OWASP Benchmark is a test suite designed to verify the speed and accuracy of software vulnerability detection tools. A fully runnable web app written in Java, it supports analysis by Static (SAST), Dynamic (DAST), and Runtime (IAST) tools that support Java. The idea is that since it is fully runnable and all the vulnerabilities are actually expl…
☆836Oct 21, 2026Updated last week
Alternatives and similar repositories for BenchmarkJava
Users that are interested in BenchmarkJava are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- OWASP Benchmark Project Utilities - Provides scorecard generation and crawling tools for Benchmark style test suites.☆26Updated this week
- xAST评价体系，让安全工具不再“黑盒”. The xAST evaluation benchmark makes security tools no longer a "black box".☆494May 21, 2026Updated 5 months ago
- The SpotBugs plugin for security audits of Java web applications and Android applications. (Also work with Kotlin, Groovy and Scala proje…☆2,452Oct 19, 2026Updated last week
- IAST 灰盒扫描工具☆448Jul 19, 2022Updated 4 years ago
- Java Agent is a Java application probe of DongTai IAST, which collects method invocation data during runtime of Java application by dynam…☆699Dec 25, 2023Updated 2 years ago
- 1-Click AI Models by DigitalOcean Gradient • AdDeploy popular AI models on DigitalOcean Gradient GPU virtual machines with just a single click. Zero configuration with optimized deployments.
- Java web common vulnerabilities and security code which is base on springboot and spring security☆2,673Dec 2, 2024Updated last year
- Juliet Java test suite is a collection of 112 different CWEs☆12Sep 1, 2023Updated 3 years ago
- A declarative static analysis tool for jvm bytecode based Datalog like CodeQL☆341Jan 6, 2024Updated 2 years ago
- The OWASP Benchmark for Python is a test suite designed to verify the accuracy of Python software vulnerability detection tools. A fully …☆37May 19, 2026Updated 5 months ago
- The official repo of Doop, the declarative pointer analysis framework.☆226Oct 22, 2026Updated last week
- A CAT called tabby ( Code Analysis Tool )☆1,660Jan 17, 2026Updated 9 months ago
- Static code auditing system☆467Jan 8, 2021Updated 5 years ago
- An easy-to-learn/use static analysis framework for Java and Android☆1,826Updated this week
- CodeQL: the libraries and queries that power security researchers around the world, as well as code scanning in GitHub Advanced Security☆10,253Updated this week
- 1-Click AI Models by DigitalOcean Gradient • AdDeploy popular AI models on DigitalOcean Gradient GPU virtual machines with just a single click. Zero configuration with optimized deployments.
- Codyze is a static analyzer for Java, C, C++ based on code property graphs☆90Aug 4, 2026Updated 2 months ago
- 🔥Open source RASP solution☆2,989Oct 2, 2025Updated last year
- Dongtai IAST is an open-source Interactive Application Security Testing (IAST) tool that enables real-time detection of common vulnerabil…☆1,312May 22, 2025Updated last year
- Corax for Java: A general static analysis framework for java code checking.☆255Dec 3, 2024Updated last year
- KunLun-M — Open-source static code analysis for PHP, Nodejs/JavaScript, Python, Golang, Java and C/C++, with AST-based semantic scanning …☆2,418Updated this week
- Open-source code analysis platform for C/C++/Java/Binary/Javascript/Python/Kotlin based on code property graphs. Discord https://discord.…☆3,601Updated this week
- TongASDP漏洞测试环境☆35Mar 22, 2023Updated 3 years ago
- Java安全相关的漏洞和技术demo，原生Java、Fastjson、Jackson、Hessian2、XML反序列化漏洞利用和Spring、Dubbo、Shiro、CAS、Tomcat、RMI、Nexus等框架\中间件\功能的exploits以及Java Security…☆2,683Mar 14, 2024Updated 2 years ago
- OWASP dependency-check is a software composition analysis utility that detects publicly disclosed vulnerabilities in application dependen…☆7,741Updated this week
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- 《深入理解CodeQL》Finding vulnerabilities with CodeQL.☆1,794Nov 21, 2023Updated 2 years ago
- A powerful browser crawler for web vulnerability scanners☆3,047Mar 11, 2025Updated last year
- Indexing reachability for context-sensitive data flow analysis.☆12Jul 10, 2022Updated 4 years ago
- The cheat sheet about Java Deserialization vulnerabilities☆3,187May 26, 2023Updated 3 years ago
- A proof-of-concept tool for generating payloads that exploit unsafe Java object deserialization.☆9,091Dec 4, 2025Updated 10 months ago
- A static analysis API for finding deserialization attack gadgets☆39Nov 7, 2022Updated 3 years ago
- IDEA静态代码安全审计及漏洞一键修复插件☆1,045Mar 10, 2022Updated 4 years ago
- A byte code analyzer for finding deserialization gadget chains in Java applications☆1,093Jun 15, 2021Updated 5 years ago
- Source Code Security Audit (源代码安全 审计)☆3,183Sep 16, 2022Updated 4 years ago
- GPUs on demand by Runpod - Special Offer Available • AdRun AI, ML, and HPC workloads on powerful cloud GPUs—without limits or wasted spend. Deploy GPUs in under a minute and pay by the second.
- The Web Application Vulnerability Scanner Evaluation Project☆238Oct 5, 2022Updated 4 years ago
- Web and mobile application security training platform☆1,463Updated this week
- PHP Runtime Vulnerability Detection☆477May 25, 2019Updated 7 years ago
- A helpful Java Deserialization exploit framework.☆1,246Feb 17, 2025Updated last year
- Code Property Graph: specification, query language, and utilities☆653Oct 21, 2026Updated last week
- Soot - A Java optimization framework☆3,101Oct 12, 2026Updated 2 weeks ago
- A static byte code analyzer for Java deserialization gadget research☆252Apr 17, 2017Updated 9 years ago