Maskhe / AxinSAST
☆10Updated 3 years ago
Related projects ⓘ
Alternatives and complementary repositories for AxinSAST
- 《深入理解DAST动态应用程序安全测试》Dynamic Application Security Testing.☆47Updated 2 years ago
- notes☆26Updated 2 years ago
- 基于JVM-Sandbox实现RASP安全监控防护☆51Updated last year
- fortify内置规则加密破解☆33Updated 4 years ago
- JAVA IAST Example☆46Updated 2 years ago
- java 漏洞平台包含各种CVE☆23Updated 2 years ago
- TongASDP漏洞测试环境☆34Updated last year
- Security Development LifeCycle Process (安全开发生命周期参考)☆27Updated 5 years ago
- 基于Java ASM技术和GadgetInspector的原理，尝试实现一个自动Java代码审计工具。目前做到了可控参数分析和数据流跟踪分析☆36Updated 3 years ago
- ☆58Updated 4 years ago
- springboot getRequestURI acl bypass☆37Updated 4 years ago
- 代码审计自动化系统,底层架构为蜻蜓编排系统,墨菲SCA,fortify,SemGrep,hema☆25Updated last month
- cloud-audit （云安全审计助手）是检测公有云厂商AK/SK泄漏被利用的工具，通过定期调用云平台接口审计日志，基于异常行为/黑特征/基线发现疑似入侵行为。☆33Updated 5 months ago
- vulhub-compose是一款屏蔽docker-compose的命令行工具，目的是降低火线平台社区用户使用vulhub靶场的难度，减少学习docker-compose的时间成本；同时，支持直接安装洞态IAST（原灵芝IAST）到vulhub靶场，用于漏洞复现、漏洞挖掘。☆45Updated 3 years ago
- ☆41Updated 4 years ago
- https://github.com/GrrrDog/Java-Deserialization-Cheat-Sheet☆49Updated 3 years ago
- GitLab 依赖项扫描的咨询数据库，每天17:00自动更新☆43Updated this week
- 利用agent hock指定的class，在jar运行周期内，用于跟踪被执行的方法，辅助做一些事情，比如挖洞啊☆126Updated 4 years ago
- 收集规则☆30Updated last year
- struts2 漏洞环境源代码☆75Updated 2 years ago
- ☆41Updated 3 years ago
- ☆15Updated last year
- CodeQL中文资料和常见使用解释。Chinese version of Codeql documents☆9Updated 4 years ago
- CVE-2020-8840：FasterXML/jackson-databind 远程代码执行漏洞☆35Updated 4 years ago
- CVE-2020-36179~82 Jackson-databind SSRF&RCE☆81Updated 3 years ago
- Spring Cloud Netflix Hystrix Dashboard template resolution vulnerability CVE-2021-22053☆37Updated last year
- 关于Struts2框架的历史漏洞个人分析文章☆53Updated 4 years ago
- goby python api site//gobies.org/☆22Updated 4 years ago