Alternatives and similar repositories for javaweb-rasp

Users that are interested in javaweb-rasp are comparing it to the libraries listed below

• rmb122 / easyrasp
  简单实现的 Java RASP
  ☆35Updated 4 years ago
• ice-doom / CodeQLRule
  个人使用CodeQL编写的一些规则
  ☆176Updated 3 years ago
• SummerSec / SPATool
  静态程序分析工具 主要生成方法的CFG和.java文件的AST
  ☆132Updated 2 years ago
• su18 / rasp-vuln
  当死去的记忆突然开始攻击我，我终于想起了我还写过一款十分十分垃圾的 rasp 靶场。
  ☆78Updated 3 years ago
• iiiusky / java_iast_example
  JAVA IAST Example
  ☆49Updated 3 years ago
• testtttter / ACAF
  Auto Code Audit Framework for Java
  ☆96Updated 3 years ago
• tabby-sec / tabby-path-finder
  A neo4j procedure for tabby
  ☆128Updated 3 months ago
• changheluor007 / JSPKiller
  基于污点分析的JSP Webshell检测工具，模拟JVM的栈帧操作进行数据流分析，可以检测出各种变形的JSP Webshell
  ☆21Updated 3 years ago
• HackJava / Spring
  《Spring漏洞研究》
  ☆47Updated 3 years ago
• BeichenDream / Kcon2021Code
  ☆273Updated 3 years ago
• boundaryx / cloudrasp-log4j2
  一个针对防御 log4j2 CVE-2021-44228 漏洞的 RASP 工具。 A Runtime Application Self-Protection module specifically designed for log4j2 RCE (CVE-2021-442…
  ☆123Updated 3 years ago
• flowerwind / JspFinder
  一款通过污点追踪发现Jsp webshell的工具(A tool to find Jsp Webshell through stain tracking)
  ☆178Updated 3 years ago
• fengupupup / RocB
  鹏 RocB - Java代码审计IDEA插件 SAST
  ☆150Updated 3 years ago
• SugarP1g / LearningSecurity
  ☆49Updated last year
• woodpecker-appstore / jexpr-encoder-utils
  Java表达式语句生成器
  ☆193Updated last year
• xyy-ws / NoAgent-memshell-scanner
  ☆108Updated 3 years ago
• ccdr4gon / Dr4gonSword
  ☆96Updated last year
• tongasdp / tongasdp-test
  TongASDP漏洞测试环境
  ☆35Updated 2 years ago
• R17a-17 / JavaVulnSummary
  Java漏洞分析汇合
  ☆142Updated 3 years ago
• tcyba / this_is_my_study
  this_my_ctf
  ☆17Updated 3 years ago
• javaweb-rasp / javaweb-vuln
  RASP测试靶场
  ☆173Updated 2 years ago
• keven1z / weblogic_memshell
  适用于weblogic和Tomcat的无文件的内存马(memshell)
  ☆269Updated 3 years ago
• ice-doom / codeql_compile
  自动反编译闭源应用，创建codeql数据库
  ☆313Updated 3 years ago
• ODDFuzz / ODDFuzz
  S&P2023 Paper
  ☆39Updated 3 years ago
• KpLi0rn / ysoserial
  在原有yso基础上实现依赖分离，内存马注入等功能。A proof-of-concept tool for generating payloads that exploit unsafe Java object deserialization.
  ☆68Updated 3 years ago
• waderwu / My-CTF-Challenges
  Collection of CTF Web challenges I made
  ☆52Updated 2 years ago
• threedr3am / log-agent
  利用agent hock指定的class，在jar运行周期内，用于跟踪被执行的方法，辅助做一些事情，比如挖洞啊
  ☆126Updated 5 years ago
• xiaopan233 / Java_agent_without_file
  Java agent without file 无文件的Java agent
  ☆82Updated 3 years ago
• ttonys / CodeQLAnalyseJar
  CodeQL分析闭源Jar包脚本，基于Apache Ant构建CodeQL数据库
  ☆38Updated 3 years ago
• Y4tacker / HackingFernFlower
  2023白帽补天大会部分代码
  ☆127Updated last year