HXSecurity / DongTai-Plugin-IDEA
Dongtai-plugin-idea is an IDEA plug-in developed by DongTai team for Java Web application developers. This plug-in provides functions such as vulnerability detection and code audit during application development, enabling developers to find application vulnerabilities more intuitively, quickly and in real time during application development.
☆27Updated last year
Alternatives and similar repositories for DongTai-Plugin-IDEA:
Users that are interested in DongTai-Plugin-IDEA are comparing it to the libraries listed below
- vulhub-compose是一款屏蔽docker-compose的命令行工具,目的是降低火线平台社区用户使用vulhub靶场的难度,减少学习docker-compose的时间成本;同时,支持直接安装洞态IAST(原灵芝IAST)到vulhub靶场,用于漏洞复现、漏洞挖掘。☆45Updated 3 years ago
- Log4j 漏洞本地检测脚本。 Scan all java processes on your host to check whether it's affected by log4j2 remote code execution vulnerability (CVE-20…☆85Updated 3 years ago
- notes☆27Updated 2 years ago
- ☆41Updated 4 years ago
- 代码审计自动化系统,底层架构为蜻蜓编排系统,墨菲SCA,fortify,SemGrep,hema☆27Updated 3 weeks ago
- java 漏洞平台包含各种CVE☆23Updated 2 years ago
- springboot getRequestURI acl bypass☆37Updated 4 years ago
- 解答开发关于安全漏洞的常见问题☆41Updated 4 years ago
- 这是一个用于IP和域名碰撞匹配访问的小工具,旨意用来匹配出渗透过程 中需要绑定hosts才能访问的弱主机或内部系统。https://github.com/fofapro/Hosts_scan implement in Go☆113Updated 2 years ago
- ThinkPHP各版本反序列化利用代码☆32Updated 4 years ago
- 一些结合第三方组件的Fastjson POC,在1.2.48以后版本中陆续被添加至黑名单。☆56Updated 5 years ago
- burp被动扫描自动转发和手动重发插件☆52Updated 4 years ago
- HTTP/HTTPS proxy server by golang [high performance version]☆53Updated 4 years ago
- 打CTF实在厌倦了找利用链,就知道一个fastjson的版本,一堆依赖找啊找,头都疼。为了解决这个烦恼,用了卓卓师傅的fastjson黑名单工具和库,自己改造了一下。☆32Updated 5 years ago
- CodeQL 寻找 JNDI利用 Lookup接口☆163Updated 2 years ago
- 一个代理扫描平台☆54Updated 4 years ago
- 使用java agent反序列化注入内存shell☆67Updated 4 years ago
- Hamster是基于mitmproxy开发的异步被动扫描框架,基于http代理进行被动扫描,主要功能为重写数据包、签名、漏洞扫描、敏感参数收集等功能(开发中)。☆69Updated 5 months ago
- 子域名监控式漏扫☆42Updated 4 years ago
- 记录调试分析ysoserial系列的学习过程,主要包含手动构造的一些poc,便于加深对漏洞和工具的理解☆30Updated 4 years ago
- DVPNET 公开漏洞知识库☆92Updated 3 years ago
- CVE-2021-43297 POC,Apache Dubbo<= 2.7.13时可以实现RCE☆38Updated 3 years ago
- 安卓APP安全测试所列资源☆20Updated 6 years ago
- Redis RCE 的几种方法☆90Updated 9 months ago
- 记录各语言、框架中危险的sink,个人代码审计、漏洞研究使用。☆116Updated 3 years ago
- 针对于Jenkins控制台用户的暴力破解工具☆34Updated 4 years ago
- 清除基于java agent木马☆78Updated 3 years ago
- Java agent without file 无文件的Java agent☆78Updated 2 years ago
- Java RMI反序列化漏洞插件☆46Updated 3 years ago
- TongASDP漏洞测试环境☆34Updated 2 years ago