SummerSec / SPAToolLinks
静态程序分析工具 主要生成方法的CFG和.java文件的AST
☆129Updated last year
Alternatives and similar repositories for SPATool
Users that are interested in SPATool are comparing it to the libraries listed below
Sorting:
- A neo4j procedure for tabby☆121Updated 2 weeks ago
- JAVA IAST Example☆48Updated 3 years ago
- 个人使用CodeQL编写的一些规则☆177Updated 3 years ago
- Auto Code Audit Framework for Java☆96Updated 3 years ago
- 简单实现的 Java RASP☆35Updated 4 years ago
- 当死去的记忆突然开始攻击我,我终于想起了我还写过一款十分十分垃圾的 rasp 靶场。☆77Updated 2 years ago
- ☆38Updated 3 years ago
- Java agent without file 无文件的Java agent☆78Updated 3 years ago
- 项目监控工具 以及 Codeql 自动运行☆308Updated 2 years ago
- 《Spring漏洞研究》☆46Updated 3 years ago
- 不那么一样的 Java Agent 内存马☆263Updated last year
- 自动反编译闭源应用,创建codeql数据库☆305Updated 3 years ago
- Lessons for syntaxflow zero to hero☆49Updated 8 months ago
- Collection of CTF Web challenges I made☆52Updated 2 years ago
- ☆107Updated 3 years ago
- Java表达式语句生成器☆190Updated last year
- fastjson 80 远程代码执行漏洞复现☆194Updated 2 years ago
- 利用agent hock指定的class,在jar运行周期内,用于跟踪被执行的方法,辅助做一些事情,比如挖洞啊☆126Updated 4 years ago
- CodeQL 寻找 JNDI利用 Lookup接口☆163Updated 3 years ago
- Java漏洞分析汇合☆142Updated 3 years ago
- 鹏 RocB - Java代码审计IDEA插件 SAST☆148Updated 3 years ago
- 2023白帽补天大会部分代码☆124Updated last year
- 一款通过污点追踪发现Jsp webshell的工具(A tool to find Jsp Webshell through stain tracking)☆177Updated 3 years ago
- CodeQL分析闭源Jar包脚本,基于Apache Ant构建CodeQL数据库☆36Updated 2 years ago
- A vul-finder for loading CPG and automated finding vul-call-chains☆53Updated 8 months ago
- Apache Dubbo漏洞测试Demo及其POC☆61Updated 2 years ago
- 一个针对防御 log4j2 CVE-2021-44228 漏洞的 RASP 工具。 A Runtime Application Self-Protection module specifically designed for log4j2 RCE (CVE-2021-442…☆123Updated 3 years ago
- PHP Static Program Analysis☆41Updated 2 years ago
- ☆139Updated 2 years ago
- 基于AST的JSONP劫持漏洞自动化挖掘☆93Updated 4 years ago