静态分析基础教程
☆182Jan 3, 2026Updated 4 months ago
Alternatives and similar repositories for static-analysis
Users that are interested in static-analysis are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- 一款使用Yaml定义搜索规则来搜索Class的工具☆109Aug 2, 2023Updated 2 years ago
- Some ReadObject Sink With JDBC☆245May 8, 2024Updated 2 years ago
- An easy-to-learn/use static analysis framework for Java☆1,779Mar 22, 2026Updated last month
- Java web路由内存分析工具☆438May 22, 2025Updated 11 months ago
- A vul-finder for loading CPG and automated finding vul-call-chains☆71Jul 22, 2025Updated 9 months ago
- Virtual machines for every use case on DigitalOcean • AdGet dependable uptime with 99.99% SLA, simple security tools, and predictable monthly pricing with DigitalOcean's virtual machines, called Droplets.
- 2023白帽补天大会部分代码☆128Dec 26, 2023Updated 2 years ago
- xAST评价体系，让安全工具不再“黑盒”. The xAST evaluation benchmark makes security tools no longer a "black box".☆474Apr 14, 2026Updated last month
- A declarative static analysis tool for jvm bytecode based Datalog like CodeQL☆341Jan 6, 2024Updated 2 years ago
- A neo4j procedure for tabby☆135May 17, 2025Updated last year
- 抽离出 utf-8-overlong-encoding 的序列化逻辑，实现 2 3 字节加密序列化数组☆141Mar 11, 2024Updated 2 years ago
- Tai-e assignments for static program analysis☆1,223Aug 28, 2025Updated 8 months ago
- ☆63Sep 27, 2023Updated 2 years ago
- Bypass JVM Class ByteCode Verifier , 对抗反编译器☆116Sep 21, 2023Updated 2 years ago
- Common Exploitation Techniques for Java RCE Vulnerabilities in Real-World Scenarios | 实战场景较通用的 Java Rce 相关漏洞的利用方式☆548Mar 6, 2025Updated last year
- AI Agents on DigitalOcean Gradient AI Platform • AdBuild production-ready AI agents using customizable tools or access multiple LLMs through a single endpoint. Create custom knowledge bases or connect external data.
- JDBC Attack Tricks☆154Sep 3, 2023Updated 2 years ago
- cve-2022-34169 延伸出的Jdk Xalan的payload自动生成工具，可根据不同的Jdk生成出其所对应的xslt文件☆94Jan 17, 2023Updated 3 years ago
- ☆29Aug 30, 2022Updated 3 years ago
- CodeQL extractor for java, which don't need to compile java source☆347Nov 25, 2022Updated 3 years ago
- Low-level RASP: Protecting Applications Implemented in High-level Programming Languages☆69Oct 19, 2025Updated 7 months ago
- 零基础入门V8引擎漏洞挖掘☆286Apr 8, 2024Updated 2 years ago
- Getting started with static program analysis. 静态程序分析入门教程。☆1,761Mar 20, 2024Updated 2 years ago
- A CAT called tabby ( Code Analysis Tool )☆1,650Jan 17, 2026Updated 4 months ago
- 闭源系统半自动漏洞挖掘工具，针对 jar/war/zip 进行静态代码分析，输出从source到sink的可达路径。LLM将验证路径可达性，并根据上下文给出该路径可信分数☆510Jan 12, 2026Updated 4 months ago
- Serverless GPU API endpoints on Runpod - Get Bonus Credits • AdSkip the infrastructure headaches. Auto-scaling, pay-as-you-go, no-ops approach lets you focus on innovating your application.
- GitHub项目监控 && CodeQL自动扫描 (GitHub project monitoring && CodeQL automatic analysis)☆469Jan 19, 2025Updated last year
- 用来将Tai-e改造为开箱即用的静态代码安全分析框架的一些demo☆37Apr 17, 2024Updated 2 years ago
- ☆146Jan 16, 2023Updated 3 years ago
- neo4j plugin of ByteCodeDL for the IntelliJ Platform. ByteCodeDL-Neo4j-IDEA-Plugin☆16Dec 28, 2023Updated 2 years ago
- CodeQLpy是一款基于CodeQL实现的半自动化代码审计工具，目前仅支持java语言。实现从源码反编译，数据库生成，脆弱性发现的全过程，可以辅助代码审计人员快速定位源码可能存在的漏洞。☆850Jul 6, 2023Updated 2 years ago
- spring boot Fat Jar 任意写文件漏洞到稳定 RCE 利用技巧☆754Apr 14, 2021Updated 5 years ago
- Industrial Cybersecurity Conference Index☆13Mar 11, 2024Updated 2 years ago
- 《 深入理解CodeQL》Finding vulnerabilities with CodeQL.☆1,767Nov 21, 2023Updated 2 years ago
- 不那么一样的 Java Agent 内存马☆290Nov 27, 2023Updated 2 years ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- ☆209Oct 27, 2025Updated 6 months ago
- 无需文件落地Agent内存马生成器☆250May 30, 2024Updated last year
- 基于 jdwp-shellifier 的进阶JDWP漏洞利用脚本（动态执行Java/Js代码并获得回显）☆326Dec 22, 2024Updated last year
- 构造字节在ASCII范围内的jar☆142Feb 14, 2022Updated 4 years ago
- CTF-Java-Gadget专注于收集CTF中Java赛题的反序列化片段☆283Dec 13, 2024Updated last year
- 本项目可以把一个或多个Jar包构建成数据库，用户连接数据库后通过SQL语句任意搜索需要的内容，例如类和方法信息，方法调用关系等☆75Oct 11, 2023Updated 2 years ago
- 利用agent hock指定的class，在jar运行周期内，用于跟踪被执行的方法，辅助做一些事情，比如挖洞啊☆125Jul 17, 2020Updated 5 years ago