HXSecurity / DongTaiLinks
Dongtai IAST is an open-source Interactive Application Security Testing (IAST) tool that enables real-time detection of common vulnerabilities in Java applications and third-party components through passive instrumentation. It is particularly suitable for use in the testing phase of the development pipeline.
☆1,297Updated 3 months ago
Alternatives and similar repositories for DongTai
Users that are interested in DongTai are comparing it to the libraries listed below
Sorting:
- 安全、快捷、高交互、企业级的蜜罐管理系统，护网；支持多种协议蜜罐、蜜签、诱饵等功能。A safe, fast, highly interactive and enterprise level honeypot management system, supports mult…☆1,267Updated last year
- veinmind-tools 是由长亭科技自研，基于 veinmind-sdk 打造的容器安全工具集☆1,620Updated last year
- Attack surface mapping☆1,479Updated last year
- 一款甲方资产巡航扫描系统。系统定位是发现资产，进行端口爆破。帮助企业更快发现弱口令问题。主要功能包括: 资产探测、端口爆破、定时任务、管理后台识别、报表展示☆1,805Updated 3 years ago
- Scan for sensitive information easily and effectively.☆987Updated last month
- 边界打点后的自动化渗透工具☆1,868Updated 4 years ago
- Java Agent is a Java application probe of DongTai IAST, which collects method invocation data during runtime of Java application by dynam…☆693Updated last year
- 傻瓜式漏洞PoC测试框架☆1,452Updated last year
- 开源、轻量、快速、跨平台 的网站漏洞扫描工具，帮助您快速检测网站安全隐患。功能 端口扫描(port scan) 指纹识别(fingerprint) 漏洞检测(nday check) 智能爆破 (admin brute) 敏感文件扫描(file fuzz)☆1,592Updated last year
- 飞刃是一套完整的企业级黑盒漏洞扫描系统，集成漏洞扫描、漏洞管理、扫描资产、爬虫等服务。 拥有强大的漏洞检测引擎和丰富的插件库，覆盖多种漏洞类型和应用程序框架。☆1,151Updated 2 years ago
- Nemo 是用来进行自动化信息收集的一个简单平台，通过集成常用的信息收集工具和技术，实现对内网及互联网资产信息的自动收集，提高隐患排查和渗透测试的工作效率。☆1,884Updated last month
- Ladon for Kali 全平台开源内网渗透扫描器,Windows/Linux/Mac/路由器内网渗透，使用它可轻松一键批量探测C段、B段、A段存活主机、高危漏洞检测MS17010、SmbGhost，远程执行SSH/Winrm，密码爆破SMB/SSH/FTP/Mysql…☆1,682Updated last year
- Passive Security Scanner (被动式安全扫描器)☆1,939Updated 2 years ago
- 一款适用于红蓝对抗中的仿真钓鱼系统☆1,507Updated 2 years ago
- ☕️ Java Security，安全编码和代码审计☆1,637Updated 5 months ago
- Fiora：漏洞PoC框架Nuclei的图形版。快捷搜索PoC、一键运行Nuclei。即可作为独立程序运行，也可作为burp插件使用。☆1,252Updated last month
- bayonet是一款src资产管理系统，从子域名、端口服务、漏洞、爬虫等一体化的资产管理系统☆1,493Updated 2 years ago
- 一个高价值漏洞采集与推送服务 | Collect valueable vulnerabilities and push them to various services☆1,651Updated 2 months ago
- Packer Fuzzer is a fast and efficient scanner for security detection of websites constructed by javascript module bundler such as Webpack…☆3,115Updated last year
- Kunyu, more efficient corporate asset collection☆1,046Updated 6 months ago
- ServerScan一款使用Golang开发的高并发网络扫描、服务探测工具。☆1,622Updated last year
- domain_hunter的高级版本，SRC挖洞、HW打点之必备！自动化资产收集；快速Title获取；外部工具联动；等等☆2,088Updated this week
- ☆1,483Updated 2 years ago
- Mars(战神)——资产发现、子域名枚举、C段扫描、资产变更监测、端口变更监测、域名解析变更监测、Awvs扫描、POC检测、web指纹探测、端口指纹探测、CDN 探测、操作系统指纹探测、泛解析探测、WAF探测、敏感信息检测等等☆1,305Updated 5 years ago
- Metarget is a framework providing automatic constructions of vulnerable infrastructures.☆1,297Updated 4 months ago
- shiro反序列化漏洞综合利用,包含（回显执行命令/注入内存马）修复原版中NoCC的问题 https://github.com/j1anFen/shiro_attack☆2,281Updated last year
- KunLun-M是一个完全开源的静态白盒扫描工具，支持PHP、JavaScript的语义扫描，基础安全、组件安全扫描，Chrome Ext\Solidity的基础扫描。☆2,362Updated 2 months ago
- 一个漏洞扫描器粘合剂,添加目标后30款工具自动调用；支持 web扫描、系统扫描、子域名收集、目录扫描、主机扫描、主机发现、组件识别、URL爬虫、XRAY扫描、AWVS自动扫描、POC批量验证，SSH批量测试、vulmap。☆1,794Updated last year
- Alibaba-Nacos-Unauthorized/ApacheDruid-RCE_CVE-2021-25646/MS-Exchange-SSRF-CVE-2021-26885/Oracle-WebLogic-CVE-2021-2109_RCE/RG-CNVD-2021-…☆1,082Updated 2 years ago
- Security Orchestration, Automation and Response (SOAR) Platform. 安全编排与自动化响应平台，无需编写代码的安全自动化，使用 SOAR 可以让团队工作更加高效☆1,533Updated last year