baidu-security / openrasp-testcasesLinks
OpenRASP 漏洞测试环境
☆313Updated 2 years ago
Alternatives and similar repositories for openrasp-testcases
Users that are interested in openrasp-testcases are comparing it to the libraries listed below
Sorting:
- 基于 Docker 的真实应用测试环境☆262Updated 2 years ago
- kiwi：安全源码审计工具☆247Updated 6 years ago
- IAST 灰盒扫描工具☆448Updated 3 years ago
- java source code static code analysis and danger function identify prog☆534Updated 6 years ago
- ☆147Updated 3 years ago
- ☆213Updated last year
- Security Knowledge Structure(安全知识汇总)☆247Updated 7 years ago
- xmind\code\articles for my personal blog 个人博客上的资源备份存储，也是个人分享的汇总☆259Updated 2 years ago
- 整理收集Struts2漏洞环境☆269Updated 7 years ago
- php code audit for cms vulnerabilities / 代码审计，对一些大型cms漏洞的复现研究，更新源码和漏洞exp☆279Updated 7 years ago
- A Java runtime information-gathering tool which uses the Java Attach API for information acquisition☆204Updated 4 years ago
- rmi、jndi、ldap、jrmp、jmx、jms一些demo测试☆310Updated 3 years ago
- POC-T强化版本 POC-S , 用于红蓝对抗中快速验证Web应用漏洞， 对功能进行强化以及脚本进行分类添加，自带dnslog等, 平台补充来自vulhub靶机及其他开源项目的高可用POC☆358Updated 5 years ago
- 跟踪真实漏洞相关靶场环境搭建☆241Updated 7 years ago
- 解密好的AWVS10.5 data/script/目录下的脚本☆267Updated 8 years ago
- QAQ Just study unserialize vulnerabilities in Java :)☆197Updated 7 years ago
- collection poc use pocsuite framework 收集一些 poc with pocsuite框架☆157Updated 7 years ago
- Demo code for post <Restrictions of JNDI Manipulation RCE & Bypass>☆267Updated 3 years ago
- 一个利用ASM对字节码进行污点传播分析的静态代码审计应用（添加了大量代码注释，适合大家进行源码学习）。也加入了挖掘Fastjson反序列化gadget chains和SQLInject（JdbcTemplate、MyBatis、JPA、Hibernate、原生jdbc等）静…☆454Updated 3 years ago
- fastjson remote code execute poc 直接用intellij IDEA打开即可 首先编译得到Test.class，然后运行Poc.java☆403Updated 3 years ago
- 攻击日志分析工具☆215Updated 6 years ago
- Web App Monitor☆228Updated 7 years ago
- ATT&CK 框架图中文翻译版 原为安恒奖品，自我二次翻译，修改了一些小的翻译错误问题，自我保存即可☆264Updated 5 years ago
- 📖本地文件包含漏洞实践源码及相应协议利用指南☆170Updated 8 years ago
- weblogic t3 deserialization rce☆268Updated 8 years ago
- Hunter作为中通DevSecOps闭环方案中的一环，扮演着很重要的角色，开源之后希望能帮助到更多企业。☆346Updated 3 years ago
- 《白帽子讲Web扫描》书籍参考代码☆103Updated 3 years ago
- 个人笔记☆215Updated 5 years ago
- 漏洞扫描：st2、tomcat、未授权访问等等☆288Updated 6 years ago
- 入侵分析时发现的Webshell后门☆275Updated 6 years ago