静态分析基础教程
☆186Sep 25, 2026Updated last month
Alternatives and similar repositories for static-analysis
Users that are interested in static-analysis are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- An easy-to-learn/use static analysis framework for Java and Android☆1,827Updated this week
- Some ReadObject Sink With JDBC☆243May 8, 2024Updated 2 years ago
- 一款使用Yaml定义搜索规则来搜索Class的工具☆108Aug 2, 2023Updated 3 years ago
- Java web路由内存分析工具☆438May 22, 2025Updated last year
- xAST评价体系，让安全工具不再“黑盒”. The xAST evaluation benchmark makes security tools no longer a "black box".☆495May 21, 2026Updated 5 months ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- 抽离出 utf-8-overlong-encoding 的序列化逻辑，实现 2 3 字节加密序列化数组☆141Mar 11, 2024Updated 2 years ago
- A vul-finder for loading CPG and automated finding vul-call-chains☆69Jul 22, 2025Updated last year
- Tai-e assignments for static program analysis☆1,238Aug 28, 2025Updated last year
- 2023白帽补天大会部分代码☆127Dec 26, 2023Updated 2 years ago
- A declarative static analysis tool for jvm bytecode based Datalog like CodeQL☆341Jan 6, 2024Updated 2 years ago
- Common Exploitation Techniques for Java RCE Vulnerabilities in Real-World Scenarios | 实战场景较通用的 Java Rce 相关漏洞的利用方式☆548Mar 6, 2025Updated last year
- Bypass JVM Class ByteCode Verifier , 对抗反编译器☆115Sep 21, 2023Updated 3 years ago
- Getting started with static program analysis. 静态程序分析入门教程。☆1,769Mar 20, 2024Updated 2 years ago
- GitHub项目监控 && CodeQL自动扫描 (GitHub project monitoring && CodeQL automatic analysis)☆468Jan 19, 2025Updated last year
- GPUs on demand by Runpod - Special Offer Available • AdRun AI, ML, and HPC workloads on powerful cloud GPUs—without limits or wasted spend. Deploy GPUs in under a minute and pay by the second.
- CodeQL extractor for java, which don't need to compile java source☆344Nov 25, 2022Updated 3 years ago
- ☆29Aug 30, 2022Updated 4 years ago
- ☆64Sep 27, 2023Updated 3 years ago
- cve-2022-34169 延伸出的Jdk Xalan的payload自动生成工具，可根据不同的Jdk生成出其所对应的xslt文件☆94Jan 17, 2023Updated 3 years ago
- A neo4j procedure for tabby☆135May 17, 2025Updated last year
- Low-level RASP: Protecting Applications Implemented in High-level Programming Languages☆71Oct 19, 2025Updated last year
- A CAT called tabby ( Code Analysis Tool )☆1,660Jan 17, 2026Updated 9 months ago
- 不那么一样的 Java Agent 内存马☆288Nov 27, 2023Updated 2 years ago
- JDBC Attack Tricks☆155Sep 3, 2023Updated 3 years ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- 《深入理解CodeQL》Finding vulnerabilities with CodeQL.☆1,794Nov 21, 2023Updated 2 years ago
- ☆11Sep 2, 2024Updated 2 years ago
- 零基础入门V8引擎漏洞挖掘☆287Apr 8, 2024Updated 2 years ago
- 用来将Tai-e改造为开箱即用的静态代码安全分析框架的一些demo☆36Apr 17, 2024Updated 2 years ago
- Industrial Cybersecurity Conference Index☆13Mar 11, 2024Updated 2 years ago
- ☆144Jan 16, 2023Updated 3 years ago
- spring boot Fat Jar 任意写文件漏洞到稳定 RCE 利用技巧☆756Apr 14, 2021Updated 5 years ago
- 闭源系统半自动漏洞挖掘工具，针对 jar/war/zip 进行静态代码分析，输出从source到sink的可达路径。LLM将验证路径可达性，并根据上下文给出该路径可信分数☆507Jan 12, 2026Updated 9 months ago
- CodeQLpy是一款基于CodeQL实现的半自动化代码审计工具，目前仅支持java语言。实现从源码反编译，数据库生成，脆弱性发现的全过程，可以辅助代码审计人员快速定位源码可能存在的漏洞。☆850Jul 6, 2023Updated 3 years ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- 不定期记录一下浪费了时间去关注过的垃圾CVE漏洞。☆118Jul 27, 2023Updated 3 years ago
- 无需文件落地Agent内存马生成器☆244May 30, 2024Updated 2 years ago
- ☆210Oct 27, 2025Updated last year
- 本项目可以把一个或多个Jar包构建成数据库，用户连接数据库后通过SQL语句任意搜索需要的内容，例如类和方法信息，方法调用关系等☆76Oct 11, 2023Updated 3 years ago
- nativeRasp that can hook native methods☆23Apr 24, 2023Updated 3 years ago
- a rep for documenting my study, may be from 0 to 0.1☆2,302Mar 25, 2026Updated 7 months ago
- 利用agent hock指定的class，在jar运行周期内，用于跟踪被执行的方法，辅助做一些事情，比如挖洞啊☆123Jul 17, 2020Updated 6 years ago