静态分析笔记 Static-Analysis-Notes 程序分析笔记 资源分享
☆187Jan 11, 2023Updated 3 years ago
Alternatives and similar repositories for Static-Analysis
Users that are interested in Static-Analysis are comparing it to the libraries listed below
Sorting:
- 带你畅游《软件分析》☆277Aug 1, 2022Updated 3 years ago
- 静态分析及代码审计自动化相关资料收集☆298Jul 29, 2022Updated 3 years ago
- CodeQL Java 全网最全的中文学习资料☆799Mar 18, 2022Updated 3 years ago
- 编译原理学习代码仓库☆23Jan 17, 2022Updated 4 years ago
- 《深入理解CodeQL》Finding vulnerabilities with CodeQL.☆1,754Nov 21, 2023Updated 2 years ago
- 记录学习codeql的过程☆394Jun 9, 2023Updated 2 years ago
- Codeql学习笔记☆900Apr 25, 2022Updated 3 years ago
- 静态程序分析工具 主要生成方法的CFG和.java文件的AST☆132Jul 12, 2023Updated 2 years ago
- A declarative static analysis tool for jvm bytecode based Datalog like CodeQL☆345Jan 6, 2024Updated 2 years ago
- Getting started with static program analysis. 静态程序分析入门教程。☆1,764Mar 20, 2024Updated last year
- 自动反编译闭源应用,创建codeql数据库☆316Mar 2, 2022Updated 3 years ago
- 一些阅读源码和Fuzzing 的经验,涵盖黑盒与白盒测试..☆1,075Aug 24, 2021Updated 4 years ago
- Go相关的安全研究☆234Nov 6, 2023Updated 2 years ago
- 一款通过污点追踪发现Jsp webshell的工具(A tool to find Jsp Webshell through stain tracking)☆176Jan 4, 2022Updated 4 years ago
- ☆274Oct 28, 2021Updated 4 years ago
- codemillx is a tool for CodeQL, extract the comments in the code and generate codeql module. 强化Go开源项目安全检测(内含开源项目漏洞挖掘方法)☆205Mar 19, 2022Updated 3 years ago
- Java 设计模式梳理☆36Jun 20, 2022Updated 3 years ago
- A CAT called tabby ( Code Analysis Tool )☆1,635Jan 17, 2026Updated last month
- 适用于burpsuite渗透工具的多类型恶意文件代码、漏洞测试payload、脚本代码快速获取复制的在线辅助插件。☆65Jan 31, 2022Updated 4 years ago
- Finding Java gadget chains with CodeQL☆184Jan 14, 2025Updated last year
- 分享几个直接可用的内存马,记录一下学习过程中看过的文章☆975Mar 23, 2022Updated 3 years ago
- 动态链接库加载工具☆20Jan 26, 2022Updated 4 years ago
- 一个利用ASM对字节码进行污点传播分析的静态代码审计应用(添加了大量代码注释,适合大家进行源码学习)。也加入了挖掘Fastjson反序列化gadget chains和SQLInject(JdbcTemplate、MyBatis、JPA、Hibernate、原生jdbc等)静…☆458Mar 24, 2022Updated 3 years ago
- Java漏洞学习笔记 Deserialization Vulnerability☆945Jun 14, 2023Updated 2 years ago
- IoT固件漏洞复现环境☆1,259Jul 30, 2023Updated 2 years ago
- <a href="sumsec.me"><img src="https://readme-typing-svg.demolab.com?font=Fira+Code&size=24&pause=1000&color=FDFDFD&background=13797800&ce…☆54Updated this week
- Tai-e assignments for static program analysis☆1,219Aug 28, 2025Updated 6 months ago
- Academic papers and articles that I read related to web hacking, fuzzing, etc. / 阅读过的Web安全方向、模糊测试方向的一些论文与阅读笔记☆380Jan 26, 2024Updated 2 years ago
- CodeQL 寻找 JNDI利用 Lookup接口☆166Apr 10, 2022Updated 3 years ago
- 利用链、漏洞检测工具☆373Jul 31, 2024Updated last year
- Share Things Related to Java - Java安全漫谈笔记相关内容☆1,991Apr 9, 2025Updated 10 months ago
- An easy-to-learn/use static analysis framework for Java☆1,760Feb 16, 2026Updated last week
- 《云原生安全:攻防实践与体系构建》资料仓库☆781Feb 19, 2023Updated 3 years ago
- CodeQL extractor for java, which don't need to compile java source☆348Nov 25, 2022Updated 3 years ago
- 《深入理解SAST静态应用安全测试》Static Application Security Testing.☆390Sep 28, 2025Updated 5 months ago
- JDBC Connection URL Attack☆438Sep 10, 2021Updated 4 years ago
- ZKar is a Java serialization protocol analysis tool implement in Go.☆647Feb 15, 2025Updated last year
- (与本人兴趣强相关的)各种安全or计算机资料收集☆754Apr 12, 2022Updated 3 years ago
- 🐛糊涂虫工具箱 About The Project https://sumsec.me/2022/Hack-Tools2Web.html☆49Jun 12, 2022Updated 3 years ago