ASTTeam / IASTLinks
《深入理解IAST交互式应用安全测试》Interactive Application Security Testing.
☆13Updated 3 years ago
Alternatives and similar repositories for IAST
Users that are interested in IAST are comparing it to the libraries listed below
Sorting:
- 《深入理解DAST动态应用程序安全测试》Dynamic Application Security Testing.☆54Updated 3 years ago
- Spring Cloud Netflix Hystrix Dashboard template resolution vulnerability CVE-2021-22053☆37Updated 3 years ago
- 《Spring漏洞研究》☆47Updated 3 years ago
- CodeQL 寻找 JNDI利用 Lookup接口☆164Updated 3 years ago
- Shiro漏洞实例源码☆26Updated 4 years ago
- Scanner platform based on Kubernetes and Argo-Workflow 基于k8s和argo工作流的扫描器☆110Updated 2 years ago
- 收录go语言编写的项目、框架和组件出现的cve，或者一些相关的利用方式的文章☆46Updated 3 years ago
- cloud-audit （云安全审计助手）是检测公有云厂商AK/SK泄漏被利用的工具，通过定期调用云平台接口审计日志，基于异常行为/黑特征/基线发现疑似入侵行为 。☆42Updated last year
- Apache Dubbo漏洞测试Demo及其POC☆64Updated 2 years ago
- TongASDP漏洞测试环境☆35Updated 2 years ago
- Java agent without file 无文件的Java agent☆82Updated 3 years ago
- PaddingZip is a tool that you can craft a zip file that contains the padding characters between the file content.☆76Updated 3 years ago
- JAVA IAST Example☆49Updated 4 years ago
- 是我阅读各种源码写的笔记☆74Updated 3 years ago
- Java Agent memory horse scanner combined with Call Graph modus☆65Updated 2 years ago
- ARL官方仓库备份项目+指纹添加工具：ARL(Asset Reconnaissance Lighthouse)资产侦察灯塔系统旨在快速侦察与目标关联的互联网资产，构建基础资产信息库。 协助甲方安全团队或者渗透测试人员有效侦察和检索资产，发现存在的薄弱点和攻击面。☆17Updated last year
- java☆54Updated 2 years ago
- 当死去的记忆突然开始攻击我，我终于想起了我还写过一款十分十分垃圾的 rasp 靶场。☆79Updated 3 years ago
- notes☆27Updated 3 years ago
- cve-2022-34169 延伸出的Jdk Xalan的payload自动生成工具，可根据不同的Jdk生成出其所对应的xslt文件☆92Updated 2 years ago
- ☆108Updated 3 years ago
- 记录各语言、框架中危险的sink，个人代码审计、漏洞研究使用。☆115Updated 3 years ago
- xxe oob receive file via web and ftp server☆103Updated 6 years ago
- A list for Spring Security☆125Updated last year
- 基于污点分析的JSP Webshell检测工具，模拟JVM的栈帧操作进行数据流分析，可以检测出各种变形的JSP Webshell☆21Updated 4 years ago
- 静态程序分析工具 主要生成方法的CFG和.java文件的AST☆132Updated 2 years ago
- 基于污点分析和模拟栈帧技术的JSP Webshell检测☆48Updated 2 months ago
- API Security DAST & Oprations☆17Updated 2 years ago
- 解答开发关于安全漏洞的常见问题☆41Updated 5 years ago
- Log4j 漏洞本地检测脚本。 Scan all java processes on your host to check whether it's affected by log4j2 remote code execution vulnerability (CVE-20…☆84Updated 4 years ago