HXSecurity / DongTai-agent-java
Java Agent is a Java application probe of DongTai IAST, which collects method invocation data during runtime of Java application by dynamic hooks.
☆686Updated last year
Alternatives and similar repositories for DongTai-agent-java:
Users that are interested in DongTai-agent-java are comparing it to the libraries listed below
- 专注于JVM的运行时防御系统RASP☆281Updated 10 months ago
- IAST 灰盒扫描工具☆445Updated 2 years ago
- java内存对象搜索辅助工具☆800Updated 2 years ago
- ☆805Updated 2 years ago
- 一款API水平越权漏洞检测工具☆758Updated last year
- Fastjson vulnerability quickly exploits the framework(fastjson漏洞快速利用框架)☆1,321Updated 2 years ago
- ☆452Updated last year
- Hunter作为中通DevSecOps闭环方案中的一环,扮演着很重要的角色,开源之后希望能帮助到更多企业。☆345Updated 2 years ago
- 越权检测工具☆737Updated 2 years ago
- Java漏洞学习笔记 Deserialization Vulnerability☆930Updated last year
- JNDI服务利用工具 RMI/LDAP,支持部分场景回显、内存shell,高版本JDK场景下利用等,fastjson rce命令执行,log4j rce 命令执行 漏洞检测辅助工具☆1,962Updated 10 months ago
- 分布式端口(漏洞)扫描、资产安全管理、实时威胁监控与通知、高效漏洞闭环、漏洞wiki、邮件报告通知、poc框架☆568Updated 2 years ago
- HeapDump敏感信息提取工具☆1,435Updated last week
- 源代码漏洞の审计☆818Updated 9 months ago
- Getting started with java code auditing 代码审计入门的小项目☆909Updated 2 years ago
- JAVA 漏洞靶场 (Vulnerability Environment For Java)☆451Updated 3 years ago
- java source code static code analysis and danger function identify prog☆533Updated 6 years ago
- Collect JSP webshell of various implementation methods. 收集JSP Webshell的各种姿势☆1,376Updated 3 years ago
- 一个利用ASM对字节码进行污点传播分析的静态代码审计应用(添加了大量代码注释,适合大家进行源码学习)。也加入了挖掘Fastjson反序列化gadget chains和SQLInject(JdbcTemplate、MyBatis、JPA、Hibernate、原生jdbc等)静…☆445Updated 3 years ago
- 傻瓜式漏洞PoC测试框架☆1,443Updated last year
- 分享几个直接可用的内存马,记录一下学习过程中看过的文章☆954Updated 3 years ago
- Weblogic环境搭建工具☆784Updated 4 years ago
- Static code auditing system☆460Updated 4 years ago
- 一款用于JNDI注入利用的工具,大量参考/引用了Rogue JNDI项目的代码,支持直接植入内存shell,并集成了常见的bypass 高版本JDK的方式,适用于与自动化工具配合使用。☆322Updated 2 years ago
- 项目是根据LandGrey/SpringBootVulExploit清单编写,目的hvv期间快速利用漏洞、降低漏洞利用门槛。☆1,854Updated last year
- Fastjson姿势技巧集合☆1,740Updated last year
- 360/0Kee-Team/crawlergo动态爬虫结合长亭XRAY扫描器的被动扫描功能☆1,191Updated 3 years ago
- JAVA 插件化漏洞扫描器,Gui基于javafx。POC 目前集成 Weblogic、Tomcat、Shiro、Spring等。☆544Updated last year
- 一款支持自定义的 Java 内存马生成工具|A customizable Java in-memory webshell generation tool.☆1,851Updated 3 months ago
- 自己学习java安全的一些总结,主要是安全审计相关☆1,631Updated 3 years ago