静态分析基础教程
☆180Jan 3, 2026Updated 2 months ago
Alternatives and similar repositories for static-analysis
Users that are interested in static-analysis are comparing it to the libraries listed below
Sorting:
- 一款使用Yaml定义搜索规则来搜索Class的工具☆108Aug 2, 2023Updated 2 years ago
- Some ReadObject Sink With JDBC☆243May 8, 2024Updated last year
- An easy-to-learn/use static analysis framework for Java☆1,771Feb 16, 2026Updated last month
- Java web路由内存分析工具☆438May 22, 2025Updated 9 months ago
- A vul-finder for loading CPG and automated finding vul-call-chains☆72Jul 22, 2025Updated 7 months ago
- xAST评价体系，让安全工具不再“黑盒”. The xAST evaluation benchmark makes security tools no longer a "black box".☆467Jan 15, 2026Updated 2 months ago
- 2023白帽补天大会部分代码☆129Dec 26, 2023Updated 2 years ago
- A declarative static analysis tool for jvm bytecode based Datalog like CodeQL☆345Jan 6, 2024Updated 2 years ago
- A neo4j procedure for tabby☆137May 17, 2025Updated 10 months ago
- 抽离出 utf-8-overlong-encoding 的序列化逻辑，实现 2 3 字节加密序列化数组☆140Mar 11, 2024Updated 2 years ago
- Tai-e assignments for static program analysis☆1,222Aug 28, 2025Updated 6 months ago
- ☆65Sep 27, 2023Updated 2 years ago
- Bypass JVM Class ByteCode Verifier , 对抗反编译器☆116Sep 21, 2023Updated 2 years ago
- Common Exploitation Techniques for Java RCE Vulnerabilities in Real-World Scenarios | 实战场景较通用的 Java Rce 相关漏洞的利用方式☆544Mar 6, 2025Updated last year
- JDBC Attack Tricks☆154Sep 3, 2023Updated 2 years ago
- formal language and automata☆31Jan 9, 2026Updated 2 months ago
- cve-2022-34169 延伸出的Jdk Xalan的payload自动生成工具，可根据不同的Jdk生成出其所对应的xslt文件☆93Jan 17, 2023Updated 3 years ago
- ☆30Aug 30, 2022Updated 3 years ago
- CodeQL extractor for java, which don't need to compile java source☆348Nov 25, 2022Updated 3 years ago
- Low-level RASP: Protecting Applications Implemented in High-level Programming Languages☆69Oct 19, 2025Updated 5 months ago
- 零基础入门V8引擎漏洞挖掘☆285Apr 8, 2024Updated last year
- Getting started with static program analysis. 静态程序分析入门教程。☆1,767Mar 20, 2024Updated 2 years ago
- A CAT called tabby ( Code Analysis Tool )☆1,641Jan 17, 2026Updated 2 months ago
- 闭源系统半自动漏洞挖掘工具，针对 jar/war/zip 进行静态代码分析，输出从source到sink的可达路径。LLM将验证路径可达性，并根据上下文给出该路径可信分数☆506Jan 12, 2026Updated 2 months ago
- GitHub项目监控 && CodeQL自动扫描 (GitHub project monitoring && CodeQL automatic analysis)☆467Jan 19, 2025Updated last year
- 用来将Tai-e改造为开箱即用的静态代码安全分析框架的一些demo☆37Apr 17, 2024Updated last year
- ☆147Jan 16, 2023Updated 3 years ago
- neo4j plugin of ByteCodeDL for the IntelliJ Platform. ByteCodeDL-Neo4j-IDEA-Plugin☆16Dec 28, 2023Updated 2 years ago
- spring boot Fat Jar 任意写文件漏洞到稳定 RCE 利用技巧☆754Apr 14, 2021Updated 4 years ago
- CodeQLpy是一款基于CodeQL实现的半自动化代码审计工具，目前仅支持java语言。实现从源码反编译，数据库生成，脆弱性发现的全过程，可以辅助代码审计人员快速定位源码可能存在的漏洞。☆848Jul 6, 2023Updated 2 years ago
- Industrial Cybersecurity Conference Index☆13Mar 11, 2024Updated 2 years ago
- ☆206Oct 27, 2025Updated 4 months ago
- 《深入理解CodeQL》Finding vulnerabilities with CodeQL.☆1,758Nov 21, 2023Updated 2 years ago
- 不那么一样的 Java Agent 内存马☆289Nov 27, 2023Updated 2 years ago
- 无需文件落地Agent内存马生成器☆249May 30, 2024Updated last year
- 构造字节在ASCII范围内的jar☆139Feb 14, 2022Updated 4 years ago
- 基于 jdwp-shellifier 的进阶JDWP漏洞利用脚本（动态执行Java/Js代码并获得回显）☆321Dec 22, 2024Updated last year
- CTF-Java-Gadget专注于收集CTF中Java赛题的反序列化片段☆282Dec 13, 2024Updated last year
- 本项目可以把一个或多个Jar包构建成数据库，用户连接数据库后通过SQL语句任意搜索需要的内容，例如类和方法信息，方法调用关系等☆75Oct 11, 2023Updated 2 years ago