HXSecurity / DongTai-Plugin-IDEA
Dongtai-plugin-idea is an IDEA plug-in developed by DongTai team for Java Web application developers. This plug-in provides functions such as vulnerability detection and code audit during application development, enabling developers to find application vulnerabilities more intuitively, quickly and in real time during application development.
☆27Updated last year
Alternatives and similar repositories for DongTai-Plugin-IDEA:
Users that are interested in DongTai-Plugin-IDEA are comparing it to the libraries listed below
- vulhub-compose是一款屏蔽docker-compose的命令行工具,目的是降低火线平台社区用户使用vulhub靶场的难度,减少学习docker-compose的时间成本;同时,支持直接安装洞态IAST(原灵芝IAST)到vulhub靶场,用于漏洞复现、漏洞挖掘。☆45Updated 3 years ago
- Log4j 漏洞本地检测脚本。 Scan all java processes on your host to check whether it's affected by log4j2 remote code execution vulnerability (CVE-20…☆85Updated 3 years ago
- notes☆26Updated 2 years ago
- ☆41Updated 4 years ago
- 记录各语言、框架中危险的sink,个人代码审计、漏洞研究使用。☆116Updated 3 years ago
- 通过JavaAgent与Javassist技术对JVM加载的类对象进行动态插桩,可以做一些破解、加密验证的绕过等操作☆97Updated 7 months ago
- Shiro-721 Padding Oracle Attack☆70Updated 3 years ago
- 安卓APP安全测试所列资源☆19Updated 6 years ago
- Kunlun-M 的GUI程序☆51Updated 2 years ago
- 利用agent hock指定的class,在jar运行周期内,用于跟踪被执行的方法,辅助做一些事情,比如挖洞啊☆126Updated 4 years ago
- 常见漏洞知识库文档☆50Updated 5 years ago
- 一个高价值漏洞采集与推送服务 | A valueable vulnerability collection and push service☆31Updated 4 months ago
- java 漏洞平台包含各种CVE☆23Updated 2 years ago
- cve-2022-34169 延伸出的Jdk Xalan的payload自动生成工具,可根据不同的Jdk生成出其所对应的xslt文件☆89Updated 2 years ago
- 打CTF实在厌倦了找利用链,就知道一个fastjson的版本,一堆依赖找啊找,头都疼。为了解决这个烦恼,用了卓卓师傅的fastjson黑名单工具和库,自己改造了一下。☆32Updated 5 years ago
- 代码审计自动化系统,底层架构为蜻蜓编排系统,墨菲SCA,fortify,SemGrep,hema☆26Updated 3 months ago
- 快速解决app加密问题☆40Updated 4 years ago
- 常用安全工具 docker镜像 自动更新仓库☆66Updated 2 years ago
- 记录调试分析ysoserial系列的学习过程,主要包含手动构造的一些poc,便于加深对漏洞和工具的理解☆30Updated 4 years ago
- CTFCrackTools 's BurpSuite Plugin - Decode and Encode☆82Updated 2 years ago
- 解答开发关于安全漏洞的常见问题☆41Updated 4 years ago
- 使用java agent反序列化注入内存shell☆67Updated 4 years ago
- 这是一个用于IP和域名碰撞匹配访问的小工具,旨意用来匹配出渗透过程中需要绑定hosts才能访问的弱主机或内部系统。https://github.com/fofapro/Hosts_scan implement in Go☆114Updated 2 years ago
- 基于AST的JSONP劫持漏洞自动化挖掘☆93Updated 4 years ago
- 一些结合第三方组件的Fastjson POC,在1.2.48以后版本中陆续被添加至黑名单。☆56Updated 5 years ago
- 一个可以自定规则的动扫描器,支持主动和被动扫描☆25Updated 3 years ago
- Springboot的一个webshell☆45Updated 5 years ago
- springboot getRequestURI acl bypass☆37Updated 4 years ago
- CodeQL中文资料和常见使用解释。Chinese version of Codeql documents☆9Updated 4 years ago
- 一款用于攻击spring boot actuator的集成环境,目前集成三种攻击方式,支持1.x、2.x☆85Updated 3 years ago