SummerSec / SPAToolLinks
静态程序分析工具 主要生成方法的CFG和.java文件的AST
☆131Updated 2 years ago
Alternatives and similar repositories for SPATool
Users that are interested in SPATool are comparing it to the libraries listed below
Sorting:
- Auto Code Audit Framework for Java☆96Updated 3 years ago
- A neo4j procedure for tabby☆126Updated 2 months ago
- 当死去的记忆突然开始攻击我,我终于想起了我还写过一款十分十分垃圾的 rasp 靶场。☆78Updated 3 years ago
- 个人使用CodeQL编写的一些规则☆176Updated 3 years ago
- 简单实 现的 Java RASP☆35Updated 4 years ago
- 《Spring漏洞研究》☆46Updated 3 years ago
- JAVA IAST Example☆49Updated 3 years ago
- ☆108Updated 3 years ago
- 鹏 RocB - Java代码审计IDEA插件 SAST☆150Updated 3 years ago
- Java agent without file 无文件的Java agent☆82Updated 3 years ago
- 利用agent hock指定的class,在jar运行周期内,用于跟踪被执行的方法,辅助做一些事情,比如挖洞啊☆126Updated 5 years ago
- 一款通过污点追踪发现Jsp webshell的工具(A tool to find Jsp Webshell through stain tracking)☆177Updated 3 years ago
- 《深入理解DAST动态应用程序安全测试》Dynamic Application Security Testing.☆53Updated 2 years ago
- ☆38Updated 3 years ago
- 打CTF实在厌倦了找利用链,就知道一个fastjson的版本,一堆依赖找啊找,头都疼。为了解决这个烦恼,用了卓卓师傅的fastjson黑名单工具和库,自己改造了一下。☆32Updated 5 years ago
- ☆57Updated 2 years ago
- Java漏洞分析汇合☆142Updated 3 years ago
- Shiro-721 Padding Oracle Attack☆72Updated 4 years ago
- 2023白帽补天大会部分代码☆125Updated last year
- ☆96Updated last year
- nativeRasp that can hook native methods☆24Updated 2 years ago
- Collection of CTF Web challenges I made☆52Updated 2 years ago
- ☆143Updated 2 years ago
- 一个针对防御 log4j2 CVE-2021-44228 漏洞的 RASP 工具。 A Runtime Application Self-Protection module specifically designed for log4j2 RCE (CVE-2021-442…☆123Updated 3 years ago
- CodeQL 寻找 JNDI利用 Lookup接口☆163Updated 3 years ago
- CodeQL分析闭源Jar包脚本,基于Apache Ant构建CodeQL数据库☆37Updated 2 years ago
- ☆41Updated 4 years ago
- Apache Dubbo漏洞测试Demo及其POC☆61Updated 2 years ago
- 记录各语言、框架中危险的sink,个人代码审计、漏洞研究使用。☆116Updated 3 years ago
- 编译原理学习代码仓库☆23Updated 3 years ago