Alternatives and similar repositories for jvm-rasp

Users that are interested in jvm-rasp are comparing it to the libraries listed below

• Lucifaer / head_first_javarasp

  View on GitHub
  一些Java RASP demo
  ☆11Sep 26, 2019Updated 6 years ago
• Ruil1n / after-deserialization-attack

  View on GitHub
  Java After-Deserialization Attack
  ☆79Apr 26, 2021Updated 4 years ago
• 0Kee-Team / JavaProbe

  View on GitHub
  A Java runtime information-gathering tool which uses the Java Attach API for information acquisition
  ☆204Apr 26, 2021Updated 4 years ago
• lightless233 / geye

  View on GitHub
  🚀Faster Github Monitor🚀
  ☆104Jan 7, 2023Updated 3 years ago
• iiiusky / java_rasp_example

  View on GitHub
  ☆28Jul 18, 2020Updated 5 years ago
• ring04h / iproxy

  View on GitHub
  HTTP/HTTPS proxy server by golang [high performance version]
  ☆54Jul 25, 2020Updated 5 years ago
• magerx / Eagle

  View on GitHub
  Eagle is a Web Application Attack and Audit Framework. Eagle has moved to Bitbucket.
  ☆11Nov 21, 2016Updated 9 years ago
• baidu-security / openrasp-iast

  View on GitHub
  IAST 灰盒扫描工具
  ☆448Jul 19, 2022Updated 3 years ago
• Ruil1n / helm-tiller-pwn

  View on GitHub
  ☆16Jan 5, 2021Updated 5 years ago
• Ant-FG-Lab / non_RCE

  View on GitHub
  ☆41Mar 10, 2021Updated 4 years ago
• zsdlove / Hades

  View on GitHub
  Static code auditing system
  ☆468Jan 8, 2021Updated 5 years ago
• LeadroyaL / fastjson-blacklist

  View on GitHub
  ☆835Jun 7, 2022Updated 3 years ago
• threedr3am / gadgetinspector

  View on GitHub
  一个利用ASM对字节码进行污点传播分析的静态代码审计应用（添加了大量代码注释，适合大家进行源码学习）。也加入了挖掘Fastjson反序列化gadget chains和SQLInject（JdbcTemplate、MyBatis、JPA、Hibernate、原生jdbc等）静…
  ☆458Mar 24, 2022Updated 3 years ago
• Afant1 / RemoteObjectInvocationHandler

  View on GitHub
  bypass JEP290 RaspHook code
  ☆63Sep 21, 2020Updated 5 years ago
• codeplutos / java-security-manager-bypass

  View on GitHub
  ☆153Jun 24, 2019Updated 6 years ago
• threedr3am / log-agent

  View on GitHub
  利用agent hock指定的class，在jar运行周期内，用于跟踪被执行的方法，辅助做一些事情，比如挖洞啊
  ☆125Jul 17, 2020Updated 5 years ago
• tongasdp / tongasdp-test

  View on GitHub
  TongASDP漏洞测试环境
  ☆35Mar 22, 2023Updated 2 years ago
• mogwailabs / deserialization-filter-blacklists

  View on GitHub
  Native Java serialization filter blacklist for common gadgets
  ☆20Sep 12, 2019Updated 6 years ago
• jiangsir404 / pbscan

  View on GitHub
  基于burpsuite headless 的代理式被动扫描系统
  ☆97Feb 10, 2020Updated 6 years ago
• threedr3am / tomcat-cluster-session-sync-exp

  View on GitHub
  tomcat使用了自带session同步功能时，不安全的配置（没有使用EncryptInterceptor）导致存在的反序列化漏洞，通过精心构造的数据包， 可以对使用了tomcat自带session同步功能的服务器进行攻击。PS:这个不是CVE-2020-9484，9484…
  ☆212May 19, 2020Updated 5 years ago
• codeplutos / MySQL-JDBC-Deserialization-Payload

  View on GitHub
  MySQL JDBC Deserialization Payload / MySQL客户端jdbc反序列化漏洞payload
  ☆13Feb 8, 2020Updated 6 years ago
• vidar-team / Hgame2019_writeup

  View on GitHub
  ☆19Mar 13, 2019Updated 6 years ago
• xing-xiao / Maneo-Detect-Behinder

  View on GitHub
  基于Flink实现实时冰蝎(Behinder)流量检测
  ☆39Sep 30, 2019Updated 6 years ago
• Barro / java-afl

  View on GitHub
  Binary rewriting approach with fork server support to fuzz Java applications with afl-fuzz.
  ☆91May 3, 2018Updated 7 years ago
• boundaryx / cloudrasp-log4j2

  View on GitHub
  一个针对防御 log4j2 CVE-2021-44228 漏洞的 RASP 工具。 A Runtime Application Self-Protection module specifically designed for log4j2 RCE (CVE-2021-442…
  ☆126Dec 11, 2021Updated 4 years ago
• Draven996 / jniwebshell

  View on GitHub
  ☆42Jul 23, 2019Updated 6 years ago
• woodpecker-framework / woodpecker-requests

  View on GitHub
  woodpecker-framework框架http发包库,专门为漏洞检测与利用场景设计。
  ☆72Nov 5, 2025Updated 3 months ago
• iiiusky / java_iast_example

  View on GitHub
  JAVA IAST Example
  ☆49Dec 13, 2021Updated 4 years ago
• PortSwigger / example-custom-scan-insertion-points

  View on GitHub
  ☆11Dec 1, 2023Updated 2 years ago
• Ramos-dev / graph4code

  View on GitHub
  超硬核！使用图数据技术发现软件漏洞
  ☆185Sep 1, 2021Updated 4 years ago
• Lonely-night / fastjson_gadgets_scanner

  View on GitHub
  ☆131Jun 17, 2022Updated 3 years ago
• momosecurity / mosec-pip-plugin

  View on GitHub
  用于检测python项目的第三方依赖组件是否存在安全漏洞。
  ☆23Aug 11, 2020Updated 5 years ago
• codeplutos / Conference

  View on GitHub
  ☆28Sep 11, 2019Updated 6 years ago
• C4o / FBI-Analyzer

  View on GitHub
  A Flexible Log Analysis System Based on Golang and Lua-Plugins. 插件化的准实时日志分析系统。
  ☆95Jan 11, 2021Updated 5 years ago
• HXSecurity / DongTai-agent-java

  View on GitHub
  Java Agent is a Java application probe of DongTai IAST, which collects method invocation data during runtime of Java application by dynam…
  ☆696Dec 25, 2023Updated 2 years ago
• Cryin / Paper

  View on GitHub
  Web Security Technology & Vulnerability Analysis Whitepapers
  ☆549Jan 1, 2019Updated 7 years ago
• welk1n / JNDI-Injection-Bypass

  View on GitHub
  Some payloads of JNDI Injection in JDK 1.8.0_191+
  ☆484Dec 9, 2020Updated 5 years ago
• fate0 / prvd

  View on GitHub
  PHP Runtime Vulnerability Detection
  ☆483May 25, 2019Updated 6 years ago
• kingkaki / ciscn_sshop

  View on GitHub
  参赛所用的sshop平台
  ☆11Jun 26, 2018Updated 7 years ago