HXSecurity / DongTai-engine

Related projects ⓘ

Alternatives and complementary repositories for DongTai-engine

• TomAPU / WAF-rules
  ☆22Updated 5 years ago
• threedr3am / log-agent
  利用agent hock指定的class，在jar运行周期内，用于跟踪被执行的方法，辅助做一些事情，比如挖洞啊
  ☆126Updated 4 years ago
• Anemone95 / taint-benchmark
  A benchmark to evaluate taint analysis
  ☆30Updated 2 years ago
• Anemone95 / JSecCode
  A Vulnerable Web App written by JavaScript (Vue+Egg)
  ☆12Updated 3 weeks ago
• 7hang / Android-IOS-Security
  移动安全
  ☆29Updated 4 years ago
• angelwhu / jvm-rasp
  基于JVM-Sandbox实现RASP安全监控防护
  ☆51Updated last year
• ASTTeam / Semgrep
  《深入理解Semgrep》Finding vulnerabilities with Semgrep.
  ☆40Updated last year
• LeadroyaL / java_xxe_2019
  总结了一下2019年在JVM环境中使用XXE攻击的知识
  ☆57Updated 5 years ago
• threedr3am / FindClassInJars
  个人用于在自动化挖掘gadget时，方便查找gadget chains中class所在jar包，以助于便捷审计测试gadget有效性的那么一个小工具。
  ☆60Updated 4 years ago
• iiiusky / java_rasp_example
  ☆28Updated 4 years ago
• boundaryx / cloudrasp-log4j2
  一个针对防御 log4j2 CVE-2021-44228 漏洞的 RASP 工具。 A Runtime Application Self-Protection module specifically designed for log4j2 RCE (CVE-2021-442…
  ☆122Updated 2 years ago
• SummerSec / SPATool
  静态程序分析工具 主要生成方法的CFG和.java文件的AST
  ☆126Updated last year
• Ant-FG-Lab / non_RCE
  ☆41Updated 3 years ago
• h2-stack / LL-RASP
  Low-level RASP: Protecting Applications Implemented in High-level Programming Languages
  ☆56Updated last year
• jimocode / CodeInspector
  基于Java ASM技术和GadgetInspector的原理，尝试实现一个自动Java代码审计工具。目前做到了可控参数分析和数据流跟踪分析
  ☆36Updated 3 years ago
• Monyer / xssee
  A js encode/decode simple tool for XSS
  ☆27Updated 4 years ago
• cor0ps / codeql
  收集规则
  ☆30Updated last year
• Ramos-dev / graph4code
  超硬核！使用图数据技术发现软件漏洞
  ☆181Updated 3 years ago
• jweny / check_jsonp_based_on_ast
  基于AST的JSONP劫持漏洞自动化挖掘
  ☆94Updated 4 years ago
• grayddq / PypiScan
  这个脚本主要提供对pypi供应链的源头进行安全扫描研究，扫描并发现未知的恶意包情况。
  ☆31Updated last year
• wrlu / SecMobile
  移动安全检测平台，支持Android和iOS应用辅助分析。
  ☆46Updated 4 years ago
• lijiejie / log4j2_vul_local_scanner
  Log4j 漏洞本地检测脚本。 Scan all java processes on your host to check whether it's affected by log4j2 remote code execution vulnerability (CVE-20…
  ☆85Updated 2 years ago
• bigBestWay / ice
  Use java instrument API without JAR file
  ☆44Updated 2 years ago
• wonderkun / crawler
  利用github action定时爬取先知、安全客等的文章进行保存
  ☆55Updated 2 years ago
• ring04h / iproxy
  HTTP/HTTPS proxy server by golang [high performance version]
  ☆51Updated 4 years ago
• JoyChou93 / trident
  Java通用漏洞修复安全组件
  ☆58Updated 7 years ago
• twosmi1e / Static-Analysis-and-Automated-Code-Audit
  静态分析及代码审计自动化相关资料收集
  ☆284Updated 2 years ago