ASTTeam / IASTLinks
《深入理解IAST交互式应用安全测试》Interactive Application Security Testing.
☆13Updated 3 years ago
Alternatives and similar repositories for IAST
Users that are interested in IAST are comparing it to the libraries listed below
Sorting:
- 《深入理解DAST动态应用程序安全测试》Dynamic Application Security Testing.☆55Updated 3 years ago
- Spring Cloud Netflix Hystrix Dashboard template resolution vulnerability CVE-2021-22053☆37Updated 3 years ago
- TongASDP漏洞测试环境☆35Updated 2 years ago
- JAVA IAST Example☆49Updated 4 years ago
- notes☆27Updated 3 years ago
- 收录go语言编写的项目、框架和组件出现的cve，或者一些相关的利用方式的文章☆47Updated 3 years ago
- CodeQL 寻找 JNDI利用 Lookup接口☆166Updated 3 years ago
- cloud-audit （云安全审计助手）是检测公有云厂商AK/SK泄漏被利用的工具，通过定期调用云平台接口审计日志，基于异常行为/黑特征/基线发现疑似入侵行为。☆42Updated last year
- 《Spring漏洞研究》☆47Updated 3 years ago
- PaddingZip is a tool that you can craft a zip file that contains the padding characters between the file content.☆81Updated 3 years ago
- Java agent without file 无文件的Java agent☆82Updated 3 years ago
- 记录各语言、框架中危险的sink，个人代码审计、漏洞研究使用。☆117Updated 4 years ago
- 是我阅读各种源码写的笔记☆73Updated 3 years ago
- Unofficial Dockerfile and scripts for building CodeQL databases for the OpenJDK☆49Updated 2 years ago
- Apache Dubbo漏洞测试Demo及其POC☆65Updated 2 years ago
- Scanner platform based on Kubernetes and Argo-Workflow 基于k8s和argo工作流的扫描器☆111Updated 2 years ago
- Log4j 漏洞本地检测脚本。 Scan all java processes on your host to check whether it's affected by log4j2 remote code execution vulnerability (CVE-20…☆84Updated 4 years ago
- Go-sec-code is a project for learning Go vulnerability code.☆50Updated 2 years ago
- ☆41Updated 4 years ago
- 安全升级jar包时，辅助检测Java Archive (JAR) 包之间兼容性，各类符号引用的存在检测，包括方法、方法签名、字段定义和引用、类引用等等☆14Updated last year
- xxe oob receive file via web and ftp server☆105Updated 6 years ago
- 静态程序分析工具 主要生成方法的CFG和.java文件的AST☆132Updated 2 years ago
- A list for Spring Security☆128Updated 2 years ago
- 解答开发关于安全漏洞的常见问题☆41Updated 5 years ago
- fortify内置规则加密破解☆34Updated 5 years ago
- 一个针对防御 log4j2 CVE-2021-44228 漏洞的 RASP 工具。 A Runtime Application Self-Protection module specifically designed for log4j2 RCE (CVE-2021-442…☆124Updated 4 years ago
- cve-2022-34169 延伸出的Jdk Xalan的payload自动生成工具，可根据不同的Jdk生成出其所对应的xslt文件☆93Updated 3 years ago
- Shiro漏洞实例源码☆26Updated 4 years ago
- java☆54Updated 3 years ago
- 利用agent hock指定的class，在jar运行周期内，用于跟踪被执行的方法，辅助做一些事情，比如挖洞啊☆125Updated 5 years ago