SummerSec / SPAToolLinks
静态程序分析工具 主要生成方法的CFG和.java文件的AST
☆129Updated last year
Alternatives and similar repositories for SPATool
Users that are interested in SPATool are comparing it to the libraries listed below
Sorting:
- A neo4j procedure for tabby☆124Updated last month
- 个 人使用CodeQL编写的一些规则☆176Updated 3 years ago
- Auto Code Audit Framework for Java☆96Updated 3 years ago
- JAVA IAST Example☆49Updated 3 years ago
- 当死去的记忆突然开始攻击我,我终于想起了我还写过一款十分十分垃圾的 rasp 靶场。☆78Updated 2 years ago
- 《Spring漏洞研究》☆46Updated 3 years ago
- 鹏 RocB - Java代码审计IDEA插件 SAST☆149Updated 3 years ago
- 不那么一样的 Java Agent 内存马☆264Updated last year
- Java agent without file 无文件的Java agent☆78Updated 3 years ago
- CodeQL 寻找 JNDI利用 Lookup接口☆163Updated 3 years ago
- ☆38Updated 3 years ago
- 简单实现的 Java RASP☆35Updated 4 years ago
- 利用agent hock指定的class,在jar运行周期内,用于跟踪被执行的方法,辅助做一些事情,比如挖洞啊☆126Updated 4 years ago
- Lessons for syntaxflow zero to hero☆50Updated 9 months ago
- 自动反编译闭源应用,创建codeql数据库☆305Updated 3 years ago
- Java表达式语句生成器☆191Updated last year
- fastjson 80 远程代码执行漏洞复现☆195Updated 2 years ago
- ☆107Updated 3 years ago
- ☆186Updated 8 months ago
- Java漏洞分析汇合☆142Updated 3 years ago
- 记录各语言、框架中危险 的sink,个人代码审计、漏洞研究使用。☆116Updated 3 years ago
- 代码审计自动化系统,底层架构为蜻蜓编排系统,墨菲SCA,fortify,SemGrep,hema☆28Updated 3 months ago
- ☆139Updated 2 years ago
- dubbo快速利用exp,基本上老版本覆盖100%。☆145Updated last week
- ☆48Updated last year
- 一款通过污点追踪发现Jsp webshell的工具(A tool to find Jsp Webshell through stain tracking)☆177Updated 3 years ago
- 项目监控工具 以及 Codeql 自动运行☆309Updated 2 years ago
- notes☆27Updated 2 years ago
- 基于AST的JSONP劫持漏洞自动化挖掘☆93Updated 4 years ago
- [fastjson 1.2.80] CVE-2022-25845 aspectj fileread & groovy remote classload☆92Updated 2 years ago