Maskhe / AxinSAST
☆10Updated 3 years ago
Alternatives and similar repositories for AxinSAST:
Users that are interested in AxinSAST are comparing it to the libraries listed below
- 《深入理解DAST动态应用程序安全测试》Dynamic Application Security Testing.☆49Updated 2 years ago
- vulhub-compose是一款屏蔽docker-compose的命令行工具,目的是降低火线平台社区用户使用vulhub靶场的难度,减少学习docker-compose的时间成本;同时,支持直接安装洞态IAST(原灵芝IAST)到vulhub靶场,用于漏洞复现、漏洞挖掘。☆45Updated 3 years ago
- notes☆27Updated 2 years ago
- TongASDP漏洞测试环境☆34Updated last year
- cloud-audit (云安全审计助手)是检测公有云厂商AK/SK泄漏被利用的工具,通过定期调用云平台接口审计日志,基于异常行为/黑特征/基线发现疑似入侵行为。☆37Updated 9 months ago
- JAVA IAST Example☆48Updated 3 years ago
- java 漏洞平台包含各种CVE☆23Updated 2 years ago
- springboot getRequestURI acl bypass☆37Updated 4 years ago
- fortify内置规则加密破解☆33Updated 4 years ago
- ☆28Updated 4 years ago
- ☆58Updated 4 years ago
- 一个可快速“搬运”cookie的Burp Suite插件☆25Updated 6 years ago
- CodeQL中文资料和常见使用解释。Chinese version of Codeql documents☆9Updated 4 years ago
- 收集整理一些漏洞,利用方法,poc等等,方便快速查阅☆59Updated 3 years ago
- Spring Cloud Netflix Hystrix Dashboard template resolution vulnerability CVE-2021-22053☆37Updated 2 years ago
- Security Development LifeCycle Process (安全开发生命周期参考)☆27Updated 6 years ago
- ☆16Updated last year
- 代码审计自动化系统,底层架构为蜻蜓编排系统,墨菲SCA,fortify,SemGrep,hema☆27Updated this week
- struts2 漏洞环境源代码☆75Updated 2 years ago
- 利用agent hock指定的class,在jar运行周期内,用于跟踪被执行的方法,辅助做一些事情,比如挖洞啊☆126Updated 4 years ago
- java xxe defense demo☆47Updated 5 years ago
- 打CTF实在厌倦了找利用链,就知道一个fastjson的版本,一堆依赖找啊找,头都疼。为了解决这个烦恼,用了卓卓师傅的fastjson黑名单工具和库,自己改造了一下。☆32Updated 5 years ago
- 收集规则☆30Updated 2 years ago
- 基于Java ASM技术和GadgetInspector的原理,尝试实现一个自动Java代码审计工具。目前做到了可控参数分析和数据流跟踪分析☆36Updated 3 years ago
- SeeCode Scanner 扫描引擎☆2Updated 5 years ago
- GitLab 依赖项扫描的咨询数据库,每天17:00自动更新☆45Updated this week
- 一个NodeJS实现的漏扫动态爬虫☆81Updated 2 years ago
- CVE-2020-8840:FasterXML/jackson-databind 远程代码执行漏洞☆35Updated 5 years ago
- 轻量级漏洞验证和利用框架☆32Updated 2 years ago
- 资产扫描工具☆46Updated 4 years ago