静态分析基础教程
☆179Jan 3, 2026Updated last month
Alternatives and similar repositories for static-analysis
Users that are interested in static-analysis are comparing it to the libraries listed below
Sorting:
- 一款使用Yaml定义搜索规则来搜索Class的工具☆108Aug 2, 2023Updated 2 years ago
- Some ReadObject Sink With JDBC☆243May 8, 2024Updated last year
- Java web路由内存分析工具☆437May 22, 2025Updated 9 months ago
- An easy-to-learn/use static analysis framework for Java☆1,760Feb 16, 2026Updated last week
- xAST评价体系，让安全工具不再“黑盒”. The xAST evaluation benchmark makes security tools no longer a "black box".☆463Jan 15, 2026Updated last month
- A neo4j procedure for tabby☆137May 17, 2025Updated 9 months ago
- A declarative static analysis tool for jvm bytecode based Datalog like CodeQL☆345Jan 6, 2024Updated 2 years ago
- A vul-finder for loading CPG and automated finding vul-call-chains☆71Jul 22, 2025Updated 7 months ago
- 2023白帽补天大会部分代码☆129Dec 26, 2023Updated 2 years ago
- ☆65Sep 27, 2023Updated 2 years ago
- CodeQL extractor for java, which don't need to compile java source☆348Nov 25, 2022Updated 3 years ago
- Common Exploitation Techniques for Java RCE Vulnerabilities in Real-World Scenarios | 实战场景较通用的 Java Rce 相关漏洞的利用方式☆545Mar 6, 2025Updated 11 months ago
- 零基础入门V8引擎漏洞挖掘☆284Apr 8, 2024Updated last year
- 抽离出 utf-8-overlong-encoding 的序列化逻辑，实现 2 3 字节加密序列化数组☆139Mar 11, 2024Updated last year
- ☆206Oct 27, 2025Updated 4 months ago
- JDBC Attack Tricks☆154Sep 3, 2023Updated 2 years ago
- Tai-e assignments for static program analysis☆1,219Aug 28, 2025Updated 6 months ago
- Bypass JVM Class ByteCode Verifier , 对抗反编译器☆116Sep 21, 2023Updated 2 years ago
- Low-level RASP: Protecting Applications Implemented in High-level Programming Languages☆69Oct 19, 2025Updated 4 months ago
- ☆30Aug 30, 2022Updated 3 years ago
- cve-2022-34169 延伸出的Jdk Xalan的payload自动生成工具，可根据不同的Jdk生成出其所对应的xslt文件☆93Jan 17, 2023Updated 3 years ago
- A CAT called tabby ( Code Analysis Tool )☆1,637Jan 17, 2026Updated last month
- 闭源系统半自动漏洞挖掘工具，针对 jar/war/zip 进行静态代码分析，输出从source到sink的可达路径。LLM将验证路径可达性，并根据上下文给出该路径可信分数☆502Jan 12, 2026Updated last month
- GitHub项目监控 && CodeQL自动扫描 (GitHub project monitoring && CodeQL automatic analysis)☆465Jan 19, 2025Updated last year
- Getting started with static program analysis. 静态程序分析入门教程。☆1,764Mar 20, 2024Updated last year
- Industrial Cybersecurity Conference Index☆13Mar 11, 2024Updated last year
- 《深入理解CodeQL》Finding vulnerabilities with CodeQL.☆1,754Nov 21, 2023Updated 2 years ago
- spring boot Fat Jar 任意写文件漏洞到稳定 RCE 利用技巧☆754Apr 14, 2021Updated 4 years ago
- 专注于JVM的运行时防御系统RASP☆295Jun 14, 2024Updated last year
- ☆146Jan 16, 2023Updated 3 years ago
- 基于 jdwp-shellifier 的进阶JDWP漏洞利用脚本（动态执行Java/Js代码并获得回显）☆321Dec 22, 2024Updated last year
- 构造字节在ASCII范围内的jar☆139Feb 14, 2022Updated 4 years ago
- Java JDK 8-18 CodeQL databases☆17Jun 2, 2024Updated last year
- neo4j plugin of ByteCodeDL for the IntelliJ Platform. ByteCodeDL-Neo4j-IDEA-Plugin☆16Dec 28, 2023Updated 2 years ago
- 无需文件落地Agent内存马生成器☆249May 30, 2024Updated last year
- 不那么一样的 Java Agent 内存马☆289Nov 27, 2023Updated 2 years ago
- 通过JavaAgent与Javassist技术对JVM加载的类对象进行动态插桩，可以做一些破解、加密验证的绕过等操作☆116Jun 18, 2024Updated last year
- Rust语言安全相关分析☆23Jan 20, 2022Updated 4 years ago
- Finding Java gadget chains with CodeQL☆184Jan 14, 2025Updated last year