of per-language libraries that provide facilities for defining and enforcing software contracts. Intended to be used, where desired, in release modes/builds, xContract emphasises efficiency in addition to clarity and succinctness.