Crypto

Tools

Cobra - A fast, flexible and simple development environment framework for Ethereum smart contract, testing and deployment on Ethereum virtual machine(EVM). https://github.com/cobraframework/cobra

MAIAN - сканированиС уязвимостСй Π² смарт-ΠΊΠΎΠ½Ρ‚Ρ€Π°ΠΊΡ‚Π°Ρ… Eth http://telegra.ph/MAIAN---tulza-dlya-testirovaniya-bezopasnosti-smart-kontraktov-na-Ethereum-06-12

Slither β€” Solidity static scanner https://github.com/crytic/slither

Semgrep rules for eth smart contracts: https://github.com/Raz0r/semgrep-smart-contracts

Brownie β€” python based dev & test eth smart contracts framework https://github.com/eth-brownie/brownie

A framework for creating PoC's for Solana Smart Contracts β€” https://github.com/neodyme-labs/solana-poc-framework

CWE list для смарт-ΠΊΠΎΠ½Ρ‚Ρ€Π°ΠΊΡ‚ΠΎΠ²: https://swcregistry.io/

Tools that are required for testing (ΠΊΠ°ΠΊΠΈΠ΅-Ρ‚ΠΎ инструмСнты ΠΈΠ· ΡΡ‚Π°Ρ‚ΡŒΠΈ с ΠΌΠ΅Π΄ΠΈΡƒΠΌΠ°, Π½Π°Π΄ΠΎ ΡΠΌΠΎΡ‚Ρ€Π΅Ρ‚ΡŒ ΠΈ ΠΏΡ€ΠΎΠ²Π΅Ρ€ΡΡ‚ΡŒ):

  1. Browser based Solidity IDE: http://remix.ethereum.org/

  2. Securify V2.0: https://github.com/eth-sri/securify2

  3. Oyente: https://github.com/enzymefinance/oyente

  4. The Hydra Aplha: https://github.com/IC3Hydra/Hydra

  5. Porosity: https://github.com/msuiche/porosity

  6. Manticore: https://github.com/trailofbits/manticore/

  7. Etherplays: https://github.com/crytic/ethersplay

  8. Online Solidity Decompiler: https://ethervm.io/decompile

  9. Mythril: https://github.com/ConsenSys/mythril

  10. Echidna: https://github.com/crytic/echidna

  11. Slither: https://github.com/trailofbits/slither

Web3 support for burp: https://research.nccgroup.com/2022/11/10/tool-release-web3-decoder-burp-suite-extension/amp/

Web3 security tool: https://xmind.works/share/zfdeD07U

PreviousTalks & PapersNextVulnerabilities

Last updated