SummerSec / SPATool
静态程序分析工具 主要生成方法的CFG和.java文件的AST
☆129Updated last year
Alternatives and similar repositories for SPATool:
Users that are interested in SPATool are comparing it to the libraries listed below
- Auto Code Audit Framework for Java☆96Updated 3 years ago
- A neo4j procedure for tabby☆121Updated 11 months ago
- JAVA IAST Example☆48Updated 3 years ago
- 个人使用CodeQL编写的一些规则☆176Updated 3 years ago
- 简单实现的 Java RASP☆35Updated 4 years ago
- 《Spring漏洞研究》☆46Updated 3 years ago
- 当死去的记忆突然开始攻击我,我终于想起了我还写过一款十分十分垃圾的 rasp 靶场。☆77Updated 2 years ago
- A vul-finder for loading CPG and automated finding vul-call-chains☆51Updated 7 months ago
- Java agent without file 无文件的Java agent☆78Updated 3 years ago
- Lessons for syntaxflow zero to hero☆50Updated 7 months ago
- CodeQL分析闭源Jar包脚本,基于Apache Ant构建CodeQL数据库☆36Updated 2 years ago
- Java表达式语句生成器☆188Updated last year
- codeqlpy☆26Updated last year
- ☆138Updated 2 years ago
- Collection of CTF Web challenges I made☆52Updated 2 years ago
- 鹏 RocB - Java代码审计IDEA插件 SAST☆148Updated 3 years ago
- 利用agent hock指定的class,在jar运行周期内,用于跟踪被执行的方法,辅助做一些事情,比如挖洞啊☆126Updated 4 years ago
- 基于污点分析的JSP Webshell检测工具,模拟JVM的栈帧操作进行数据流分析,可以检测出各种变形的JSP Webshell☆21Updated 3 years ago
- 2023白帽补天大会部分代码☆123Updated last year
- 代码审计自动化系统,底层架构为蜻蜓编排系统,墨菲SCA,fortify,SemGrep,hema☆28Updated last month
- ☆37Updated 3 years ago
- CodeQL 寻找 JNDI利用 Lookup接口☆163Updated 3 years ago
- 项目监控工具 以及 Codeql 自动运行☆308Updated 2 years ago
- Apache Dubbo漏洞测试Demo及其POC☆61Updated 2 years ago
- Shiro-721 Padding Oracle Attack☆71Updated 3 years ago
- 自动反编译闭源应用,创建codeql数据库☆304Updated 3 years ago
- fastjson 80 远程代码执行漏洞复现☆192Updated 2 years ago
- 不那么一样的 Java Agent 内存马☆263Updated last year
- ☆57Updated last year
- simpleIAST- 基于污点追踪的灰盒漏洞扫描工具。☆79Updated last week