HXSecurity / DongTai-Plugin-IDEA
Dongtai-plugin-idea is an IDEA plug-in developed by DongTai team for Java Web application developers. This plug-in provides functions such as vulnerability detection and code audit during application development, enabling developers to find application vulnerabilities more intuitively, quickly and in real time during application development.
☆27Updated last year
Alternatives and similar repositories for DongTai-Plugin-IDEA:
Users that are interested in DongTai-Plugin-IDEA are comparing it to the libraries listed below
- vulhub-compose是一款屏蔽docker-compose的命令行工具，目的是降低火线平台社区用户使用vulhub靶场的难度，减少学习docker-compose的时间成本；同时，支持直接安装洞态IAST（原灵芝IAST）到vulhub靶场，用于漏洞复现、漏洞挖掘。☆45Updated 4 years ago
- java 漏洞平台包含各种CVE☆23Updated 2 years ago
- notes☆27Updated 2 years ago
- Log4j 漏洞本地检测脚本。 Scan all java processes on your host to check whether it's affected by log4j2 remote code execution vulnerability (CVE-20…☆84Updated 3 years ago
- 利用agent hock指定的class，在jar运行周期内，用于跟踪被执行的方法，辅助做一些事情，比如挖洞啊☆126Updated 4 years ago
- 代码审计自动化系统,底层架构为蜻蜓编排系统,墨菲SCA,fortify,SemGrep,hema☆28Updated last month
- ☆41Updated 4 years ago
- 打CTF实在厌倦了找利用链，就知道一个fastjson的版本，一堆依赖找啊找，头都疼。为了解决这个烦恼，用了卓卓师傅的fastjson黑名单工具和库，自己改造了一下。☆32Updated 5 years ago
- Shiro-721 Padding Oracle Attack☆71Updated 3 years ago
- 记录各语言、框架中危险的sink，个人代码审计、漏洞研究使用。☆116Updated 3 years ago
- 个人用于在自动化挖掘gadget时，方便查找gadget chains中class所在jar包，以助于便捷审计测试gadget有效性的那么一个小工具。☆60Updated 5 years ago
- Kunlun-M 的GUI程序☆51Updated 2 years ago
- 收集规则☆30Updated 2 years ago
- CodeQL 寻找 JNDI利用 Lookup接口☆163Updated 3 years ago
- springboot getRequestURI acl bypass☆37Updated 4 years ago
- cve-2022-34169 延伸出的Jdk Xalan的payload自动生成工具，可根据不同的Jdk生成出其所对应的xslt文件☆90Updated 2 years ago
- fortify内置规则加密破解☆33Updated 4 years ago
- 解答开发关于安全漏洞的常见问题☆41Updated 4 years ago
- TongASDP漏洞测试环境☆35Updated 2 years ago
- DVPNET 公开漏洞知识库☆92Updated 3 years ago
- 使用java agent反序列化注入内存shell☆67Updated 4 years ago
- Spring Cloud Netflix Hystrix Dashboard template resolution vulnerability CVE-2021-22053☆37Updated 2 years ago
- woodpecker-framework框架http发包库,专门为漏洞检测与利用场景设计。☆67Updated 2 years ago
- 《深入理解DAST动态应用程序安全测试》Dynamic Application Security Testing.☆49Updated 2 years ago
- ☆41Updated 4 years ago
- 一个高价值漏洞采集与推送服务 | A valueable vulnerability collection and push service☆31Updated 6 months ago
- CodeQL extractor for java, which don't need to compile java source☆10Updated 2 years ago
- CodeQL中文资料和常见使用解释。Chinese version of Codeql documents☆9Updated 4 years ago
- 规则组合子域名字典生成☆28Updated 5 years ago
- 资产扫描工具☆46Updated 4 years ago