HXSecurity / DongTai-Plugin-IDEALinks
Dongtai-plugin-idea is an IDEA plug-in developed by DongTai team for Java Web application developers. This plug-in provides functions such as vulnerability detection and code audit during application development, enabling developers to find application vulnerabilities more intuitively, quickly and in real time during application development.
☆28Updated last year
Alternatives and similar repositories for DongTai-Plugin-IDEA
Users that are interested in DongTai-Plugin-IDEA are comparing it to the libraries listed below
Sorting:
- vulhub-compose是一款屏蔽docker-compose的命令行工具,目的是降低火线平台社区用户使用vulhub靶场的难度,减少学习docker-compose的时间成本;同时,支持直接安装洞态IAST(原灵芝IAST)到vulhub靶场,用于漏洞复现、漏洞挖掘。☆46Updated 4 years ago
- Log4j 漏洞本地检测脚本。 Scan all java processes on your host to check whether it's affected by log4j2 remote code execution vulnerability (CVE-20…☆85Updated 3 years ago
- 《深入理解DAST动态应用程序安全测试》Dynamic Application Security Testing.☆53Updated 2 years ago
- java 漏洞平台包含各种CVE☆23Updated 3 years ago
- ☆41Updated 5 years ago
- 利用agent hock指定的class,在jar运行周期内,用于跟踪被执行的方法,辅助做一些事情,比如挖洞啊☆126Updated 5 years ago
- 打CTF实在厌倦了找利用链,就知道一个fastjson的版本,一堆依赖找啊找,头都疼。为了解决这个烦恼,用了卓卓师傅的fastjson黑名单工具和库,自己改造了一下。☆32Updated 5 years ago
- 解答开发关于安全漏洞的常见问题☆41Updated 5 years ago
- 一个针对防御 log4j2 CVE-2021-44228 漏洞的 RASP 工具。 A Runtime Application Self-Protection module specifically designed for log4j2 RCE (CVE-2021-442…☆123Updated 3 years ago
- 基于AST的JSONP劫持漏洞自动化挖掘☆93Updated 5 years ago
- 爬取各大SRC当日公告 | 通过微信通知的小工具 | 赏金工具☆101Updated 3 years ago
- Hamster是基于mitmproxy开发的异步被动扫描框架,基于http代理进行被动扫描,主要功能为重写数据包、签名、漏洞扫描、敏感参数收集等功能(开发中)。☆69Updated 10 months ago
- fastjson 1.2.68 版本 autotype bypass☆141Updated 3 years ago
- notes☆27Updated 2 years ago
- springboot getRequestURI acl bypass☆37Updated 4 years ago
- 收集整理一些漏洞,利用方法,poc等等,方便快速查阅☆59Updated 4 years ago
- 使用java agent反序列化注入内存shell☆68Updated 4 years ago
- 静态程序分析工具 主要生成方法的CFG和.java文件的AST☆132Updated 2 years ago
- 安卓APP安全测试所列资源☆21Updated 6 years ago
- 一个全新的敏感文件发现工具☆85Updated 4 years ago
- 记录各语言、框架中危险的sink,个人代码审计、漏洞研究使用。☆116Updated 3 years ago
- HTTP/HTTPS proxy server by golang [high performance version]☆54Updated 5 years ago
- DVPNET 公开漏洞知识库☆93Updated 4 years ago
- 用于WebLogic poc及exp测试的基础脚本,后续将集成各版本poc库☆94Updated 4 years ago
- 代码审计自动化系统,底层架构为蜻蜓编排系统,墨菲SCA,fortify,SemGrep,hema☆30Updated 6 months ago
- 又一款敏感文件泄漏检测工具☆105Updated 5 years ago
- Redis RCE 的几种方法☆90Updated last year
- 一款用于攻击spring boot actuator的集成环境,目前集成三种攻击方式,支持1.x、2.x☆86Updated 4 years ago
- 子域名监控式漏扫☆40Updated 5 years ago
- 自动化资产收集和漏洞发现工具☆33Updated 2 years ago