weggli is a fast and robust semantic search tool for C and C++ codebases. It is designed to help security researchers identify interesting functionality in large codebases.
Semble: Fast and Accurate Code Search for Agents
Fast and Accurate Code Search for Agents. Uses ~98% fewer tokens than grep+read
Code scanning shows AI security detections on pull requests - GitHub Changelog
GitHub code scanning now surfaces AI-powered security detections directly on pull requests, expanding vulnerability coverage to languages and frameworks not currently supported by CodeQL. These detections help teams identify and…
Using Claude to reduce the attack surface of code
Automated attack surface analysis and reduction can meaningfully improve the security of deployed software in the near term. In this post, we preview data we’ve collected from applying attack surface reduction techniques to large open-source codebases using Claude.
metacraft-labs/codetracer
CodeTracer is a user-friendly time-traveling debugger designed to support a wide range of programming languages.
Spicy — Generating Robust Parsers for Protocols & File Formats — Spicy v1.18.0-dev.63
Spicy is a parser generator that makes it easy to create robust C++ parsers for network protocols, file formats, and more. Spicy is a bit like a “yacc for protocols”, but it’s much more than that: It’s an all-in-one system enabling developers to write attributed grammars that describe both syntax and semantics of an input format using a single, unified language. Think of Spicy as a domain-specific scripting language for all your parsing needs.
Sourcegraph — Code Understanding, Oversight and Evolution
Give humans and agents complete context to understand, oversee, and evolve the world's largest, most complex codebases.
imput
We develop private, efficient, and respectful software. We also do security research, reverse engineering, and develop network services.
Engineering High-Performance Parsers with Data-Oriented Design
Notes from building Yuku: the AST is flat arrays of u32 indices instead of a pointer tree, and memory layout, allocation, strings, unicode, and serialization all follow from that one decision.
Defining the common primitive — Tonk
Our beta test results have shown that Tonk's system for small software was one of many use cases, and that there is a common primitive between them all. A tonk space is data at a link, with its structure, views and rules. People, agents and systems read and write it with the permissions in the link.
Rust for Java developers
Introduction to the Rust programming language for java developers, (complete with code sampes) with a focus on shared concepts.
edoardottt/awesome-hacker-search-engines
A curated list of awesome search engines useful during Penetration testing, Vulnerability assessments, Red/Blue Team operations, Bug Bounty and more